Privacy Policy

Last updated: 15 June 2026

1. Introduction

Faturify ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our UAE e-invoicing platform. Faturify is operated by Mohamad Jahmi, sole founder and operator, pending legal entity registration.

This policy complies with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applies to all personal data we process.

2. Information we collect

We collect information you provide directly: business name, Tax Registration Number (TRN), email address, phone number, and billing address. We also collect invoice data including buyer details, line items, and VAT information necessary to generate PINT-AE compliant invoices.

We collect payment information through Stripe. We do not store card numbers on our servers. We use cookies for authentication (session tokens) and analytics (page views, feature usage). No advertising cookies are used.

3. How we use your information

We use your information to: generate PINT-AE compliant invoice XML; process payments; provide customer support; send transactional emails (invoices, reminders, VAT deadline alerts); comply with UAE tax law including the 5-year invoice retention mandate; and improve the platform through anonymised usage analytics.

4. Data processors (third parties)

We share your data with the following processors solely for the purposes stated:

• Supabase — database and authentication infrastructure. Data stored in EU region (Frankfurt). Privacy policy
• Stripe — payment processing. Card data processed by Stripe; we do not see or store card numbers. Privacy policy
• Resend — transactional email delivery. Email addresses shared only for sending invoices, reminders, and support replies. Privacy policy
• Anthropic — AI processing for the Jarvis voice assistant (Professional and Business plans only). Voice transcripts processed to generate invoice drafts and compliance answers. Transcripts are not stored by Anthropic beyond the API call. Privacy policy
• Sentry — error monitoring. Anonymised error traces collected; personally identifiable information is excluded from error reports. Privacy policy
• Vercel — hosting and analytics. Anonymised page view data collected through Vercel Analytics. No personal identifiers are sent to Vercel Analytics. Privacy policy

We do not share your data with any other third parties, do not sell your data, and do not use your data for advertising.

5. Data storage and security

Your data is stored on Supabase infrastructure with AES-256 encryption at rest and TLS 1.3 in transit. Invoice PDFs are archived in private encrypted storage accessible only to your account. We implement row-level security so no user can access another user's data.

6. Data retention

Invoice data is retained for a minimum of 5 years as required by Article 11 of Ministerial Decision No. 243 of 2025 and UAE Tax Procedures Law. Account data is retained for the duration of your subscription and up to 2 years after account closure, unless a longer period is required by law.

7. Your rights under UAE PDPL

Under the UAE Federal Decree-Law No. 45 of 2021, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data, subject to our legal retention obligations (5-year invoice archive)
• Right to data portability — receive your data in a structured, machine-readable format
• Right to withdraw consent — withdraw consent for processing where consent is the legal basis
• Right to object — object to processing of your data for purposes other than contractual necessity

To exercise any of these rights, email info@faturify.ae. We will respond within 30 days.

8. Cookies

We use the following cookies:

• Authentication cookies (essential) — session tokens issued by Supabase to keep you logged in. Required for the platform to function.
• Analytics cookies (non-essential) — anonymised page view data via Vercel Analytics. No personal identifiers. You may decline by not accepting our cookie notice.

We do not use advertising, tracking, or third-party social media cookies.

9. Data breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and, where required, the UAE Data Office, within 72 hours of becoming aware of the breach.

10. Contact

For privacy-related inquiries or to exercise your PDPL rights: info@faturify.ae

We aim to respond to all privacy requests within 30 days.