Privacy Policy

Last updated: 4 June 2026

1. Introduction

Fawateer (“Fawateer”, “we”, “us”, or “our”) is operated by NoorBasira AI Technologies FZE, a company established in the Dubai Silicon Oasis (DIEZA) free zone, United Arab Emirates. This Privacy Policy explains how we collect, use, store, share, and protect personal and business data when you use the Fawateer platform available at fawateer.ai (the “Service”).

We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and, where applicable, other data protection laws. By creating an account or using the Service, you acknowledge the practices described in this Policy.

2. Who this Policy applies to

This Policy applies to: (a) users who hold a Fawateer account; and (b) individuals and businesses identified within documents you upload — for example, vendors, customers, and people named on invoices you process through the Service.

3. Information we collect

a. Account and business information. Information you provide when registering and using the Service, including your name, email address, company/business name, Tax Registration Number (TRN), trade licence number, emirate of registration, and VAT period.

b. Uploaded documents and extracted data. The invoices and related files you upload, and the data we extract from them — including vendor and customer names, TRNs, addresses, line items, amounts, VAT figures, and dates. These documents may contain personal data belonging to third parties.

c. Usage and technical data. Information about how you interact with the Service, including documents processed, feature usage, and technical/log data such as IP address, device and browser type, and timestamps.

d. Payment information. When you subscribe, payment is processed by our payment provider (Stripe). We do not store your full card details. We receive limited billing information such as subscription status, billing name, and the last four digits of your card.

4. How we use your information

We use your information to:

provide and operate the Service, including processing and extracting data from your documents and generating VAT-compliance outputs;
store and manage your documents and account;
process your subscription and payments;
provide customer support and respond to your requests;
maintain the security and integrity of the Service and prevent fraud or misuse;
comply with our legal, tax, and regulatory obligations;
improve and develop the Service, using aggregated or de-identified data where practicable; and
send you service-related communications.

5. Legal basis for processing

We process personal data where one or more of the following applies: you have given consent; processing is necessary to perform our contract with you (i.e., to provide the Service); processing is necessary to comply with a legal obligation; or processing is in our legitimate business interests, balanced against your rights and freedoms.

For personal data of third parties contained in documents you upload, you confirm that you have the necessary authority and lawful basis to provide that data to us for processing on your behalf.

6. Artificial intelligence (AI) processing

Fawateer uses AI to read and extract structured data from the documents you upload. To do this, document content is securely transmitted to a commercial AI processing provider, solely to perform extraction and classification, under terms that prohibit the use of your content to train AI models.

We do not use your document content to train our own or any third party’s AI models for purposes unrelated to providing the Service.

7. Service providers and sub-processors

We share data with trusted service providers who help us operate the Service, under appropriate data-protection terms. We do not sell your personal data. These providers support functions including:

cloud application hosting, user accounts, and database;
secure storage of your uploaded documents;
AI-based extraction of data from your documents (see Section 6);
automation of our document-processing workflows;
payment and subscription processing; and
business email and related operations.

We may add or change service providers from time to time and will maintain appropriate data-protection terms with each. A current list of our key sub-processors is available to business customers on request. International transfers are addressed in Section 8.

8. Storage, location, and international transfers

Your data may be stored or processed by us and our service providers within the United Arab Emirates, the European Union, and/or the United States. Where personal data is transferred outside the UAE, we apply contractual and organisational safeguards intended to ensure a level of protection consistent with the PDPL.

9. Data retention

We retain your information for as long as your account is active and as necessary to provide the Service. Following account closure, we retain data only for the period required to meet our legal, tax, and accounting obligations. Because the Service processes tax-related documents, certain records may be retained for the period required under UAE tax law (currently five years from the end of the relevant tax period, and longer where the law requires), after which they are deleted or anonymised. You may request deletion as set out below; however, we may retain certain information where required by law.

10. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Subject to the PDPL and other applicable laws, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion; restrict or object to certain processing; withdraw consent; and request a copy of your data in a portable format. To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

12. Personal data within uploaded documents

For personal data of third parties contained in documents you upload, you act as the data controller and Fawateer acts as a processor on your behalf, processing that data only to provide the Service and on your instructions. You are responsible for ensuring you have a lawful basis to upload and process such data.

13. Cookies and similar technologies

The Service uses cookies and similar technologies that are necessary for authentication and core functionality, provided through our hosting provider (Bubble). You can manage cookies through your browser settings; disabling essential cookies may affect the Service’s functionality.

14. Children

The Service is intended for businesses and is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, notify you.

16. Contact us

NoorBasira AI Technologies FZE
Dubai Silicon Oasis, Dubai, UAE
Email: [email protected]