Privacy Policy

1. Information you provide

• Account information: your email address, name, and an optional phone number when you register. Your password is handled by our authentication provider; it is stored in hashed form and we cannot see it.
• Business information: details about your business, such as business name, Tax Registration Number (TRN), address, email, phone, logo, industry, team size, and invoice settings (currency, VAT rate, payment terms).
• Invoice information: the invoices you create, including line items, amounts, VAT, dates, and statuses.
• Customer information you enter: information you add about your own customers, such as their name, email, phone, TRN, address, photo, and notes.
• Files: business logos and customer photos that you upload.
• E-invoicing waitlist: if you join the waitlist on our e-invoicing guide, we collect your email, company name, invoices per month and VAT status (plus the campaign tags and referring site that brought you to the page), and use them only to contact you about e-invoicing setup with Fatura Go. You can ask us to delete them at any time via support@invoicefatura.com.

2. Information stored on your device

An authentication token is stored securely on your device so you can stay signed in.

3. What we do not collect

In the Fatura Go mobile app and web application, we do not use advertising or marketing SDKs. We do not track you across other apps or websites. We do not use third-party analytics or crash-reporting tools inside the product. We do not collect your location and we do not access your contacts. We do not sell your personal data.

4. Device permissions

The app asks for access to your camera and photo library only so you can add your business logo and customer photos. No other device data is accessed. On the web application, you can upload a business logo or customer photos from your device using your browser; no other device access is requested.

5. How we use your information

To create and operate your account, authenticate you, store and display your business, customer, and invoice data, generate invoice PDFs, and send invoices by email on your behalf when you choose to. We also use your contact details to respond to support requests.

6. Customer data — your responsibility

When you enter information about your own customers, you act as the controller of that personal data, and Fatura Go acts as a processor that stores and processes it only to provide the service to you. You are responsible for ensuring you have a lawful basis to collect and use your customers' personal data and for informing your customers as required by applicable law.

7. Service providers (sub-processors)

We rely on a small number of trusted providers to run the service:

• Supabase — authentication, database, and file storage.
• Railway — hosting for backend services, including invoice PDF generation.
• Vercel — hosting for the web app, in the EU.
• Resend — sending emails, such as invoices you send to your customers.
• Apple — distribution of the app through the App Store.
• Google, Meta, Microsoft, and TikTok — analytics and advertising measurement on this marketing website only (see section 13). They are not used inside the Fatura Go mobile app or web application for this purpose.

These providers process data on our behalf and only as needed. Your data may be stored or processed on servers located outside the UAE: the database on Supabase in Frankfurt, Germany (AWS eu-central-1); API servers on Railway in the Netherlands (europe-west4); and the web app on Vercel (EU).

8. Data retention

We keep your information for as long as your account is active. After a business or account is deleted, we keep no copy of the business data or uploaded files. The only things that may remain are support tickets, anonymised by removing your user ID and reply email address, and records we must keep as a company, such as billing and payment records held with our payment provider.

9. Your rights and account deletion

You can permanently delete a business at any time under Settings → Delete business, or your whole account under Settings → Account → Delete account. Before deletion unlocks, you download a complete archive of the business's records. Deletion then runs after a 14-day grace period, during which you can cancel it, and we email you a reminder 3 days before. See Deleting your data. Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you may also have rights to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, email support@invoicefatura.com.

10. Deleting your data

You can delete a business, or your whole account, at any time from Settings.

• Archive first: before deletion unlocks, you must download a complete archive of the business's records — sales PDFs, supplier bills and credit notes, expenses with receipts, filed VAT returns and VAT reports, ledger reports, clients, suppliers and products, and payroll. The archive is free on every plan, and you can download it at any time from Settings → Data export.
• 14-day grace period: deletion is scheduled 14 days ahead and can be cancelled during that time. We email you a reminder 3 days before it runs.
• Permanent deletion: after the grace period, we permanently delete the business data and uploaded files (PDFs, receipts, logos) and, if you deleted your account, your login. We keep no copy of the business data or files after deletion.
• Your record-keeping duty: your business remains responsible for keeping its records for as long as UAE law requires — currently at least 5 years for VAT records (longer for some real-estate records) and 7 years for corporate tax records. Check the current requirements with the Federal Tax Authority or a tax adviser. This is not legal or tax advice.
• Archiving instead: you can archive a business instead of deleting it. An archived business is read-only: no new or changed records, but viewing and exporting still work, and you can reopen it.
• Team members: if you are a team member of a business owned by someone else, deleting your account simply removes you from that business. The owner's records are not affected.

11. Security

We take reasonable measures to protect your information, including hashed passwords and secure storage of authentication tokens. However, no method of transmission or storage is completely secure.

12. Children

Fatura Go is intended for business use by adults and is not directed to children under 18.

13. Analytics and session recording

This marketing website (invoicefatura.com) uses third-party tools to understand how the site is used and whether marketing works. Google Analytics / Ads, Meta Pixel, Microsoft Clarity, and (where used) TikTok load when you visit this site. A cookie notice may appear so you can acknowledge this; it does not block these scripts from loading. This is separate from the Fatura Go mobile app and web application at app.invoicefatura.com, which do not use these marketing pixels or session recording.

• Google Analytics 4 (Google) — usage statistics such as pages viewed, approximate location derived from IP, device type, and how visitors move through the site. Google Analytics may also link activity on invoicefatura.com and app.invoicefatura.com so we can understand the path from visiting this site to creating an account. Campaign tags (UTM parameters) from ads or links may be carried through to the app when you click a sign-up link.
• Meta Pixel (Meta Platforms) — advertising measurement: whether someone who saw or clicked an ad later visited or signed up, so we can measure and improve campaigns.
• Microsoft Clarity (Microsoft) — session recording and heatmaps. Clarity records how pages are used (clicks, scrolling, and navigation) so we can see where the site is confusing. Recordings are processed by Microsoft. We configure Clarity in strict masking mode: sensitive content is masked in the browser before it is sent, so customer names, Tax Registration Numbers (TRNs), addresses, contact details, invoice line items, notes, monetary amounts, and document previews are never captured in recordings. Billing and payment pages are excluded entirely — Clarity is not loaded there. We do not set a Clarity user ID from your email address.

We may also use Google Ads and TikTok Pixel for advertising measurement on this website, in the same way as the Meta Pixel.

Google, Meta, Microsoft, and (where used) TikTok act as processors for this website analytics and advertising data. For Microsoft, see Microsoft's Privacy Statement.

How to opt out

We do not offer a separate consent switch that turns these tools off before they load. You can still limit tracking with your browser and industry tools:

• Enable Do Not Track or Global Privacy Control in your browser settings (support varies by browser and by each vendor).
• Use an ad blocker or tracker-blocking extension, which typically blocks Analytics, pixels, and Clarity.
• Opt out of Google Analytics site measurement via Google's Analytics opt-out browser add-on.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.

15. Contact

Questions about this policy? Email support@invoicefatura.com.