Privacy Policy

1. Information you provide

• Account information: your email address, name, and an optional phone number when you register. Your password is handled by our authentication provider; it is stored in hashed form and we cannot see it.
• Business information: details about your business, such as business name, Tax Registration Number (TRN), address, email, phone, logo, industry, team size, and invoice settings (currency, VAT rate, payment terms).
• Invoice information: the invoices you create, including line items, amounts, VAT, dates, and statuses.
• Customer information you enter: information you add about your own customers, such as their name, email, phone, TRN, address, photo, and notes.
• Files: business logos and customer photos that you upload.

2. Information stored on your device

An authentication token is stored securely on your device so you can stay signed in.

3. What we do not collect

In the Fatura Go mobile app and web application, we do not use advertising or marketing SDKs. We do not track you across other apps or websites. We do not use third-party analytics or crash-reporting tools inside the product. We do not collect your location and we do not access your contacts. We do not sell your personal data.

4. Device permissions

The app asks for access to your camera and photo library only so you can add your business logo and customer photos. No other device data is accessed. On the web application, you can upload a business logo or customer photos from your device using your browser; no other device access is requested.

5. How we use your information

To create and operate your account, authenticate you, store and display your business, customer, and invoice data, generate invoice PDFs, and send invoices by email on your behalf when you choose to. We also use your contact details to respond to support requests.

6. Customer data — your responsibility

When you enter information about your own customers, you act as the controller of that personal data, and Fatura Go acts as a processor that stores and processes it only to provide the service to you. You are responsible for ensuring you have a lawful basis to collect and use your customers' personal data and for informing your customers as required by applicable law.

7. Service providers (sub-processors)

We rely on a small number of trusted providers to run the service:

• Supabase — authentication, database, and file storage.
• Railway — hosting for backend services, including invoice PDF generation.
• Resend — sending emails, such as invoices you send to your customers.
• Apple — distribution of the app through the App Store.
• Google, Meta, Microsoft, and TikTok — analytics and advertising measurement on this marketing website only (see section 12). They are not used inside the Fatura Go mobile app or web application for this purpose.

These providers process data on our behalf and only as needed. Your data may be stored or processed on servers located outside the UAE, in the regions used by Supabase and Railway: Frankfurt, Germany (EU region).

8. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data, except where we must retain limited information to comply with legal obligations.

9. Your rights and account deletion

You can permanently delete your account and all your data at any time from within the app, under Settings → Account → Delete account. Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you may also have rights to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, email support@invoicefatura.com.

10. Security

We take reasonable measures to protect your information, including hashed passwords and secure storage of authentication tokens. However, no method of transmission or storage is completely secure.

11. Children

Fatura Go is intended for business use by adults and is not directed to children under 18.

12. Analytics and session recording

This marketing website (invoicefatura.com) uses third-party tools to understand how the site is used and whether marketing works. Google Analytics / Ads, Meta Pixel, Microsoft Clarity, and (where used) TikTok load when you visit this site. A cookie notice may appear so you can acknowledge this; it does not block these scripts from loading. This is separate from the Fatura Go mobile app and web application at app.invoicefatura.com, which do not use these marketing pixels or session recording.

• Google Analytics 4 (Google) — usage statistics such as pages viewed, approximate location derived from IP, device type, and how visitors move through the site. Google Analytics may also link activity on invoicefatura.com and app.invoicefatura.com so we can understand the path from visiting this site to creating an account. Campaign tags (UTM parameters) from ads or links may be carried through to the app when you click a sign-up link.
• Meta Pixel (Meta Platforms) — advertising measurement: whether someone who saw or clicked an ad later visited or signed up, so we can measure and improve campaigns.
• Microsoft Clarity (Microsoft) — session recording and heatmaps. Clarity records how pages are used (clicks, scrolling, and navigation) so we can see where the site is confusing. Recordings are processed by Microsoft. We configure Clarity in strict masking mode: sensitive content is masked in the browser before it is sent, so customer names, Tax Registration Numbers (TRNs), addresses, contact details, invoice line items, notes, monetary amounts, and document previews are never captured in recordings. Billing and payment pages are excluded entirely — Clarity is not loaded there. We do not set a Clarity user ID from your email address.

We may also use Google Ads and TikTok Pixel for advertising measurement on this website, in the same way as the Meta Pixel.

Google, Meta, Microsoft, and (where used) TikTok act as processors for this website analytics and advertising data. For Microsoft, see Microsoft's Privacy Statement.

How to opt out

We do not offer a separate consent switch that turns these tools off before they load. You can still limit tracking with your browser and industry tools:

• Enable Do Not Track or Global Privacy Control in your browser settings (support varies by browser and by each vendor).
• Use an ad blocker or tracker-blocking extension, which typically blocks Analytics, pixels, and Clarity.
• Opt out of Google Analytics site measurement via Google's Analytics opt-out browser add-on.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.

14. Contact

Questions about this policy? Email support@invoicefatura.com.