Back
Privacy Policy for Tadqiq
Last Updated: January 2, 2026
PRIVACY POLICY
Thank you for using Tadqiq ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and non-personal information when you use our website located at https://tadqiq.ae (the "Website") and our UAE E-Invoicing Pre-Submission Validator services (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
This Privacy Policy has been prepared in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL").
1. CONTROLLER INFORMATION
Tadqiq is the data controller responsible for your personal data. For any privacy-related inquiries, you may contact us at:
Email: hello@tadqiq.ae
Website: https://tadqiq.ae
2. INFORMATION WE COLLECT
2.1 Personal Data
We collect the following categories of personal data:
Identity Data: Name, username, or similar identifier
Contact Data: Email address, billing address
Technical Data: IP address, browser type and version, device information, operating system
Usage Data: Information about how you use our Website and Services
Transaction Data: Payment card details (processed by third-party payment processor Stripe; we do not store complete card information)
Profile Data: Company name, business type, industry sector, preferences, feedback
2.2 Invoice Data (NOT Persistently Stored)
CRITICAL PRIVACY PROTECTION: Invoice data that you upload to Tadqiq for validation is processed exclusively in volatile memory (RAM) and is NOT written to any persistent storage medium (databases, file systems, or backups).
Processing Method: Stateless, in-memory validation only
Retention Period: Maximum 1 hour in volatile memory
Deletion Method: Automatic memory deallocation upon processing completion
Compliance: This design ensures compliance with data minimization principles under UAE PDPL
2.3 Non-Personal Data
We use cookies and similar tracking technologies to collect:
- Analytics data (page views, session duration, navigation patterns)
- Technical information (browser capabilities, screen resolution)
- Performance metrics (load times, error rates)
For more information about our use of cookies, please see Section 9 below.
3. LEGAL BASIS FOR PROCESSING (UAE PDPL COMPLIANCE)
We process your personal data on the following legal bases:
3.1 Consent: You provide explicit, informed consent when creating an account or subscribing to our Services.
3.2 Contractual Necessity: Processing is necessary to perform our contract with you (Terms of Service) and deliver the Services you have requested.
3.3 Legitimate Interests: We process data for legitimate business interests such as fraud prevention, security, and service improvement, provided these interests do not override your data protection rights.
3.4 Legal Obligation: We may process data to comply with UAE legal and regulatory requirements.
4. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
Service Delivery:
- Process and validate invoice data against PINT AE standards
- Maintain and provide access to your user account
- Process subscription payments and manage billing
Communication:
- Send transactional emails (account confirmations, validation results)
- Provide customer support and respond to inquiries
- Send important service updates and security notifications
Analytics and Improvement:
- Analyze usage patterns to improve service performance
- Conduct research and development for new features
- Monitor and analyze trends, usage, and activities
Security and Compliance:
- Detect, prevent, and address fraud and security issues
- Enforce our Terms of Service
- Comply with legal obligations and regulatory requirements
5. DATA SHARING AND DISCLOSURE
5.1 Third-Party Service Providers
We share personal data with trusted third-party service providers who perform services on our behalf:
Payment Processing: Stripe (for subscription and payment processing)
Analytics: Google Analytics (for usage analytics and service improvement)
Email Services: Resend (for transactional and service emails)
Infrastructure: Vercel, Neon (for hosting and database services)
All third-party providers are contractually obligated to protect your personal data and use it only for the specific purposes we authorize.
5.2 We Do Not Sell Your Data
We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
5.3 Legal Requirements
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.
6. DATA RETENTION
6.1 Account Data
We retain your account data (name, email, company information) for as long as your account is active or as needed to provide you with Services.
6.2 Invoice Payloads
Invoice data is NOT retained. All validation payloads are processed in volatile memory only and are automatically deleted within 1 hour.
6.3 Transaction Records
We retain transaction and billing records for 7 years to comply with UAE financial and tax record-keeping requirements.
6.4 Deletion Requests
You may request deletion of your account and associated personal data at any time by contacting us at hello@tadqiq.ae. We will process deletion requests within 30 days, subject to legal retention requirements.
7. DATA SECURITY
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
Technical Measures:
- Encryption in transit (TLS/SSL) and at rest
- Secure authentication and access controls
- Regular security assessments and penetration testing
- Automated monitoring for security threats
Organizational Measures:
- Employee training on data protection practices
- Strict access controls (principle of least privilege)
- Incident response procedures
- Regular review and update of security policies
Despite our security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
8. YOUR RIGHTS UNDER UAE PDPL
Under the UAE Personal Data Protection Law, you have the following rights regarding your personal data:
8.1 Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
8.2 Right to Rectification: You may request correction of inaccurate or incomplete personal data.
8.3 Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
8.4 Right to Object: You may object to processing of your personal data for certain purposes.
8.5 Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
8.6 Right to Withdraw Consent: You may withdraw your consent to data processing at any time (this does not affect the lawfulness of processing based on consent before withdrawal).
To exercise any of these rights, please contact us at hello@tadqiq.ae. We will respond to your request within 30 days.
9. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies to enhance your experience and collect information about your use of our Services.
Types of Cookies We Use:
Essential Cookies: Necessary for the Website to function properly (authentication, security)
Analytics Cookies: Help us understand how visitors use our Services (Google Analytics)
Preference Cookies: Remember your settings and preferences
You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our Services.
10. CROSS-BORDER DATA TRANSFERS
Your personal data may be transferred to and processed in countries outside the UAE where our service providers operate. We ensure that such transfers comply with UAE PDPL requirements and that adequate safeguards are in place to protect your data.
11. CHILDREN'S PRIVACY
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@tadqiq.ae.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by:
- Posting the updated Privacy Policy on this page with a new "Last Updated" date
- Sending an email notification to your registered email address
Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
13. DATA PROTECTION OFFICER
While UAE PDPL does not currently require all organizations to appoint a Data Protection Officer (DPO), we are committed to data protection best practices. For privacy-related inquiries, please contact hello@tadqiq.ae.
14. COMPLAINTS AND REGULATORY AUTHORITY
If you believe we have not handled your personal data in accordance with this Privacy Policy or UAE PDPL, you have the right to lodge a complaint with the UAE Data Office (once operational) or other competent regulatory authority.
15. CONTACT INFORMATION
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:
Email: hello@tadqiq.ae
Website: https://tadqiq.ae
We are committed to resolving privacy concerns promptly and transparently.
16. ACKNOWLEDGMENT
By using Tadqiq, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
Thank you for trusting Tadqiq with your data. We are committed to protecting your privacy and ensuring UAE PDPL compliance.