Privacy Policy
Last updated: September 2026 · Aligned with UAE PDPL (Federal Decree-Law No. 45 of 2021).
1. What we collect
Account data (name, work email), company profile (name, sector, jurisdiction, headcount), documents you upload (trade license, employee lists), and product usage events. In demo mode all data stays in your browser's local storage and never leaves your device.
2. How we use it
To calculate your compliance position, generate your action plan, and improve the product. Employee lists uploaded as CSV/Excel are parsed locally in your browser and are not transmitted to our servers. Documents processed by AI OCR (trade licenses) are sent to our AI provider solely for extraction.
3. UAE PDPL alignment
We process personal data in line with Federal Decree-Law No. 45 of 2021 (PDPL): lawful basis of legitimate interest in providing the service you requested, data minimisation, and no sale of personal data. Employee nationality data is used solely for Emiratisation quota calculations.
4. Retention & deletion
Data is retained while your account is active. You can delete individual documents at any time, or delete your entire workspace and account — after which data is removed from production systems within 30 days and from encrypted backups within 90 days.
5. Your rights
Access, correction, deletion, and portability requests can be made from your dashboard or by emailing privacy@complyai.ae. We respond within 30 days as PDPL requires.
6. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is limited to personnel who need it to run the service. Payment data is handled entirely by our PCI-compliant payment processor and never touches our servers.