This Privacy Policy explains how Emara Invoice, operated by Momentum Tech ("we", "us"), collects, uses, and protects information when you use our platform, website, and APIs (the "Service"). We process personal data in accordance with applicable UAE law, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL").
1. Who we are (Controller)
Momentum Tech is the controller for personal data processed about your account and website use. For invoice data you submit to be converted, we generally act as a processor on your behalf — you remain the controller of that data.
2. Information we collect
- Account & company data: name, email, password (hashed), company name, Tax Registration Number (TRN), and plan.
- Invoice / transaction data: the invoice content you submit for conversion (which may include names, addresses, TRNs, line items, and amounts of your customers and suppliers).
- Technical & usage data: IP address, device/browser information, log data, API usage, and timestamps.
- Cookies: essential cookies used to keep you signed in and secure the Service.
3. How we use your data
- To provide, operate, and secure the Service (convert and validate invoices, run your dashboard and APIs).
- To authenticate users, manage accounts, and process payments.
- To provide support and communicate service-related notices.
- To monitor, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal, tax, and regulatory obligations.
- To improve the Service (using aggregated or de-identified data where possible).
4. Legal bases for processing
We process personal data where: it is necessary to perform our contract with you; we have a legitimate interest (such as securing and improving the Service); we must comply with a legal obligation; or you have given consent (which you may withdraw at any time).
5. Sharing & sub-processors
We do not sell your personal data. We share it only as needed to run the Service, including with:
- Accredited Service Providers (ASPs) you instruct us to forward invoices to.
- Infrastructure and hosting providers used to operate the Service.
- Payment processors for billing.
- Authorities where required by law or valid legal process.
Our sub-processors are bound by appropriate confidentiality and data-protection obligations.
6. International transfers
Where personal data is transferred outside the UAE, we apply appropriate safeguards consistent with the PDPL and only transfer to jurisdictions or under mechanisms that provide an adequate level of protection.
7. Data retention
We retain account and invoice data for as long as your account is active and as needed to provide the Service, and thereafter as required to meet legal, tax, and accounting obligations. You may request deletion subject to those obligations.
8. Security
We use technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, network protections, and logging. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents promptly.
9. Your rights
Subject to the PDPL and applicable law, you may have the right to: access your personal data; request correction or deletion; object to or restrict certain processing; withdraw consent; and request portability. To exercise these rights, contact us using the details below. You may also have the right to lodge a complaint with the competent UAE data protection authority.
10. Cookies
We use strictly necessary cookies to operate and secure the Service (for example, to keep you logged in). You can control cookies through your browser settings, but disabling essential cookies may affect functionality.
11. Children
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified through the Service or by email, and the "Last updated" date above will change.
13. Contact us
For privacy questions or to exercise your rights, contact us at privacy@emarainvoice.com.