← Back · DRAFT prepared for owner approval (D-43) - legal review recommended.

Privacy Policy

What we collect

• Account data: company name, TRN, address, logo; user names, emails, mobile numbers.
• Business data you enter: parties, documents, attachments, templates.
• Identity numbers of your customers: only passport number and Emirates ID number. Scanned ID images are processed in memory and never stored.
• Technical logs: logins, IP address, actions (activity log), for security and support.

How we use it

Only to provide the Service: producing and sharing documents, sending codes and notices, backups, and preventing abuse. We do not sell data or use it for advertising.

Isolation and security

Each company's data is separated at database level (row-level security). Passwords are hashed; one-time codes are hashed and expire after 10 minutes; all traffic uses HTTPS. ID numbers are masked unless a user has permission to see them, and each unmasking is logged.

Sharing

Documents leave the Service only when you email them or create a share link (expires after 7 days by default and can be revoked). The public QR verify page shows only company, number, date, amount and status with a masked party name.

Retention

Data is kept while your account exists. Backups are kept for 30 days (daily) and 12 months (monthly). On request we delete a closed company's data, subject to legal retention duties.

Your rights

The Owner can export all company data at any time and ask for correction or deletion. Contact info@softn.ltd.