Privacy Policy

1. Introduction

Litiga Technologies FZ-LLC ("Litiga UAE," "we," "us," or "our") operates the Litiga UAE platform (the "Service"), a VAT compliance assistance tool for businesses operating in the United Arab Emirates.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the practices described herein.

2. Data Controller and Processor Relationship

This means:

• You determine the purposes and means of processing your clients' personal data
• We process data only according to your instructions and this Privacy Policy
• You are responsible for ensuring you have appropriate legal basis to process your clients' data
• We provide the technical infrastructure and security measures to protect that data

3. Information We Collect

3.1 Account Information

• Full name
• Email address
• Phone number
• Company/firm name
• Business address
• Tax Registration Number (TRN)
• Payment information (processed by third-party payment providers)

3.2 Client Data (Entered by Users)

• Client business names
• Client Tax Registration Numbers (TRNs)
• Invoice data (amounts, dates, descriptions)
• Transaction records
• VAT calculations and returns
• Supporting documentation references

3.3 Technical Data

• IP addresses
• Browser type and version
• Device information
• Access times and dates
• Pages viewed
• Referring URLs

3.4 Usage Data

• Features accessed
• Actions performed
• Error logs
• Performance metrics

4. Purpose Limitation

We collect and process data solely for VAT compliance purposes, including:

• Generating VAT Form 201 returns
• Validating VAT calculations
• Producing compliance reports
• Maintaining audit trails
• Providing customer support
• Improving the Service
• Complying with legal obligations

We do not use your data for:

• Marketing to third parties
• Profiling for advertising
• Sale to data brokers
• Any purpose unrelated to VAT compliance

5. No Sale of Data

This commitment is absolute and applies to:

• Account information
• Client data
• Transaction records
• VAT return data
• Any other information you provide

6. Data Sharing

We may share data only in the following limited circumstances:

6.1 Service Providers

We use trusted third-party service providers for cloud hosting, payment processing, email delivery, and customer support tools. All service providers are contractually bound to process data only as instructed, maintain appropriate security measures, not use data for their own purposes, and delete data upon termination of services.

6.2 Legal Requirements

We may disclose data if required by UAE law or regulation, court order or legal process, government authority request, or protection of our legal rights.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before data is transferred and becomes subject to a different privacy policy.

7. Data Security

We implement comprehensive security measures including:

Technical Measures

• Encryption in Transit: TLS 1.3 for all data transmission
• Encryption at Rest: AES-256 encryption for stored data
• Access Control: Role-based access control (RBAC)
• Authentication: Secure password hashing (bcrypt)
• Database Security: Row-Level Security (RLS) for tenant isolation

Organizational Measures

• Employee background checks
• Security awareness training
• Access limited to need-to-know basis
• Regular security audits
• Incident response procedures

8. Data Retention

9. Cross-Border Data Handling

Data Location: Primary data storage is in UAE/GCC region data centers where available, with geographically distributed backups for disaster recovery.

International Transfers: If data is transferred outside the UAE, we ensure adequate protection through contractual safeguards, comply with UAE data protection requirements, use service providers with appropriate certifications, and inform you of the countries involved.

10. Your Rights

You have the following rights regarding your data:

• Right of Access: Request a copy of your personal data and information about how it is processed
• Right to Rectification: Correct inaccurate or complete incomplete personal data
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements
• Right to Data Portability: Export your data in standard formats (CSV, JSON, PDF)
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of processing in certain circumstances

To exercise your rights, contact us at: privacy@litigauae.com

We will respond to requests within 30 days.

11. Cookies and Tracking

We use essential cookies for authentication, session management, security (CSRF protection), and user preferences. We may use analytics to understand Service usage, which is aggregated and anonymized where possible, not used for advertising, and not shared with third parties for their purposes.

12. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date, notified via email for material changes, and effective immediately upon posting unless otherwise stated. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Information

For privacy-related inquiries:

15. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes shall be subject to the exclusive jurisdiction of the courts of the UAE.