Privacy Policy
Last updated: 17 September 2026
Hasiib helps UAE businesses prepare their Corporate Tax return. To do that we process business and financial data. This page explains what we collect, why, who else sees it and what you can ask us to do with it.
Who is responsible
Hasiib is operated by [Company legal name], [address], United Arab Emirates. For any question about your data, write to support@hasiib.ae.
What we collect
Account data: your name, email address, phone number and password (stored only as a hash). Company data: company name, trade licence number, emirate, financial year, Tax Registration Number. Filing data: the revenue, expenses and reliefs you enter, and the returns produced from them. Documents and bank statements: the files you upload and the transactions read from them. Billing data: your subscription status and the customer identifier from our payment provider. We never see or store your card details. Technical data: log and usage data needed to run and secure the service.
Why we process it
To provide the service you signed up for: calculating your tax position, producing your return and reminding you of deadlines. To take payment for a paid plan. To keep the service secure and to fix faults. We do not sell your data and we do not use it for advertising.
Who else processes it
Supabase (database, authentication and file storage), Vercel (hosting) and Stripe (payments) process data on our behalf as our processors. These providers may store data outside the United Arab Emirates. We only share what each one needs to do its job. If you use the optional PDF reading, that statement is sent to Anthropic (Claude) to be read; Anthropic processes it on our behalf and does not use it to train models.
How long we keep it
We keep your account and filing data for as long as you have an account. Tax records generally have to be kept for seven years under UAE law, so we keep filings and the documents attached to them for that period unless you ask us to delete them earlier and no legal duty prevents it. Deleted files are removed from storage; backups roll off within 30 days.
Your rights
Under the UAE Personal Data Protection Law you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@hasiib.ae and we will respond within 30 days. You can also ask us to export everything you have entered.
Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to your data in the application is limited to your own account through database level access rules. We do not have a formal security certification such as SOC 2; if that matters to you, ask us what we do have before you sign up.
Cookies
We use cookies that are necessary for the service: keeping you signed in and remembering your language. We do not use advertising cookies.
Changes
If we change this policy we will update the date at the top and, for significant changes, tell you by email before they take effect.
Questions about this document? Write to support@hasiib.ae and we will answer.