Privacy policy
Version 2026-10 · Last updated 18 October 2026
This policy explains how SoloBooks by Falajo (“we”) processes personal data, in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Controller: [Falajo legal entity name and licence number — TO COMPLETE before launch]. Contact: [email protected].
What we collect
- Account: email address, language, consent date and version.
- Company settings you enter: company name, tax period dates, incorporation date, VAT status.
- Documents you upload (receipts, invoices) and the entries extracted from them, which may contain names, addresses, TRNs and amounts of third parties.
- An activity log of uploads, corrections and approvals (used for your evidence pack).
- Technical: one session cookie needed to keep you signed in. No advertising or tracking cookies.
Why, and on what basis
To provide the service you sign up for: store your documents, suggest entries, compute your totals and exports. Basis: your explicit consent, given at sign-up, and performance of our agreement with you. You can withdraw consent at any time by deleting your account.
Automated processing
An AI model reads your documents and suggests values. Nothing is used in your totals until you review and approve it. You can always enter or correct values manually.
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database (D1), file storage (R2 or D1), AI reading of documents (Workers AI) | Global network; may be outside the UAE |
| Resend | Sign-in emails | United States |
| Google (Gemini API, paid tier), only if enabled instead of Workers AI | AI reading of documents | May be outside the UAE |
| Meta (WhatsApp Business), later | Receiving documents by WhatsApp, once launched | May be outside the UAE |
Some processing happens outside the UAE. By consenting you agree to this cross-border transfer, which we limit to these providers and to what the service needs.
How long we keep data
While your account is open. When you delete your account, documents and entries are deleted immediately from our database and storage; provider backups expire on their own schedules. You remain responsible for keeping your own records for the legal period (download your evidence pack first).
Your rights
Access and export (Settings → export), correction (edit any entry), deletion (Settings → delete account), withdrawal of consent, objection and restriction, and complaint to the UAE Data Office. Write to [email protected].
Security
Encrypted connections, sign-in links that expire after 30 minutes and work once, HttpOnly session cookies, per-account access checks on every file.
The SoloBooks team