Privacy Policy

VanGiza (we, us), a company registered in the Netherlands, publishes Fatura Sahla. Privacy requests and questions: fatura-sahla@vangiza.com.

Business identity and TRN/TIN, invoice and credit-note contents, customer and supplier details, account email and phone, WhatsApp number and message content, uploaded documents and OCR results, and a device identifier for session security.

To provide invoicing, scanning, WhatsApp intake, directory management, verification workflows, transactional email, and on-demand XML export. We do not transmit invoices to the UAE tax authority on your behalf. We process this data to perform our agreement with you, and where a law requires us to keep or disclose it.

Our demo/production deployment uses: Supabase (database, authentication, storage, Edge Functions), Cloudflare (static site and web app hosting), Mistral AI (document scanning — documents you upload are sent for text extraction), Resend (transactional email), and Meta (WhatsApp Business API). We list only providers the deployed environment actually calls. These providers may process data outside the country where you live; where data leaves the European Economic Area we rely on the European Commission’s Standard Contractual Clauses.

We keep your data while your account is active. You can delete your account yourself at any time from Settings → Danger zone in the app: a staff or viewer user deletes only their own account, and a business owner deletes the business together with all of its invoices, contacts, documents and user accounts. Deletion takes effect immediately and cannot be undone; stored documents are removed shortly afterwards. You can also ask us at fatura-sahla@vangiza.com and we will delete your personal data within 30 days of that request. In both cases we keep only what we must retain longer to meet a legal, accounting or tax obligation — and only for as long as that obligation lasts.

You may request access to your personal data, correction, deletion, restriction of processing, and a portable copy, and you may object to processing where applicable law allows. Contact fatura-sahla@vangiza.com to exercise these rights. You can also complain to a data protection authority — the Dutch Autoriteit Persoonsgegevens, or the authority in the country where you live.

We use encrypted transport, tenant isolation, hashed credentials and tokens, and access controls aligned with the hosted Supabase deployment.

We will post material updates on this page with a revised date.