Privacy Policy
Last updated: 2026-08-24
This Privacy Policy explains how Simplify Your Work FZ-LLC (“Simplify”) collects, uses, and protects personal data about visitors to our website and users of our platform. We are committed to handling your personal data in a manner that complies with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and, where relevant, the EU General Data Protection Regulation (GDPR).
1. Data we collect
- Account data: name, email, phone, company, role.
- Usage data: pages visited, features used, device + browser information, IP-derived country.
- Content data: tenant data you load into the platform (customers, employees, invoices). This is processed on your behalf per our Data Processing Addendum.
2. How we use it
- To provide, secure, and improve the Service.
- To communicate with you about your account and product updates.
- To comply with legal and regulatory obligations (VAT, AML, audit).
- With your consent, for marketing and product analytics.
3. Legal basis
We process personal data on the basis of (a) your consent, (b) the performance of our contract with you, (c) our legitimate interest in running a secure and improving service, and (d) legal obligations.
4. Sharing
We do not sell your personal data. We share it only with sub-processors (infrastructure, email, analytics) under contracts that require equivalent protections. A list is available on request.
5. International transfers
Data may be processed in data-centres outside the UAE when required for the Service (primarily the United States, with some processing in the EU). We rely on appropriate safeguards including Standard Contractual Clauses.
6. Retention
Tenant data is retained while your subscription is active and for 30 days after termination (for export). Transactional records are retained for at least five years per UAE VAT and tax legislation.
7. Your rights
Subject to UAE PDPL, you can request access, correction, deletion, restriction, objection, and portability of your personal data. Contact [email protected].
8. Security
We use industry-standard controls including TLS-in-transit, at-rest encryption, access controls, audit logging, and regular security testing. No system is perfectly secure; in the event of a breach we will notify affected users per applicable law.
9. Children
The Service is not directed to children under 18. We do not knowingly collect personal data from children.
10. Changes
We may update this policy. Material changes will be notified by email and in-product.
11. Contact
Data Protection Officer: [email protected].
Version: 2026-08-24