Privacy policy
Last updated: 29 September 2026
This policy explains how ("we") handles personal data on this website and in the Quanto service, in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that apply.
1. Our role
- For the website and for account and billing information, we decide how the data is used (we are the controller).
- For Customer Data put into the Service by our customers (project records, letters, photos, names of project staff), the customer decides how it is used and we process it on the customer's behalf.
2. What we collect
- Contact and enquiry data: name, company, position, email, phone, and your message, when you use our forms or contact us.
- Account data: name, email, company, role, language, password (stored only in scrambled form), and sign-in records.
- Billing data: company legal details, licence and TRN, invoices and payments. We do not store card details.
- Usage and security data: logs of actions in the Service, dates, times and IP addresses, used to secure and support the Service.
- Customer Data: whatever customers and their invited parties put into the Service.
3. Why we use it
- To provide, secure and support the Service and to answer enquiries.
- To invoice and collect payment, and to meet legal and tax obligations.
- To send service messages (notifications, reminders, renewal notices). We send marketing only if you have agreed, and you can stop it at any time.
- To improve the Service, using aggregated information that does not identify you.
4. Cookies
This website uses no tracking or advertising cookies. To count visits it uses Cloudflare Web Analytics, which sets no cookies and does not track individual visitors. The Quanto app uses a single session cookie to keep you signed in, and remembers your language choice.
5. Who we share it with
We share personal data only with service providers that help us run the Service, under contracts that protect it:
- Cloud hosting and database (Render) and file storage (Cloudflare);
- Email delivery and the website form service (Web3Forms);
- The AI model provider that powers the AI Assistant, which processes the questions asked and the related records only to answer them;
- Integrations you choose to connect, such as Zoho Books.
Within a project, information is shared with the invited parties according to the permissions set by the customer. We never sell personal data. We disclose data to authorities only when the law requires it.
6. Where data is stored
The Service is hosted in secure cloud data centres in the European Union (Germany), which may mean data is transferred outside the UAE with appropriate safeguards. Customers can choose hosting in their own country through a paid hosting add-on (in-country hosting or a dedicated environment).
7. How long we keep it
- Enquiries: up to 2 years after the last contact.
- Account and Customer Data: for the subscription, plus 90 days for export, plus up to 90 days in backups.
- Invoices and payment records: as long as UAE tax and commercial law requires.
8. Security
Encrypted connections, encrypted storage of integration keys, separated company data, access limited by role, activity logs and regular backups.
9. Your rights
You may ask to access, correct or delete your personal data, to restrict or object to its use, and to receive a copy of it. For data inside a customer's projects, we pass your request to that customer. Contact . If you are not satisfied, you may complain to the UAE Data Office.
10. Changes
We will post any change on this page with its date, and tell customers by email of important changes.