Privacy Policy

Fatouraty ("we", "us") provides accounting and e-invoicing software for businesses in the MENA region. This policy explains what personal and financial data we process, why, and the rights you have over it. It applies to our website, web app, and mobile app.

We are the controller of your account data — who you are and how you use the service. The business records you keep in Fatouraty, including personal data about your customers, suppliers and employees, belong to your business: for those, your business is the controller and we process them on its instructions, to provide the service.

Account data: your email address and name, used to sign you in (passwordless) and identify you.

Business & financial data you enter: workspaces, contacts, invoices, credit notes, bills, payments, bank statements, fixed assets, inventory, chart of accounts, tax registration numbers, and the ledger derived from them.

Payroll data, if you run payroll: your employees' names, national ID numbers, nationality, bank account numbers (IBAN), salaries, allowances and deductions — data about people other than you, which you enter as their employer.

Documents you upload: receipts, supplier invoices and any other file you attach — an employment contract or a copy of an ID, for example.

Support and enquiries: the name, email address and message you send us and, for an enquiry sent through the public contact form, the IP address it came from.

Technical data: minimal server logs and the source IP used for security (rate limits, the admin IP allowlist). We do not use third-party advertising or analytics trackers.

Encryption in transit: all traffic is HTTPS with HSTS enforced.

Encryption at rest: sensitive fields are encrypted with envelope encryption (AES-256). At the Enhanced and Maximum levels — Enhanced is the default — each workspace has its own data key; at the Standard level, fields are encrypted with the platform key.

Tamper-evident ledger: posted journal entries are immutable and append-only at the database level; corrections are made through reversing entries, preserving a full audit trail.

Access control: strict tenant isolation on every record, role-based permissions, and optional two-factor authentication for every user.

Your data is hosted on managed infrastructure (Netlify and Railway). Payment processing is handled by our payment providers (Stripe and Tap Payments) — we never store full card numbers. Email delivery uses Resend. These providers act as our processors under contract. They operate outside the MENA region, including in the United States and the European Union, so using Fatouraty means your data is transferred to and stored in those countries.

The AI features use Anthropic's models, and what each one sends differs. When you upload a document — a receipt or a supplier invoice, say — the whole file, including any names, amounts and numbers on it, is sent to the model so it can read the fields for you. The AI auditor's written summary is generated from finding codes and counts only — never customer names, invoice numbers or account names. The “Ask your books” assistant answers the questions it recognises on our own servers; a question it does not recognise is sent to the model as you typed it, only to choose which of its fixed answers to give — the model never sees your ledger. The AI features are disabled entirely when no model key is configured, and each carries daily limits.

If you buy a local-ownership licence, you run Fatouraty entirely on your own device and your data never leaves it.

From Settings → Your data you can export a complete copy of your data at any time, delete a workspace you own — its records and its encryption key — and permanently delete your account.

For anything else — access to or correction of your personal data, or to restrict or object to how we process it — write to support@fatouraty.com and we will respond within the period the applicable law requires. We honour the rights granted under Saudi Arabia's PDPL and the EU GDPR where applicable. If your data is held in a business's workspace (as its employee or customer, say), that business is its controller: ask them first.

We keep your data for as long as your account is active.

Deleting a workspace erases everything in it from our live database at once, together with its encryption key. Deleting your account erases, the same way, every workspace in which you are the only member; a workspace other people are also in is kept for them — your membership is removed, and if you were its last owner, ownership passes to the longest-standing remaining member.

Erasure reaches backups on their own schedule: encrypted copies can remain in our hosting provider's database backups until those backups expire.

Some records have shorter lives: sign-in links are deleted once they expire (24 hours), the IP address of a public enquiry after 24 hours, and expired administrator sessions after 30 days.

Tax and accounting law in your country may require you to retain your own records for a number of years — export them before you delete anything.

We use strictly necessary cookies only: a secure, httpOnly session cookie to keep you signed in, a second-factor cookie when 2FA is enabled, a cookie remembering your language, and — for a few minutes after you create them — a cookie that carries your two-factor backup codes or an offline activation certificate to the page that shows them once. We do not use advertising or cross-site tracking cookies.

Fatouraty is a business product and is not directed to anyone under 18.

We may update this policy; material changes will be announced in-app. For any privacy request or question, write to support@fatouraty.com.