Privacy Policy

Last updated: January 2026

This Privacy Policy explains how TrustBill FZ-LLC ("we", "our", or "us") collects, uses, and protects your personal data when you use Businex360, our AI-powered accounting, POS, ERP, and CRM platform for Saudi Arabia, the UAE, and the GCC.

1. Information We Collect

We collect the following types of personal data:

  • Account Information: Name, email address, phone number, company name, Tax Registration Number (TRN)
  • Business Data: Invoices, customers, products, inventory, sales transactions, financial records
  • Usage Data: Device information, IP address, browser type, operating system, interaction with our services
  • Communications: Emails, chat messages, support tickets, and other communications with our team

2. How We Use Your Data

We use your personal data for the following purposes:

  • Service Delivery: To provide, maintain, and improve Businex360 and TrustBill ERP services
  • Compliance: To comply with ZATCA Phase 2 e-invoicing requirements (Saudi Arabia) and FTA PINT-AE requirements (UAE)
  • Security: To protect your account and detect fraud or unauthorized activity
  • Analytics: To analyze usage patterns and improve our services (using anonymized/aggregated data)
  • Communication: To send you service updates, security alerts, and marketing communications (with your consent)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: To fulfill our obligations under our Terms of Service
  • Legal Obligation: To comply with ZATCA, FTA, and other regulatory requirements
  • Legitimate Interests: For security, fraud prevention, and service improvement
  • Consent: For marketing communications and non-essential data processing

4. Data Sharing and Disclosure

We may share your data with the following parties:

  • ZATCA (Saudi Arabia): For e-invoicing compliance and tax reporting
  • FTA (UAE): For VAT compliance and tax reporting
  • Service Providers: Cloud infrastructure, payment processors, and analytics providers (under data processing agreements)
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for the following periods:

  • Account Data: For the duration of your account plus 7 years (tax retention period)
  • Transaction Data: 7 years from the date of the transaction (as required by tax authorities)
  • Analytics Data: 24 months in anonymized/aggregated form
  • Marketing Data: Until you withdraw consent or unsubscribe

6. Your Data Rights

Under KSA PDPL, UAE Data Protection Law, and GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data (subject to legal retention requirements)
  • Right to Portability: Request transfer of your data to another service
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@trustbill.ae

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Access controls and authentication (multi-factor authentication available)
  • Regular security audits and penetration testing
  • Data minimization and privacy by design principles

8. International Data Transfers

Your data is primarily stored in data centers located in the UAE. We may transfer data internationally only with appropriate safeguards in place, including:

  • Standard Contractual Clauses (SCCs) compliant with GDPR requirements
  • Adequacy decisions where applicable
  • Data processing agreements with service providers

9. Children's Privacy

Businex360 is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our service. Your continued use of Businex360 after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@trustbill.ae
  • Address: TrustBill FZ-LLC, Sharjah, United Arab Emirates
  • Phone: +971-522609313

12. Regulatory References

This Privacy Policy is designed to comply with:

  • KSA PDPL: Saudi Personal Data Protection Law (Royal Decree No. M/98 of 2022)
  • UAE Data Protection Law: Federal Decree-Law No. 45 of 2021
  • GDPR: General Data Protection Regulation (EU 2016/679) for EU data subjects