PRIVACY POLICY

Legal

Last updated: June 15, 2026

1. Who We Are

This Privacy Policy applies to the Yalla.Tax website and related services (the “Service”) operated by BlinkEdge LLC (“Yalla.Tax,” “we,” “us,” or “our”).

We are an independent information and productivity platform. We are not an official government site and are not affiliated with, endorsed by, or connected to the UAE Federal Tax Authority (FTA) or any other government authority.

2. Scope of This Policy

This Policy explains how we handle personal data when you:

• Visit our website at https://yalla.tax
• Create and use an account on the Platform
• Use AI search, chat, and document tools
• Use the VAT Module to upload, manage, and process business and tax-related data
• Record sales, expenses, or other transactions through messaging channels such as WhatsApp
• Subscribe to our Managed Service, under which VAT returns are prepared and filed on your behalf via partner tax agents
• Subscribe to a paid plan or free trial
• Contact us by email or through support channels

3. Information We Collect

3.1 Information You Provide Directly

• Account information: Name, email address, password, and basic profile information.
• Billing information: Payment-related details (e.g., card information) are collected and processed by our payment providers such as Stripe. We do not store your full card number on our own servers.
• Support and communication: Information you provide when you contact us for help, such as your email, screenshots, or descriptions of issues.
• Content you submit: Prompts, questions, text you type into the AI chat, and any other content you submit while using the Service.
• Business and tax data: Information you upload or input into the VAT Module, including company details, Tax Registration Numbers (TRN), filing periods, invoices, expenses, receipts, and supporting documents
• Messaging data: Where you record sales, expenses, or documents through WhatsApp or other messaging channels, we process the content of those messages (including text, images, and attachments such as receipts), your phone number, and related metadata in order to log transactions and provide the Service. WhatsApp itself is operated by Meta and governed by its own privacy policy.

3.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

• Usage data: Pages viewed, search queries, AI interactions, timestamps, clicked buttons, and other activity within the platform.
• Device and log data: IP address, browser type, operating system, language settings, and approximate geographic region derived from your IP.
• Cookies and similar technologies: We may use cookies, local storage, and similar technologies to remember your session, keep you logged in, and understand how you use the Service.

3.3 Information from Third Parties

We may receive limited information about you from:

• Payment providers: Transaction confirmation, subscription status, and partial card information (e.g., last 4 digits, expiry month/year) for reconciliation purposes.
• Email service providers: Information about email delivery, opens, and clicks on important account-related messages.

4. How We Use Your Information

We use your information to:

• Create and manage your account and subscriptions
• Authenticate your identity, including optional email verification codes
• Provide AI search, chat, and document tools
• Improve the accuracy, performance, and usability of the Service
• Respond to your questions, support requests, and technical issues
• Send important service communications (e.g., account security, billing, changes to terms or policies)
• Analyse aggregated usage patterns to understand how the Service is used and to make product improvements
• Provide VAT-related tools, including processing, organizing, and summarizing business and transactional data within the VAT Module
• Detect, prevent, and address fraud, abuse, or security incidents
• Comply with legal obligations and enforce our Terms of Service

5. How We Use AI & Your Content

Yalla.Tax uses AI models to generate responses, summaries, and suggestions based on your inputs and relevant documents.

• Your prompts and interactions may be processed by our AI providers to generate outputs in real time.
• Process and analyse Business Data within the VAT Module to generate summaries, classifications, and VAT-related outputs.
• We may log and review certain prompts and outputs to debug issues, monitor for abuse, and improve quality.
• We do not sell your prompts or your personal data to advertisers.

You should never input highly sensitive personal data (such as passwords, full card numbers, or unrelated sensitive medical/personal details) into the AI chat or any other text fields unless strictly necessary and appropriate.

6. VAT Module & Business Data

The VAT Module allows you to upload, input, and manage business and tax-related data (“Business Data”), including company information, TRNs, filing periods, invoices, expenses, and supporting documents.

We store and process this data to provide the functionality of the VAT Module, including organization, summarization, and calculation features.

You remain fully responsible for the accuracy and completeness of all Business Data submitted. Yalla.Tax does not independently verify this data against FTA systems.

7. Legal Basis for Processing

Depending on your jurisdiction, we may rely on one or more of the following legal bases to process your personal data:

• Contractual necessity: To provide the Service you have requested, including account creation, subscription, and support.
• Legitimate interests: To maintain and improve the Service, protect the security of our systems, and understand user behaviour (while respecting your privacy rights).
• Legal obligations: To comply with applicable laws, regulations, and accounting or tax requirements.
• Consent: Where required (for example, certain cookies or marketing communications), we may rely on your consent, which you can withdraw at any time.

8. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Service providers: Third parties who provide infrastructure, hosting, analytics, email delivery, payment processing, and similar services.
• AI providers: Trusted partners who process text inputs and, where applicable, Business Data to generate AI outputs for the Service.
• Payment processors: Stripe and any other payment provider, to process subscriptions, manage billing, and prevent fraud. Your payment card details are handled directly by Stripe.
• Partner tax agents: Where you use the Managed Service, we share your Business Data and relevant account details with the independent FTA-approved registered tax agent(s) who prepare and submit filings on your behalf. This sharing is necessary to provide the Managed Service and is done on your authorization.
• Messaging providers: WhatsApp/Meta and related communication providers, to enable transaction recording and messaging features.
• Professional advisors: Lawyers, accountants, or auditors as needed for business operations or legal compliance.
• Authorities or law enforcement: When required by law or to protect our rights, users, or the public.
• Business transfers: In the context of a merger, acquisition, or sale of assets, where personal data may be transferred as part of the transaction (subject to appropriate confidentiality protections).

9. International Transfers

Our infrastructure and service providers may be located in multiple countries. As a result, your personal data may be transferred to and processed in jurisdictions outside your country of residence, which may have different data protection laws.

We take appropriate steps to protect your information, such as using contractual safeguards and only working with reputable service providers.

10. Data Retention

We retain personal data for as long as reasonably necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, or accounting obligations
• Resolve disputes and enforce our agreements
• Maintain business and security records
• Retain records of filings prepared or submitted under the Managed Service, where required for legal, tax, or audit purposes (including any minimum record-keeping periods required under UAE tax law)

When data is no longer required for these purposes, we will delete or anonymise it in a commercially reasonable manner.

11. Security

We use technical and organizational measures designed to protect your personal data, such as:

• Encryption in transit (HTTPS)
• Access controls and authentication mechanisms
• Segregation of environments and regular updates

However, no system can be fully secure. You are responsible for keeping your login details confidential and immediately notifying us of any suspected unauthorized access to your account.

12. Cookies & Similar Technologies

We use cookies and similar technologies to:

• Keep you logged in between sessions
• Remember your preferences and settings
• Measure how the Service is used so we can improve performance and usability

You may be able to control cookies through your browser settings. Disabling certain cookies may affect your ability to use parts of the Service.

13. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights in relation to your personal data:

• Right to access your personal data
• Right to request correction of inaccurate data
• Right to request deletion of your data (subject to legal limits)
• Right to object to or restrict certain processing
• Right to withdraw consent where we rely on consent
• Right to data portability (in some cases)

To exercise any of these rights, please contact us at support@yalla.tax. We may need to verify your identity before responding to your request.

14. Children’s Privacy

The Service is intended for professional and business users and is not directed to children. We do not knowingly collect personal data from children under the age where parental consent is required under local law. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

15. FTA Filing & Your Responsibilities

The way filings work depends on the plan you use:

• Self-serve plans: Yalla.Tax does not connect to your official FTA account and does not submit returns, refund claims, objections, or other filings on your behalf. The reference, search, AI, and VAT Module features are tools to help you prepare your own filings, which you submit yourself.
• Managed Service: Where you subscribe to the Managed Service and provide the necessary authorization, VAT returns and related filings are prepared and submitted on your behalf by independent FTA-approved registered tax agents we partner with, as described in our Terms of Service. Even then, you remain responsible for the accuracy of the underlying data and for paying any tax, penalties, or interest due.

In all cases, you are responsible for ensuring that information submitted to the FTA is accurate and complete, for meeting deadlines where filing depends on data you supply, and for paying amounts owed to the FTA. Yalla.Tax does not assume your tax liabilities.

Corporate Tax is available as a separately priced add-on service, delivered through our FTA-approved partner agents; where you subscribe to it, your Business Data may be shared with those agents for that purpose in the same way as for VAT filings. Excise Tax and other non-VAT matters are not included unless separately agreed in writing. Any general information about such taxes provided through the Service is for information only.

Any information generated by Yalla.Tax (including AI chat responses and VAT Module outputs) should be verified directly with the FTA or a qualified tax advisor.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top of this page. In some cases, we may provide additional notice (for example by email or in-app notification).

Your continued use of the Service after changes become effective indicates your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Yalla.Tax / BlinkEdge LLC
Email: support@yalla.tax
Website: https://yalla.tax