Privacy Policy

The data controller for RTS Book is RTS Business Consulting FZCO, Dubai, United Arab Emirates. You can reach us about privacy matters at office@rtsbc.ae.

• Account details — such as your name, email address and the credentials you use to sign in.
• Company and accounting records — the customers, suppliers, products, invoices, expenses, tax data and other records you enter into the service.
• Uploaded documents — files you store in the document vault.
• Billing data — subscription and payment-related information needed to invoice your company (card details are handled by our payment provider, not stored by us).
• Technical logs — such as sign-in events, security events and audit records used to operate and protect the service.

• to provide, maintain and improve the service;
• to bill subscriptions and issue tax invoices;
• to provide support and respond to your requests;
• to keep the service secure and investigate misuse;
• to meet our legal and regulatory obligations.

We use trusted service providers to run RTS Book. These include cloud hosting and storage provided by leading providers such as Amazon Web Services, a third-party payment provider for subscription billing, and an email delivery provider for transactional messages. These providers process data on our behalf under appropriate contractual protections and only for the purposes described in this policy.

We apply technical and organisational measures to protect personal data, including:

• encryption of data in transit and at rest;
• tenant isolation so each workspace's data is kept separate;
• role-based access controls and server-side permission checks;
• audit logging of financial, administrative and security actions.

We retain your data for as long as your account is active and as required to meet UAE tax record-keeping obligations. Where data is no longer needed and no legal duty requires its retention, we take steps to delete or anonymise it. Financial records are not hard-deleted where retention obligations apply.

Subject to applicable law and to our record-keeping duties, you may request access to your personal data, correction of inaccurate data, or deletion of data we are not required to retain. To make a request, contact us at office@rtsbc.ae. We may need to verify your identity before acting on a request.

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above.