Privacy Policy

RTS Book is operated by RTS Business Consulting FZCO, Dubai, United Arab Emirates, which is the data controller for the personal data described in this policy. You can reach us about privacy matters at office@rtsbc.ae.

• Account details: your name, email address, the password you set (stored only in hashed form) and, if you turn it on, your multi-factor authentication settings.
• Business records: the companies, customers, suppliers, products, invoices, expenses, bank transactions, tax figures and other records you or your team enter.
• Documents: the files you upload to the document vault or attach to records.
• Billing details: the information needed to run your subscription and issue tax invoices. Card payments are handled by our payment provider; we do not store full card numbers.
• Security and usage records: sign-in and security events (including IP address and browser type), and audit records of actions taken in the service.
• Messages: what you send us when you contact support or reply to an e-mail from us.

• to provide the service you signed up for, and to keep it working and improve it;
• to run your subscription, take payment and issue tax invoices;
• to send service messages, such as account confirmation, password resets, invitations and billing notices;
• to answer your questions and provide support;
• to protect accounts and the service, including detecting and preventing fraud, abuse and unauthorised access;
• to comply with our legal, tax and regulatory obligations.

We do not sell personal data, and we do not share it with advertisers.

We share personal data only with:

• trusted third-party service providers who help us run RTS Book, for hosting, storage, payments, email delivery and service monitoring. They act on our instructions, under contract, and only for the purposes in this policy;
• people you authorise, such as your accountant or accounting firm and the users you invite to your company;
• public authorities, including tax authorities, where the law requires us to;
• a buyer or successor if our business is merged, acquired or transferred, who will be bound by this policy for the data they receive.

Our service providers may store or process data outside the United Arab Emirates. Where that happens, we rely on contractual and technical safeguards consistent with applicable UAE data-protection law, including encryption and access controls. Business customers may ask us for further information about our service providers; we provide it under confidentiality.

When you enter details about other people, such as your customers, suppliers or employees, you confirm that you are entitled to provide them. We process that data only to run the service for you, and on your instructions.

The accounting data and documents you put into RTS Book belong to you. We use them only to provide the service to you, and we do not use them for advertising.

RTS Book uses only the cookies it needs to work: cookies that keep you signed in and protect your session and forms against misuse. We do not use advertising cookies or third-party analytics trackers. Because these cookies are essential, the service cannot be used with them blocked.

We send e-mails that relate to your use of the service, such as:

• confirming your e-mail address and resetting your password;
• invitations to join a company or workspace;
• notices about your trial ending and failed payments, sent to the people who manage billing.

These messages are part of the service and cannot be switched off while your account is active. We do not send marketing e-mails. Messages you choose to send through RTS Book, such as a quotation to one of your customers, are sent on your instruction.

We apply technical and organisational measures to protect personal data, including:

• encryption of data in transit and at rest;
• tenant isolation so each workspace's data is kept separate;
• role-based access controls and server-side permission checks;
• audit logging of financial, administrative and security actions.

No system is completely secure. Please keep your password private and turn on multi-factor authentication in your account settings.

Before you close an account or end a subscription, you can export your records and documents from the service. We keep accounting and tax records for as long as UAE law requires, and financial records are not hard-deleted while a retention duty applies. Other personal data is deleted or anonymised on request once no legal duty requires us to keep it. We may keep anonymised or aggregated statistics that no longer identify anyone.

Subject to applicable law and to our record-keeping duties, you may ask for access to your personal data, correction of inaccurate data, or deletion of data we are not required to keep. To make a request, contact us at office@rtsbc.ae. We may need to verify your identity before acting on a request.

RTS Book is a service for businesses and is not intended for anyone under 18.

We may update this policy from time to time. Before a material change takes effect, we will tell you by e-mail or by a notice in the service, and we will update the “Last updated” date above.