Data Protection & Privacy Policy
DoFatora.com is committed to protecting the privacy of its users and the security of their financial and commercial data. This policy outlines how data is collected, processed, stored, and managed in compliance with applicable tax and commercial regulations.
Effective Date: September 2026
A. Nature of Collected and Processed Data
Includes name, entity/business name, email address, phone number, physical address, and Tax Identification Number (TIN) / Commercial Registration (CR).
Includes end-client names, addresses, line item financial details, Value Added Tax (VAT) rates, and sales/service values entered by the user.
Includes IP addresses, browser types, and session metadata to ensure account security and prevent unauthorized access or breaches.
B. Purposes of Data Processing
Data is processed strictly for the following operational and legal purposes:
- Delivering e-invoicing generation, export, and account management services.
- Verifying user eligibility, ensuring compliance with regulatory requirements, and mitigating fraud or fictitious invoicing.
- Sending operational alerts, subscription notifications, and critical technical updates.
C. Statutory Tax Compliance and Data Retention
• Statutory Tax Compliance: You acknowledge and agree that the Platform stores invoices and associated financial data for the statutory retention periods mandated by tax and commercial laws in the jurisdictions where we operate (e.g., retaining tax records for a minimum of 5 to 6 years in accordance with requirements set by the Zakat, Tax and Customs Authority "ZATCA" or equivalent tax authorities).
• Data Retention Post-Account Closure: In the event of subscription cancellation or account termination, the Platform reserves the right to archive relevant invoice data and financial records solely to the extent necessary to fulfill statutory, legal, or tax obligations, or to defend against legal claims, strictly in accordance with legally prescribed timeframes.
D. Data Sharing and Disclosure
No Sale or Commercialization: The Platform strictly does not sell, rent, or trade user data or end-client financial records to any third party for marketing purposes under any circumstances.
Legal and Regulatory Disclosure: The Platform reserves the right to disclose stored account data to governmental, judicial, or regulatory/tax authorities exclusively under the following circumstances:
- In response to a binding legal request or order (e.g., a court order or official request from tax authorities).
- To comply with Anti-Money Laundering (AML) regulations and tax compliance frameworks.
- To defend the legal rights of the Platform or protect the security of other users against verified fraudulent activities.
E. Security Measures and Data Integrity
The Platform implements advanced technical and organizational security controls (including SSL/TLS transport encryption and database encryption) to protect data against unauthorized access, alteration, or loss.
Notwithstanding all implemented security measures, the user acknowledges that internet data transmission cannot be guaranteed to be 100% secure. The Platform disclaims liability for any security breach resulting from user negligence in safeguarding account credentials or the compromise of the user's personal devices.
F. User Rights Regarding Data
- Access & Export: The user retains the right to access, update, and export their data in CSV or PDF format at any time during an active subscription period.
- Statutory Deletion Restrictions: Requests for the erasure or deletion of legally issued invoices or financial records are strictly prohibited where such requests conflict with mandatory statutory retention periods under applicable tax and commercial laws.
Have questions regarding privacy and data protection?
Our legal compliance and privacy team is available to assist you.