Privacy Policy

This Privacy Policy explains how your personal data is collected and processed when you use the TaxOasis platform at taxoasis.ae, including the tax intelligence tools, the UAE E-Invoicing Readiness Assessment, and the ASP Selector. This policy is published in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

1. Who is responsible for your data

The data controller for personal data submitted through this website is Curaty Private Limited (CIN U74999GJ2020PTC117337), a company incorporated in India with its registered office at SF-11A, Indiabulls Megamall, Akota Road, Vadodara, Gujarat, India 390007.

TaxOasis is a tax intelligence platform owned and operated by Curaty Private Limited. The platform's tax content is professionally reviewed under an exclusive arrangement with ECOVIS JRB Chartered Accountants, Dubai, whose professional mark appears on the platform.

If you have any question about this policy or wish to exercise any of the rights described below, please contact us at support@taxoasis.ae.

2. What personal data we collect

We collect personal data in the following ways:

When you use the assessment tools and request a report. We collect the information you provide on the lead capture form:

• Your full name
• Your business email address
• The name of the company you represent
• Optionally, your role at that company and a phone number
• Confirmation that you have accepted this Privacy Policy and the related Disclaimer

Alongside the personal data, we also store your responses to the assessment questionnaire, the results those responses produced, and the ASP shortlist generated for you.

When you use the tax intelligence tools. We process the queries you submit. These queries may contain information about your business, financial position, or tax affairs. We process this information solely to generate a response to your query.

When you browse the website. We collect standard usage data through analytics tools, including pages visited, time spent, device type, and approximate geographic location derived from your IP address. See section 11 for details.

We do not knowingly collect or process special categories of personal data, and we do not request information from minors. The platform is intended for business users acting in a professional capacity.

3. Why we collect it and the legal basis

We collect personal data for the following purposes:

• To deliver the tax intelligence service and assessment reports you request.
• To enable our professional review partner, ECOVIS JRB Chartered Accountants, to contact you with relevant guidance where you have requested professional support or where your query has been referred for professional input.
• To understand how the platform is used and to improve our service.

The legal basis for processing is your consent, given when you accept this Privacy Policy. You may withdraw your consent at any time as described in section 9.

4. AI-assisted processing

TaxOasis uses AI-assisted technology to process tax queries and generate responses. When you submit a query, the content of your query is processed by third-party AI technology services acting on our instructions and in accordance with their own data protection obligations. Query data sent to these services is not used to train AI models.

You always have the option to request that your query be reviewed by a qualified professional at ECOVIS JRB Chartered Accountants rather than relying solely on the AI-generated response.

5. How long we retain your data

We retain personal data submitted through the platform for a maximum of thirty-six months from the date of submission. After the retention period expires, the data is deleted or anonymised. If you engage ECOVIS JRB Chartered Accountants on a separate professional services basis during that period, retention of data held by ECOVIS JRB will follow their own professional regulatory requirements.

6. Who has access to your data

Personal data is accessible to authorised personnel within Curaty Private Limited. We do not sell, rent, or share your personal data with third-party marketers. We may share data with the following categories of third parties where necessary:

• Professional review partner. Where your query is referred for professional input, or where you request professional support, relevant details and your contact information may be shared with ECOVIS JRB Chartered Accountants under our exclusive professional review arrangement.
• Hosting and infrastructure providers. The website and database are hosted by third-party infrastructure providers who process data on our instructions and under their own data protection obligations.
• AI technology service providers. Query data is processed by third-party AI technology services as described in section 4.
• Analytics providers. Website usage data is collected through third-party analytics services as described in section 11.
• Professional, legal, or regulatory advisors. Where required to comply with applicable law or regulatory obligation.

7. International data transfers

Curaty Private Limited is incorporated in India. The platform's hosting infrastructure and certain technology services used to process your data are located outside the United Arab Emirates. By using the platform and accepting this Privacy Policy, you consent to the transfer of your personal data outside the UAE to jurisdictions where our infrastructure and technology service providers operate. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy wherever it is processed.

8. How we secure your data

We apply technical and organisational measures appropriate to the nature of the data we hold, including encryption of data in transit, access controls limiting database access to authorised personnel, and standard infrastructure-level security provided by our hosting provider. No system can guarantee absolute security; we commit to applying reasonable measures and to notifying affected individuals if a personal data breach with material risk arises.

9. Your rights

Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights in relation to your personal data, exercisable by contacting us at support@taxoasis.ae:

• The right to be informed about how your data is processed.
• The right to access the personal data we hold about you.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion of your data, subject to any legal or regulatory retention obligations.
• The right to withdraw your consent to further processing at any time.
• The right to object to processing for direct marketing purposes.
• The right to object to decisions based solely on automated processing.
• The right to lodge a complaint with the UAE Data Office.

We will respond to any rights request within thirty days of receipt.

10. Children

This platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

11. Cookies

This site uses cookies required for the basic operation of the website, such as the cross-site request forgery token used to protect forms.

We also use Google Analytics to understand how visitors use the platform. Google Analytics places cookies on your device to collect information about your browsing behaviour in aggregate form. This data helps us improve the platform and is not used to identify you personally. Analytics cookies are only set after you accept cookies through the consent mechanism on the website. You can also opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through a notice on this page.

13. Contact

For any question or request relating to this policy, write to us at support@taxoasis.ae.