Legal · Last updated 4 August 2026
Privacy Policy
What we collect, why we collect it, and the rights you have over it. In plain words, with the legal detail where it matters.
Who we are
Saabi is accounting software for UAE business, operated from Dubai, United Arab Emirates. This policy explains what we collect, why, and your rights under UAE data protection law (Federal Decree-Law No. 45 of 2021, the PDPL).
What we collect
- Account and signup data: your name, work email, phone or WhatsApp number, and company details such as name, legal form, emirate, TRN and industry.
- Your books: the accounting records you and your team create in Saabi, including invoices, parties, payments, ledger entries and bank statement lines.
- Documents you send: invoice photos, PDFs and files you upload or send via WhatsApp, plus the message metadata needed to route and audit them (sender number, message ID, timestamps).
- Usage and technical data: logs, device and browser information, and AI processing records such as the model used, confidence and tokens, kept for security, billing and audit.
How we use it
To provide the service, meaning keeping your books, processing your documents and generating your reports. To secure it, through authentication, fraud and abuse prevention and audit trails. To bill for it, to support you, and to meet our legal obligations.
We do not sell your data. We do not use your books to advertise to you.
AI processing, plainly disclosed
Documents you submit are read by AI models to extract structured data such as supplier, amounts, VAT and dates. Every AI-created record is a draft that requires your approval, and every extraction is logged.
Model inference runs on third-party AI infrastructure under contract, which may involve transient processing outside the UAE. Our providers are contractually restricted from retaining your content or using it to train their models.
Storage and isolation
Each company’s books live in a dedicated, isolated database. Your records are never a row in a shared table alongside another company’s data. Original documents are stored in your company’s own storage space so they remain available for audit and reprocessing.
Who we share it with
We share data only in these situations:
- With service providers under contract who help us run Saabi, such as hosting, messaging and AI inference.
- With accredited e-invoicing service providers if and when you opt in to e-invoicing transmission.
- With qualified audit and tax professionals only when you engage our audit or filing services, and only within the scope you approve.
- Where the law requires it.
Linking your number happens by your explicit consent, through your YES reply, and you can revoke it any time in Settings. We process messages from linked numbers only. Content from unlinked numbers is not processed.
How long we keep it
Books and supporting documents are retained for as long as your account is active, and thereafter for as long as UAE tax law requires record keeping. Operational logs are kept for shorter, defined periods. You can export your books at any time.
Your rights under the PDPL
You have rights of access, correction, deletion, restriction, objection and portability, subject to the record-keeping duties the law places on us. Write to privacy@saabi.ai and we respond within the timelines the law sets.
Security
Encryption in transit and at rest for credentials and secrets, per-tenant isolation, signed webhooks, least-privilege access and audit logging. No system is perfect. We notify you and the authorities of breaches as the law requires.
Children
Saabi is a business service and is not directed at children under 18.
Changes to this policy
We post updates on this page, and for material changes we notify account owners directly.
Contact
Saabi, Dubai, United Arab Emirates · privacy@saabi.ai