Infotree Computers LLC · UAE Peppol E-Invoicing Platform
Infotree Computers LLC ("we", "us", "our") operates InvoiceUAE ("the Service"), a UAE Peppol e-invoicing platform for QuickBooks Online. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
Account Information: When you register, we collect your name, email address, company name, and password (stored as a secure hash).
Company Information: Your UAE company details including TRN (Tax Registration Number), trade license number, emirate, and address — required for UAE FTA compliance.
QuickBooks Online Data: With your authorization via OAuth 2.0, we read-only access:
Usage Data: We collect logs of actions taken within the Service (invoice submissions, sync operations) for audit trail and security purposes.
Technical Data: IP address, browser type, device information for security monitoring and fraud prevention.
We access your QuickBooks Online account through Intuit's official OAuth 2.0 authorization framework. You authorize access directly on Intuit's secure platform — we never see or store your QuickBooks password.
You may revoke our access at any time through QuickBooks Online Settings → Apps → Connected Apps → Disconnect InvoiceUAE. Upon revocation, we immediately cease all access to your QuickBooks data.
Encryption at Rest: All sensitive data including OAuth tokens is encrypted using AES-256-CBC encryption before storage.
Encryption in Transit: All data transmitted between your browser, our servers, QuickBooks Online, and your ASP is protected using TLS 1.3.
Access Control: Multi-tenant architecture ensures complete isolation between different companies. Role-based access control (RBAC) limits what each user can access within your organization.
Audit Logging: All data access and modifications are logged with timestamps, user identifiers, and IP addresses. Audit logs are retained for 5 years as required by UAE FTA regulations.
SQL Injection Protection: All database queries use parameterized statements and multi-layer injection protection.
We share your data only in the following limited circumstances:
We never sell, rent, or share your data with advertisers, data brokers, or any third parties for commercial purposes.
We retain your data for as long as your account is active. Invoice data and audit logs are retained for a minimum of 5 years as required by UAE FTA regulations.
Upon account cancellation, you may request deletion of all personal data not required for regulatory compliance. We will complete deletion within 30 days of your request.
QuickBooks OAuth tokens are automatically deleted when you disconnect the integration or cancel your account.
As a user of our Service, you have the right to:
To exercise any of these rights, contact us at: [email protected]
We use a single secure HTTP-only session cookie to maintain your login session. This cookie:
Separately from this session cookie, we may use web analytics cookies as described in Section 9a below.
We use industry-standard web analytics and behavioral optimization tools, including platform performance services provided by Google and Microsoft, to understand how visitors interact with our website and improve our product and content. This includes automated metrics such as page views and session duration, as well as interaction heatmaps and session recordings that help us see how visitors navigate our pages.
Our session-recording tool applies automatic input masking — text typed into form fields, including password fields, is masked before any data is transmitted. These tools do not have access to your account password, invoice data, customer data, or anything you enter within the authenticated InvoiceUAE application — this Section 9a applies only to our public marketing website and blog, not to the invoicing platform itself.
These tools are not active by default. They only load and begin operating after you provide consent through our on-site cookie banner — if you decline or haven't yet responded to the banner, no analytics or session-recording scripts run and no related cookies are set.
You can withdraw consent at any time by clearing your cookies or adjusting your browser's privacy settings.
For more detail on our data processing, contact us at: [email protected]
Our Service is designed to comply with UAE data protection requirements including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and UAE FTA requirements for electronic invoicing data retention.
We offer UAE data residency options for customers who require their data to be stored within the UAE. Contact us to discuss this option.
We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting a notice on our platform at least 30 days before changes take effect.
Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
For privacy-related questions, requests, or concerns:
We will respond to all privacy-related inquiries within 5 business days.