Tayseer Privacy Notice
1. Introduction
Tayseer (“Tayseer”, “we”, “us” or “our”) provides a digital platform that helps businesses organise, maintain and share information required for financing applications, supplier onboarding, investor due diligence and other business verification processes.
We recognise that businesses entrust us with confidential commercial information and personal information relating to their owners, directors, employees and other individuals.
This Privacy Notice explains how we collect, use, store, disclose and protect personal information when you visit our website, register for an account or use the Tayseer platform. It also explains the choices and rights available to individuals whose personal information we process.
Data controller: [FULL LEGAL ENTITY NAME — TO CONFIRM]
Registered address: [TO CONFIRM]
Privacy contact: [EMAIL ADDRESS — TO CONFIRM]
This notice applies to Tayseer’s website, platform and associated services.
2. Information We Collect
Depending on how you interact with Tayseer, we may collect the following categories of information.
Account information
Names, business email addresses, contact details, authentication information and account preferences.
Business information
Company names, trade licence details, registration information, business addresses, industry classifications and other information needed to establish and maintain a business profile.
Ownership and management information
Information about directors, shareholders, beneficial owners, authorised representatives and other individuals associated with a business. This may include identification details contained in documents uploaded to the platform.
Financial and commercial information
Financial statements, management accounts, supporting financial records and other commercial information voluntarily provided by businesses.
Documents and supporting evidence
Trade licences, company registration documents, financial records and other documents uploaded to support a business profile or diligence request.
AI interactions
Questions, instructions, conversation history and relevant business information processed through Tayseer’s AI-assisted functionality.
Technical information
Information needed to operate and secure the service, which may include IP addresses, browser information, authentication events, system activity and security logs.
Website enquiries
Information submitted through contact forms, beta registration forms and other website communications.
We ask users to provide only information relevant to their legitimate business purposes and to ensure they have appropriate authority to provide information about other individuals.
3. How We Use Information
We process information to:
- Create and manage user accounts.
- Establish and maintain business profiles.
- Organise documents and supporting evidence.
- Extract and structure information from uploaded documents.
- Help users identify missing or inconsistent information.
- Support business diligence and verification workflows.
- Enable authorised sharing of business information.
- Provide AI-assisted explanations and analysis.
- Review business registrations and determine platform access.
- Respond to enquiries and provide customer support.
- Maintain service security, investigate misuse and prevent unauthorised access.
- Meet applicable legal and regulatory obligations.
- Maintain and improve the reliability and functionality of the platform.
Where applicable law requires consent or another specific legal basis for processing, we will process personal information in accordance with those requirements.
We do not treat the submission of business documents as permission to disclose them publicly.
4. AI-Assisted Processing
Tayseer uses artificial intelligence to help users understand, organise and work with business information.
AI functionality may process information supplied by users, including relevant document content, extracted information, business profile details and conversation history.
AI-generated outputs may contain errors or omissions and should be reviewed before being relied upon for important business decisions.
AI infrastructure and processing locations: [TO CONFIRM]
Use of customer information for AI model training: [TO CONFIRM]
Third-party AI providers and their retention arrangements: [TO CONFIRM]
Tayseer will describe its actual AI processing arrangements and any applicable customer controls before this notice is published.
5. Business Profiles and Information Sharing
A central purpose of Tayseer is to help businesses maintain information that can be reused across multiple diligence processes.
Business information is not intended to become publicly accessible merely because it has been uploaded to Tayseer.
Where the platform supports sharing, access is governed by the applicable authorisation and sharing controls.
Businesses are responsible for ensuring that individuals acting on their behalf are authorised to submit and share information.
Tayseer may review business registration information before activating an account. Account activation does not, by itself, constitute certification of a business’s financial standing, creditworthiness or the accuracy of every document supplied.
6. Access by Tayseer Personnel
Authorised Tayseer personnel may need access to certain account or business information for legitimate operational purposes, including:
- Reviewing business registrations.
- Verifying submitted onboarding information.
- Providing technical support.
- Investigating security incidents.
- Addressing suspected misuse.
- Meeting legal obligations.
The platform includes controls intended to restrict access to customer information.
Where the controlled staff-access workflow applies, access requires an authorised staff account, a recorded reason and a time-limited permission. Access events are recorded for security and accountability purposes.
These controls do not eliminate all forms of privileged infrastructure access. Access through hosting, database administration, backup and other operational systems is subject to separate technical and organisational safeguards.
We do not permit unrestricted access to customer information for unrelated purposes.
7. Service Providers and International Processing
Tayseer uses third-party infrastructure and service providers to operate its platform. These may include providers of:
- Cloud hosting and application infrastructure.
- Database services.
- Document and object storage.
- AI inference infrastructure.
- Transactional email.
- Monitoring, backup and security services.
Current service providers and processing locations: [TO CONFIRM]
Personal information may be stored or processed outside the United Arab Emirates, depending on the services used and the location of the relevant infrastructure.
Where cross-border processing occurs, Tayseer will apply the safeguards required by applicable data protection law.
We do not represent that all customer information remains within the UAE unless that arrangement has been specifically established.
8. Security
Tayseer uses technical and organisational measures designed to protect customer information. These include, where implemented and applicable:
- Authentication and access controls.
- Separation of customer business data.
- Database-level access restrictions.
- Encryption in transit and at rest.
- Restricted administrative access.
- Security logging and audit records.
- Backup and recovery procedures.
- Controls over the sharing of business information.
No online system can guarantee absolute security.
We review our safeguards as the platform and its operating environment evolve.
9. Retention and Deletion
We retain information for as long as reasonably necessary to provide our services, maintain security, meet legal obligations and fulfil legitimate operational requirements.
Different categories of information may be subject to different retention periods. These include:
- Account and business profile information.
- Uploaded documents.
- AI conversations.
- Pending or rejected registrations.
- Security and audit records.
- Backups.
- Website enquiries.
Specific retention periods and deletion procedures: [TO CONFIRM]
Deletion from active systems may not result in immediate deletion from all backups or records that must be retained for legal or security reasons.
Users may contact us to request deletion of personal information, subject to applicable legal requirements and legitimate retention obligations.
10. Individual Privacy Rights
Depending on the law applicable to your information, you may have rights to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request deletion where legally permitted.
- Object to or restrict certain processing.
- Withdraw consent where processing depends on consent.
- Request transfer of information where applicable.
- Raise concerns about how your information is handled.
These rights may be subject to legal exceptions and verification of the requester’s identity.
To exercise a privacy right, contact: [PRIVACY EMAIL — TO CONFIRM].
We may request information necessary to verify your identity and authority before disclosing or changing information.
11. Cookies and Website Analytics
Tayseer may use cookies or similar technologies required for authentication, security and website functionality.
Analytics, optional cookies and consent arrangements: [TO CONFIRM]
Where consent is required for non-essential cookies or tracking technologies, we will provide appropriate controls.
12. Children’s Information
Tayseer is designed for business users and is not intended for children.
We do not knowingly solicit personal information directly from children through the platform.
If we become aware that information has been collected contrary to applicable legal requirements, we will take appropriate action.
13. Changes to This Notice
We may update this Privacy Notice to reflect changes in our services, technology, legal obligations or data-processing practices.
The current version will be published on our website with its effective date.
Where required by law, we will provide additional notice or obtain consent before implementing material changes.
14. Contact Us
For questions about this Privacy Notice or how Tayseer handles personal information, contact:
Tayseer
Legal entity: [TO CONFIRM]
Registered address: [TO CONFIRM]
Email: [TO CONFIRM]
You may also have the right to raise a complaint with the relevant data protection authority under applicable law.