Privacy Policy

Controller (operator of the Services): Claritax Technology Solutions LLC FZ

Registered address: Meydan Free Zone, Meydan Grandstand, 6th Floor, Al Meydan Rd, Nad Al Sheba, Dubai, United Arab Emirates

Contact email: contact@gcctaxlaws.com

If you have privacy questions or want to exercise your rights, contact us at contact@gcctaxlaws.com.

This Privacy Policy applies to personal data we process:

• when you browse the Website,

• when you register or sign in (including via Google or LinkedIn),

• when you purchase or manage a subscription (payments processed via Stripe),

• when you contact us or otherwise communicate with us.

This Privacy Policy does not apply to third-party websites or services that may be linked from our Website.

We aim to collect only the data that is reasonably necessary to:

• provide and operate the Services,

• administer subscriptions and billing,

• maintain security and prevent misuse,

• improve functionality and performance,

• comply with legal obligations.

We collect information in three ways: (a) information you provide, (b) information collected automatically, and (c) information received from third parties.

a. Information you provide

Account and authentication information

You can sign in using Google or LinkedIn authentication. When you do so, we may collect or receive:

• name (or display name),

• email address,

• profile photo (if available),

• basic identifiers provided by the login provider (for example, a provider user ID).

You may also provide information through forms or communications, for example when you contact us.

Subscription and billing information

We offer subscriptions only (daily, monthly, annual). When you subscribe, we may collect:

• selected plan, subscription status, renewal date, and cancellation status,

• billing name and billing email,

• limited billing details that may be required for invoicing, fraud prevention, and compliance (for example, billing country, and billing address if required by the payment process or legal requirements).

Taxes and VAT: VAT is currently not applicable to Claritax Technology Solutions LLC FZ. If tax treatment changes in the future, we may request additional billing details to meet invoicing or compliance requirements. We will use such data only for billing, invoicing, and compliance purposes.

Support and communications

If you contact us, we collect the content of your communications and any information you choose to provide (including attachments).

b. Payment processing information (Stripe)

We use Stripe as our payment processor and payments are collected through an embedded Stripe Elements flow.

• Stripe collects and processes payment method details (such as card details) directly.

• We do not intentionally store full payment card numbers or sensitive authentication data on our systems.

We typically receive limited information from Stripe such as:

• payment status (successful/failed),

• transaction identifiers,

• amount, currency, date and time,

• limited billing metadata (for example, billing country),

• subscription lifecycle events (for example, renewal, cancellation).

Stripe’s processing of personal data is governed by Stripe’s own policies and terms, in addition to this Privacy Policy.

c. Information collected automatically (usage and technical data)

When you use the Services, we may automatically collect:

• IP address,

• browser type and settings,

• device type and operating system,

• referral source and pages viewed,

• actions taken on the Website and time spent,

• dates and times of access,

• diagnostic, error, and performance logs.

This information helps us operate the Services, maintain security, and improve performance.

d. Cookies and similar technologies

We use cookies and similar technologies for:

• essential site functionality (for example, login, security, session management),

• preferences and performance,

• analytics to understand usage and improve the Services.

Details of cookies, categories, and controls are described in our Cookie Policy (published separately on the Website). You can also manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services.

e. Information from third parties

We may receive information from:

• Google and LinkedIn, to support authentication and account access,

• Stripe, to support payment confirmation and subscription management,

• service providers, such as hosting, analytics, communications, customer support, and security vendors, where they provide information necessary to operate the Services.

We use personal data for the following purposes:

a. To provide and operate the Services

• authenticate users and maintain accounts,

• provide access to platform features and content,

• respond to inquiries and provide support.

b. To administer subscriptions and billing

• set up, renew, and manage subscriptions,

• process payments via Stripe, including handling refunds (if offered), disputes, and chargebacks,

• maintain billing, accounting, and audit records.

c. To communicate with you

We may send:

• transactional emails, such as subscription confirmations, receipts, account notices, and security alerts,

• service communications, such as updates to the Website, features, and policy changes.

d. To analyse and improve the Services

• monitor usage trends and performance,

• diagnose issues and fix bugs,

• improve features, usability, and security.

e. To secure the Services and prevent misuse

• detect and prevent fraud, abuse, and unauthorised access,

• protect users, the Website, and our business.

f. To comply with legal obligations

• comply with applicable laws and lawful requests,

• establish, exercise, or defend legal claims.

Where required by applicable data protection laws, we process personal data based on:

• Contract, to provide the Services and manage subscriptions you request,

• Legitimate interests, to operate, secure, and improve the Services and prevent fraud (balanced against your rights),

• Consent, where required (typically for certain cookies, as described in the Cookie Policy),

• Legal obligation, for compliance, accounting, and regulatory requirements.

We do not sell personal data as a standalone dataset. We may share personal data as follows:

a. Service providers

We may share information with third-party service providers who help us operate the Services, such as:

• hosting and infrastructure providers,

• analytics and performance measurement providers,

• communications and email delivery providers,

• customer support tools,

• security and fraud prevention services.

These providers are bound by contractual obligations to protect data and use it only for providing services to us.

b. Payment processor (Stripe)

We share necessary data with Stripe to process payments, manage subscriptions, prevent fraud, and handle disputes.

c. Legal requirements

We may disclose information if required to do so by law or in response to valid legal process or lawful requests by authorities.

d. Business transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

Your information may be processed in countries other than your country of residence, including where our service providers (including Stripe) operate. Where required, we apply appropriate safeguards designed to protect personal data in cross-border transfers.

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, including:

• maintaining your account and providing the Services,

• administering subscriptions and maintaining accounting records,

• meeting legal, regulatory, and audit requirements,

• resolving disputes and enforcing agreements,

• maintaining security and preventing misuse.

Retention periods vary depending on the nature of the data and applicable requirements. When information is no longer required, we delete or anonymise it where reasonably practicable.

We implement reasonable technical and organisational measures designed to protect personal data from unauthorised access, use, alteration, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

You are responsible for maintaining the confidentiality of your account access (including your email account used for login). If you believe your account has been compromised, contact us promptly at contact@gcctaxlaws.com.

Depending on your jurisdiction, you may have rights to:

• request access to your personal data,

• request correction of inaccurate or incomplete data,

• request deletion of your personal data (subject to lawful retention needs, especially for billing records),

• object to or restrict certain processing in some circumstances,

• withdraw consent where processing is based on consent (for example, certain cookies),

• lodge a complaint with a competent authority where applicable.

How to exercise your rights

Email us at contact@gcctaxlaws.com. We may request verification to protect your account and personal data.

You indicated that website and feature updates will be communicated, and transactional emails will start.

• You may receive transactional and service-related communications (for example, receipts, security alerts, essential service updates). These are generally necessary to operate the Services.

• If we send marketing or promotional communications, you can opt out using the unsubscribe method provided in those communications or by contacting us at contact@gcctaxlaws.com.

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of third parties. Please review their privacy policies independently.

The Services are not intended for children under 18. We do not knowingly collect personal data from children under 18. If we learn we have collected such data, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of the Services after an update means you accept the updated Privacy Policy.