Privacy Policy

1. Who We Are

TruVis Prop Ltd (“TruVis”, “we”, “us”) operates the TruVis platform at truvis.io, providing registered address and business services for UAE companies. We are committed to protecting your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law — PDPL).

2. Data We Collect

We collect:

• Identity data: company name, contact name, nationality, licence type
• Contact data: email address, phone number (WhatsApp)
• Business preference data: preferred city/area, sector, banking intentions, budget range
• Authentication data: email and hashed password (managed by Supabase)
• Payment data: payment method tokens and transaction identifiers (managed by Stripe — we do not store card numbers)
• Service usage data: mail logs, call logs, job history, document history
• Technical data: IP address, browser type, usage analytics

3. How We Use Your Data

• To provide and manage your registered address subscription
• To match you with suitable locations through VERA
• To process payments and issue receipts
• To coordinate with vendors (business centres) on your behalf
• To send service notifications by email and WhatsApp
• To comply with UAE legal and regulatory requirements
• To improve our platform and services

4. Third Parties

We share data only with trusted sub-processors:

• Supabase — authentication and database hosting (EU data centres with UAE data residency options)
• Stripe — payment processing (PCI-DSS compliant)
• WATI — WhatsApp notifications
• Resend — transactional email delivery
• Vendor partners (business centres) receive only the information needed to activate your address

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Data Retention

We retain your data for as long as your account is active and for 5 years after account closure to comply with UAE commercial and tax law. Payment records are retained for 7 years as required by UAE Federal Tax Authority regulations.

6. Your Rights

Under the UAE PDPL, you have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing for direct marketing
• Data portability in machine-readable format

To exercise any of these rights, email us at privacy@truvis.io. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication (Supabase session tokens). We do not use third-party advertising cookies. Analytics cookies may be used in aggregate, anonymised form only.

8. Security

We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, role-based access controls, and audit logging for all data access events.

9. Contact

For privacy-related queries, contact our Data Protection Officer at privacy@truvis.io.