Last updated 28 Aug 2026
Maaliya Accounting and Bookkeeping DWC-LLC ("Maaliya", "we", "us" or "our") respects the privacy of the businesses and individuals who use our websites, applications, services and communications.
This Privacy & Cookie Policy explains how we collect, use, store, disclose and otherwise process personal data when you visit maaliya.ae, use app.maaliya.ae, use any Maaliya mobile application, communicate with us, or use our accounting, bookkeeping and finance-related services (collectively, the "Services").
Maaliya is a business-to-business service and is not intended for personal or household use.
Our registered details are:
Maaliya Accounting and Bookkeeping DWC-LLC, TL 14812, Floor 3, Tower A3, Dubai South Business Park, Dubai, United Arab Emirates.
Email: support@maaliya.ae
This Policy applies to personal data processed through:
Because Maaliya serves businesses, information processed through our Services may relate not only to the person operating a Maaliya account but also to employees, customers, suppliers, contractors and other individuals whose information is contained within business records.
Depending on the circumstances, Maaliya may process personal data in different capacities.
We generally determine the purposes and means of processing personal data relating to:
In these circumstances, Maaliya generally acts as the controller of the personal data.
Customers may upload, connect, transmit or otherwise provide personal data concerning their employees, customers, suppliers and other third parties while using Maaliya.
For example, this information may appear within invoices, receipts, bank statements, payroll information, identity documents, accounting records or other business documents.
Where Maaliya processes this information on behalf of a customer and according to that customer's instructions, the customer generally remains responsible for determining the purpose of the processing and Maaliya acts as a processor or service provider.
Customers are responsible for ensuring that they have the necessary rights, notices, consents or other lawful basis to provide such information to Maaliya.
Depending on how you use Maaliya, we may collect or process the following categories of information.
This may include:
Customers may provide or generate information including:
Bank account details entered into Maaliya may, for example, be used to display the customer's payment information on invoices issued through Maaliya.
Certain Maaliya services or workflows may require customers to provide documents such as:
The exact information collected depends on the service being provided.
Business documents processed through Maaliya may contain information concerning people who do not themselves have a Maaliya account, including employees, directors, shareholders, customers, suppliers and contractors.
When you access our Services, we may automatically collect certain information such as:
The information collected may vary depending on the device and Services you use.
We may use personal data where necessary to:
We process personal data on appropriate legal grounds under applicable law, which may include performance of a contract, consent, compliance with legal obligations and our legitimate business interests where permitted.
Where processing depends on consent, consent may generally be withdrawn at any time, subject to applicable law and without affecting processing already lawfully undertaken.
Maaliya uses automation to perform accounting and finance workflows.
The majority of document extraction, OCR and reconciliation processes are performed using Maaliya's own systems or specialised tools.
In certain edge cases, information may be processed using third-party artificial intelligence services, including OpenAI, where this assists Maaliya in interpreting, extracting, classifying or otherwise processing information.
We seek to limit the information sent to external AI services to what is reasonably necessary for the relevant task.
Use of third-party AI services is also subject to the applicable provider's contractual terms, privacy practices and data-processing arrangements.
Maaliya does not rely on automated decision-making that produces legal or similarly significant effects on individuals.
Customers may choose to connect third-party services to Maaliya.
For example, a customer may connect Gmail so that Maaliya can identify and retrieve accounting-related emails and attachments such as invoices, bills and receipts.
Maaliya's Gmail functionality is intended to access information relevant to the accounting or finance functions requested by the customer, rather than to provide general-purpose access to the customer's mailbox.
Access to connected services is subject to the permissions granted by the customer and the relevant third-party provider.
Customers can disconnect integrations where supported.
We use third parties to operate and provide parts of the Maaliya Services.
Depending on the Services and integrations used, these may include providers such as:
These providers may process information where necessary to provide hosting, authentication, accounting integrations, payment processing, communications, infrastructure, content management, artificial intelligence or other functionality.
Customers may also choose to transmit information through communication channels such as WhatsApp or Telegram. Information sent through those services may also be processed by the relevant platform provider.
Third-party services operate under their own terms and privacy practices where they independently determine how information is processed.
We may also disclose information to professional advisers, regulators, government authorities, law enforcement bodies or other parties where required by law or reasonably necessary to protect legal rights.
We do not sell personal data.
We do not disclose personal data to third parties for their independent advertising purposes except where authorised by the individual or otherwise permitted under applicable law.
Payments for Maaliya subscriptions or services may be processed by third-party payment providers, including Stripe.
Maaliya does not directly store full payment card details used to process such payments. Payment information is handled by the applicable payment provider in accordance with its own security and privacy practices.
We may nevertheless receive limited payment-related information, such as payment status, transaction identifiers, billing details and portions of card information necessary to identify a payment.
Maaliya uses cookies and similar technologies to operate and understand our Services.
Essential technologies may be used for purposes including:
These technologies are necessary for the Services to function properly.
We currently use analytics technologies including Google Analytics and Microsoft Clarity.
These services help us understand matters such as:
Analytics providers may use cookies, identifiers and similar technologies to provide these services.
You may restrict or block cookies through your browser or device settings. Doing so may affect certain functionality within Maaliya.
Where applicable law requires consent before particular cookies or technologies may be used, Maaliya will apply the consent requirements applicable to the relevant user or jurisdiction.
You may subscribe to Maaliya marketing communications through designated subscription areas, including the newsletter subscription available through our website footer.
By submitting your details through a clearly identified marketing subscription form, you request to receive communications from Maaliya.
We may send subscribers information including:
We may also communicate with existing customers about Maaliya products, features and related services where permitted under applicable law.
You can unsubscribe from marketing emails using the unsubscribe mechanism included in the communication or by contacting us at support@maaliya.ae.
Unsubscribing from marketing does not prevent us from sending necessary transactional, security, billing, service or account-related communications.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, our legitimate business requirements and applicable legal obligations.
Following termination of a Maaliya account or service, customer data will generally be deleted or returned within 90 days, subject to exceptions where continued retention is reasonably necessary or legally required.
Certain information may be retained for longer where necessary for:
Financial, tax and accounting records may therefore be retained for the period required under applicable law even where an account has been closed.
Marketing contact information may be retained until a person unsubscribes, withdraws applicable consent or the information is no longer reasonably required.
Enquiries, support records and other business correspondence may be retained for as long as reasonably necessary for customer support, record-keeping, dispute management, legitimate business needs and legal compliance.
Maaliya operates from the United Arab Emirates and uses technology providers and service providers that may process information in multiple countries.
Information may therefore be stored, accessed or processed outside the country in which it was originally collected.
Our infrastructure and operations may involve processing in locations including the United Arab Emirates and India, while some third-party providers may process information in additional jurisdictions.
Where required by applicable data protection law, Maaliya takes appropriate measures to protect personal data transferred internationally. These may include contractual protections, recognised transfer mechanisms or other safeguards permitted by applicable law.
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, authentication mechanisms, permissions, secure infrastructure, logging and other safeguards appropriate to the nature of the information being processed.
No online service or storage system can guarantee absolute security. Customers are also responsible for maintaining the confidentiality of their credentials and appropriately managing access granted to their Maaliya account.
Business customers may invite employees or other authorised users to access their Maaliya workspace.
The customer is responsible for:
Actions performed by authorised users may be treated as actions performed on behalf of the relevant business account.
Depending on where you are located and the laws applicable to the processing of your information, you may have rights including the right to:
These rights are subject to applicable legal limitations and exceptions.
Where Maaliya processes personal data solely on behalf of one of our business customers, we may refer a privacy request to that customer or assist the customer in responding to the request.
We may request information necessary to verify your identity before acting on a privacy request.
Requests can be submitted to support@maaliya.ae
Maaliya is established in the United Arab Emirates and this Policy is primarily designed around applicable UAE data protection requirements, including the UAE's federal personal data protection framework where applicable.
As Maaliya expands into other jurisdictions, additional privacy rights and requirements may apply depending on where users are located and where Services are provided.
Where applicable law provides individuals with additional mandatory rights or protections, Maaliya will process personal data in accordance with those requirements.
Individuals may also have the right to raise concerns with the UAE Data Office or another competent data protection or regulatory authority applicable to their circumstances.
Maaliya is a B2B service and is not intended for use by anyone under the age of 18.
We do not knowingly permit individuals under 18 to create or operate Maaliya accounts.
If we become aware that personal data has been collected directly from a child contrary to applicable requirements, we may take steps to delete it.
This does not prevent business customers from processing lawful business records through Maaliya that incidentally contain information relating to dependants, beneficiaries or other minors where the customer has the lawful authority to process that information.
Maaliya applications may provide push notifications, email notifications or other service communications.
Depending on the device or application, users may be able to control optional notifications through their account, browser or device settings.
Certain operational or security communications may be necessary for us to provide the Services and may not be treated as marketing communications.
Our Services may contain links to or integrations with third-party websites, applications and platforms.
Maaliya is not responsible for the privacy practices of third parties where those parties independently control the processing of information.
We encourage users to review the applicable privacy information provided by those services.
We may update this Privacy & Cookie Policy from time to time to reflect changes to our Services, technology, legal requirements or business practices.
When we make changes, we will update the "Last updated" date at the beginning of this Policy.
Where required by law or where changes materially affect how personal data is processed, we may provide additional notice.
Continued use of the Services following an update will be subject to the updated Policy, to the extent permitted by applicable law.
For questions about this Privacy & Cookie Policy, our processing of personal data or your privacy rights, contact:
Maaliya Accounting and Bookkeeping DWC-LLC, TL 14812, Floor 3, Tower A3, Dubai South Business Park, Dubai, United Arab Emirates.
Email: support@maaliya.ae