Privacy Policy

Lattice Software Solutions LLC is the controller responsible for personal data processed through the Service. You can contact us using the details in the "Contact Us" section below.

We collect personal data that you provide and data generated through your use of the Service, including:

• Account and contact data: name, business name, job title, email address, and phone number.
• Billing and payment data: billing address, Tax Registration Number, invoices, and transaction records. However, the credit/debit card details are collected and processed directly by our payment provider, Network International (N-Genius), and are not stored by us.
• Usage and technical data: log data, device and browser information, IP address, and cookies (see our Cookies section).
• Content data: information you and your Authorised Users enter into the Service, which may include personal data about your own staff, contractors, or contacts.
• Support and communications: records of your correspondence with us.

We process personal data on the legal bases recognised under the PDPL, including your consent, performance of a contract with you, compliance with a legal obligation, and our legitimate interests. We use personal data to:

• Provide, operate, maintain, and secure the Service.
• Set up your account, onboard you, and provide support.
• Process payments, issue invoices, and manage subscriptions and refunds.
• Communicate with you about the Service, including service and security notices.
• Improve and develop the Service and our customer experience.
• Comply with legal, tax, regulatory, and anti-fraud obligations.

Most personal data is provided directly by you or your Authorised Users. Some technical data is collected automatically when you use the Service. Where you upload Content containing personal data about other individuals, you are responsible for having a valid legal basis to do so and for informing those individuals as required by law.

We do not sell personal data. We share personal data only as needed to operate the Service, including with:

• Service providers and sub-processors who help us deliver the Service, such as our payment provider Network International (N-Genius) and cloud hosting providers, under appropriate confidentiality and data protection terms.
• Professional advisors, auditors, and authorities where required by law or to protect our legal rights.
• A successor entity in the event of a merger, acquisition, or reorganisation, subject to this Policy.

Personal data may be processed or stored outside the UAE by us or our sub-processors. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection in accordance with the PDPL and its executive regulations, including appropriate contractual safeguards.

We retain personal data for as long as necessary to provide the Service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. When personal data is no longer required, we securely delete or anonymise it. Following termination of your subscription, your Content is made available for export for a limited period, after which it may be deleted in accordance with our retention practices.

Subject to the PDPL and applicable exemptions, you have the right to: access your personal data; request correction of inaccurate data; request erasure where no longer necessary; restrict or object to certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by law.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit, access controls, and use of PCI DSS compliant payment processing via our payment gateway service provider. No method of transmission or storage is completely secure, but we work to protect your data and to notify relevant parties of significant breaches as required by law.

Our website and the Service use cookies and similar technologies to operate the platform, remember your preferences, and analyse usage. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we will request your consent for non-essential cookies.

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from individuals under 18 years of age.

The Service may link to or integrate with third-party services, such as our payment provider. Those services are governed by their own privacy notices (for example, Network International's privacy notice), and we encourage you to review them.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email, and the updated policy will show a revised effective date.

For privacy questions or to exercise your rights, contact: