Draft - under legal review. Last updated 8 October 2026.

Privacy Policy

This policy explains how Capmob Financial Services LLC (“Capmob”, “we”) handles personal data when you use capmob.ai. It should be read with our Terms of Service.

1. What we collect

• Account details: your name, email address, phone number and password (stored hashed).
• Business details: your answers about your business, such as sector, trading history, revenue and existing finance.
• Financial documents: files you upload, such as bank statements, trade licences and financial statements, and the data we extract from them.
• Technical data: IP address, browser details and activity logs needed to run and secure the Service.

2. Why we use it

• To create and secure your account and contact you about it (for example, login and password-reset codes).
• To produce your CapScore and CapReport and suggest lenders that may suit your business.
• To pass your application to a lender when you choose to apply.
• To operate, secure and improve the Service, and to meet our legal obligations.

3. Legal basis

We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), on the basis of your consent, the performance of our agreement with you, and our legal obligations. [To be confirmed by counsel] Basis for each purpose and how consent is recorded and withdrawn.

4. Who we share it with

• Lenders - only the lenders you choose to apply to, and only the information that application needs.
• Service providers who process data for us under contract: Amazon Web Services for hosting and storage (Asia Pacific, Mumbai region, with recovery copies in the Asia Pacific, Hyderabad region), Amazon Bedrock, the AWS service that runs the AI model which reads uploaded documents (Asia Pacific, Mumbai region), and our transactional email provider.
• Authorities where the law requires it.

We do not sell your personal data. Some of these providers process data outside the UAE. [To be confirmed by counsel] Cross-border transfer safeguards under the PDPL.

5. How long we keep it

We keep your data while your account is open and for as long as needed for the purposes above or as required by law, then delete or anonymise it. [To be confirmed by counsel] Retention periods.

6. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing, and to withdraw consent. Email legal@capmob.ai and we will respond within the time the law allows. You may also complain to the UAE Data Office.

You can delete your data yourself: log in and open Privacy in your dashboard. We withdraw any open application, stop lenders accessing your data room, delete your documents, interview and contact details, and close your account. We keep only what the law requires of us, such as a non-identifying record of a loan we were paid a fee for.

7. Security

We protect your data with encryption in transit, access controls and restricted access to uploaded documents. No system is completely secure; we will notify you and the regulator of a breach where the law requires.

8. Cookies

We use only the cookies needed to keep you logged in: a session cookie set when you log in, which scripts on the page cannot read. We do not use advertising or analytics cookies. The site loads its fonts from Google Fonts, which receives your IP address.

9. Changes

We may update this policy. We will post the new version here and update the date above.

10. Contact

Privacy questions and requests: legal@capmob.ai. [To be confirmed by counsel] Whether a data protection officer must be named.