Privacy policy

Last updated: 28 September 2026

1. Who we are

NexFounder provides UAE business-setup services: we help you choose a mainland or free zone jurisdiction, prepare and check your documents, handle the government process for your trade license, and apply for residence visas for you, your employees and your family.

NexFounder is the controller of the personal data described in this policy. Registered company name: [your legal entity name], trade license no. [number] issued by [authority]. Address: Dubai, United Arab Emirates.

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies to you, other data-protection laws such as the EU/UK GDPR.

2. Data we collect

What	Details
Contact details	Name, email address, mobile / WhatsApp number, nationality and whether you are a UAE resident.
Business information	Your planned activity, preferred emirate and area, customers, office needs, number of visas and shareholders, budget, proposed trade names and optional add-ons.
Shareholders & visa applicants	Names, nationalities, shareholding, manager role, residency status, relationship (e.g. employee, spouse, child) and job title for each person you add.
Identity & supporting documents	Documents you upload, such as passport copies, passport-size photos, Emirates ID, visas, proof of address, CVs, certificates and bank references — and the details read from them (name, document number, nationality, date of birth, gender, issue and expiry dates, address).
Documents we issue to you	Trade licenses, MOA, visa copies, receipts and other documents our team shares with you in your dashboard.
Account details	Your login email and password (stored only as a one-way hash — we cannot see it).
Messages	Your chats with our team, questions you ask the online assistant, and website enquiries (including the IP address the enquiry was sent from, to prevent spam).
Estimates & payments	Your estimate, payment amount, payment status and the reference from the payment provider. Card details are entered on the payment provider’s secure page — we never receive or store your card number.
Mobile app data	A push-notification token for your device, its platform (Android / iOS) and whether you want offers & news notifications, so we can send you updates.
Technical data	Standard server logs (IP address, browser, pages requested, time) kept for security and troubleshooting. We also count visits to our public pages to see how the website is used: the page, the date, the referring website, the device type and the country — worked out from your IP address, which is not stored in these statistics. No cookies are used for this.

Most of this comes from you. Some comes from others: a shareholder or family member’s details may be provided by the person applying, and government authorities send us approvals and documents about your company and visas.

3. How we use your data

• To provide our services (performing our contract with you): recommending a jurisdiction, preparing your estimate, checking documents, forming your company, applying for your trade license, establishment card and residence visas, and keeping you updated.
• To communicate with you: estimates, payment links, status updates, document requests and replies by email, WhatsApp, in your dashboard and via app notifications.
• To take payments through our payment providers and keep financial records.
• To meet legal obligations: UAE company-formation, immigration, anti-money-laundering / know-your-customer (KYC), tax and record-keeping requirements.
• For our legitimate interests: securing our systems, preventing fraud and spam, and improving our services.

We do not sell your personal data. We never share your documents, contact details or application data with advertising partners. If you accept marketing cookies on our website, those partners can measure visits and conversions — see Cookies.

4. Automated document checks & AI assistant

When you upload a document, it is sent to our AI provider, Anthropic (Claude), which reads it and returns the key details and any quality problems (for example blur, glare, the wrong document or an expiry date that is too soon). We compare these with the requirements of the relevant authority and show you the result straight away.

These checks only help you get your documents right first time. They do not decide your application: our team reviews every document, and approvals are made by the UAE authorities. If a check flags a problem you disagree with, contact us and a person will review it.

Questions you type into the online assistant are also answered by Anthropic’s AI, together with basic context about your application (such as your chosen zone and business type). Under its commercial terms, Anthropic processes this data to provide the service to us and does not use it to train its models.

5. Who we share data with

We share personal data only as needed to provide our services:

• UAE government authorities and official partners — free zone authorities, the Department of Economy / economic departments, immigration and residency authorities (ICP / GDRFA), Emirates ID and medical fitness centres — to form your company and process visas.
• Banks and tax authority — only when you ask us to help with a corporate bank account, VAT or Corporate Tax registration.
• Service providers acting on our instructions:
  • Hosting — our dedicated server provider, where the platform, database and uploaded documents are stored.
  • AI — Anthropic (document reading and the online assistant).
  • Email — our email delivery provider.
  • Payments — Stripe, Telr, Network International (N-Genius) or Ziina, depending on the payment link you receive.
  • App notifications — Expo, Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS), which receive your device token and the notification text.
• Analytics & advertising partners — only if you accept cookies on our website: see Cookies for the current list.
• WhatsApp — if you choose to message us on WhatsApp, that conversation is also subject to WhatsApp’s own privacy policy.
• Professional advisers and authorities where required by law, court order or to protect our legal rights.

6. International transfers

Some of our service providers (for example our AI, payment and notification providers) process data outside the UAE. When this happens we rely on providers that offer appropriate safeguards, such as contractual data-protection commitments, as required by UAE law.

7. How long we keep data

• Active applications: for as long as we are providing services to you.
• After completion or cancellation: for the period UAE law requires us to keep company-formation, KYC and financial records, after which we delete or anonymise it.
• Unfinished setups: if you start a setup but never give us your contact details, the draft is deleted when you choose “Start over”, and you can ask us to delete any draft at any time.
• App notification tokens: deleted when you log out, or automatically when your device stops accepting notifications.

You can ask us to delete your data earlier — see Your rights. We may need to keep some records where the law requires it.

8. How we protect data

• All traffic to our website, dashboard and app is encrypted (HTTPS).
• Passwords are stored as one-way hashes; password-reset links expire after one hour and work only once.
• Your documents are only available to you (when signed in to your own account) and to our authorised staff; each staff member has a personal login.
• Service keys used by the platform (e.g. payment and AI provider keys) are stored encrypted.
• In the mobile app your login is kept in the phone’s secure storage (Keychain / Keystore), and you can add Face ID or fingerprint unlock.

No system is completely secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law.

9. Cookies

Our website uses only essential cookies that keep you signed in and remember your setup in progress:

Cookie	Purpose
cs_app	Remembers the company setup you are working on, so you can continue later (up to 180 days).
cs_client	Keeps you signed in to your client dashboard.
cs_staff	Keeps our team signed in to the staff dashboard.

10. Mobile app permissions

• Camera — only when you choose to scan a document.
• Photos / files — only when you choose a photo or PDF to upload.
• Notifications — to tell you about status changes, messages, document requests and payments. We may also send occasional offers & news; turn these off any time in the app under Profile → Offers & news, or turn off all notifications in your phone’s settings.
• Face ID / fingerprint — optional app unlock. Your biometric data stays on your phone and is never sent to us.

11. Your rights

Subject to the law that applies to you, you can ask us to:

• give you access to, or a copy of, the personal data we hold about you;
• correct data that is inaccurate or incomplete (you can also edit your application yourself until the payment link is sent);
• delete your data, or restrict how we use it;
• object to processing based on our legitimate interests;
• transfer your data to you or another provider in a commonly used format;
• have an automated document-check result reviewed by a person.

To make a request, contact us using the details below. We may need to confirm your identity first and will reply within the time the law allows. You also have the right to complain to the UAE Data Office or your local data-protection authority.

12. Children & family members

Our services are for adults (18+). When you apply for residence visas for your children or other family members, you provide their data on their behalf and confirm you are entitled to do so. We use it only to process their visas.

If you give us personal data about other people (shareholders, employees or family members), please make sure they know about this policy.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed; for significant changes we will also let you know by email or in your dashboard.

14. Contact us