We hold the data you need to run your business on youcloud — your merchant account, your sales, your staff, your customers' contact details. We don't sell your data. We don't share it with third parties for marketing. Cardholder data never touches your POS — it's tokenised at the terminal.
What we collect
To run your youcloud account, we collect and store three kinds of data:
- Merchant account data — your business name, trade licence, VAT registration, contact details, bank account for settlement, and the identity documents required by our CB UAE-licensed acquiring partner (KYC / AML).
- Operational data — everything you actively use the platform for: sales, invoices, inventory, staff rosters, payroll, customer contacts, loyalty points, and the transaction logs across your outlets.
- Technical data — device IDs of your terminals, app version, IP address, session logs, and performance telemetry so we can keep the service up and fix bugs.
What we never see
Cardholder data (the 16-digit card number, CVV, PIN) is tokenised at the terminal and never touches your merchant POS or your merchant network. We hold the last 4 digits and a scheme reference for reconciliation — nothing more.
Why we hold it
- To provide the service — running your POS, settling payments, filing VAT, paying your staff, sending WhatsApp campaigns you've configured.
- To comply with UAE law — CB UAE, FTA (VAT/e-invoicing), UAE labour law (payroll retention), anti-money-laundering regulations.
- To improve the platform — anonymised, aggregated performance data helps us fix bugs and prioritise features. Never used to profile individuals.
How long we keep it
Transaction records: 7 years (UAE VAT + AML retention rules). Payroll records: 2 years after termination (UAE labour law). Marketing contact lists: until the customer unsubscribes, or you delete them. Merchant KYC: 5 years after account closure.
Your rights
You can request a full export of your data at any time, in machine-readable format, from the dashboard or by emailing us. You can request correction of inaccurate data, or deletion — subject to the statutory retention periods above.
Data protection contact: [email protected] · Response within 5 business days.
Back to top