Federal Decree-Law No. 11 of 2024 has been in force since 30 May 2025. The compliance period ran to 30 May 2026 and an extension is expected. Check MOCCAE for the latest date.Fines for not measuring, reporting or keeping records: AED 50,000 to AED 2,000,000. Repeat violations can double the fine.No minimum size: small, free zone and government entities are all covered. MOCCAE designates which sources report.Scope 3 is expected from 2027 but is not yet confirmed in law. DecarbOS can already prepare it for you.Keep emissions records for at least 5 years. DecarbOS keeps yours for 7 years in the UAE.Upload 12 months of bills from the same calendar year: electricity, cooling, fuel and refrigerant invoices.Bill tip: download the PDF from your utility app. If you photograph a bill, lay it flat in good light.Missing a month? You can enter the number by hand, estimate it, or mark it not available. The report labels every choice.Organisations emitting 0.5 million tonnes CO2e or more (Scope 1 + 2) need third-party verification.Physical climate risk reports describe heat, water, flood, dust and coastal hazards at your location using satellite and official data.Climate reports currently cover UAE sites only. We check the data for your location before you pay.Live air quality in Dubai: PM2.5 6.0 ug/m3 (Good), 2026-10-22 05:00 UTC. Source: OpenAQ.
EN عربي

Privacy Notice

Last updated: 9 October 2026 · v1.0

Last updated: 9 October 2026

Version 1.0

This notice explains how DecarbOS Intelligence handles personal data. It is written to follow the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL, Personal Data Protection Law).

1. Who is responsible (controller)

DecarbOS Intelligence, based in the United Arab Emirates, operated by Maria Helen as CEO, is the controller of the personal data described here. We have no offices outside the UAE. Contact: info@decarbosintelligence.ae.

2. What data we collect

  • Account data: name, work email, password (stored only as a one-way hash), language choice.
  • Company and contact data: company name, trade licence details you give us, billing address, phone number, tax registration number.
  • Uploaded documents: utility and fuel bills and similar files. These may contain meter numbers, service addresses and account numbers, and sometimes a person's name.
  • Usage data: pages used and actions taken in your account, and technical logs needed to run and secure the service.
  • Visitor statistics: we count visits by country. We do not store raw Internet Protocol (IP) addresses. An IP address is used only briefly to look up the country, and a one-way salted hash is used to count unique visits. The hash cannot be turned back into an IP address.
  • Payment data: our payment processor handles card or bank details. We receive only the payment status and reference, not your full card number.

3. Why we use it and our legal bases

  • To create your account and deliver the reports you buy. Basis: performing our contract with your business.
  • To take payment, issue invoices and keep tax and accounting records. Basis: contract and legal obligation.
  • To read your bills with Optical Character Recognition (OCR) and extract the figures. Basis: contract, and your consent when you upload the file.
  • To send service emails such as receipts and report-ready notices. Basis: contract.
  • To keep the service secure and prevent fraud and abuse, and to understand where visitors come from at country level. Basis: our legitimate interests, where the PDPL allows.
  • To keep records the law requires, including under the climate law. Basis: legal obligation.

We do not sell personal data and we do not use it for advertising.

4. Bills are read on our own servers

OCR runs on our own servers in the UAE. Your bills are not sent to external artificial intelligence (AI) services.

5. Where data is stored and for how long

  • Your data is stored in systems hosted in the UAE and is encrypted at rest.
  • We keep account, report and supporting data for 7 years. After that, or earlier on your written request, we delete it, unless the law requires us to keep it longer.
  • Where a deletion request conflicts with a legal record-keeping duty (for example tax invoices or climate law records), we keep only what the law requires and tell you.

6. Who we share data with

  • Email service provider: to send you service emails.
  • Payment processor: to take and confirm payments.
  • Hosting provider: to run our systems in the UAE.
  • Your verifier or another person, only when you switch on the read-only verifier pack link and share it.
  • Authorities, where the law or a valid order requires it.

These providers may only use data to provide their service to us and must protect it.

7. International transfers

We store data in the UAE. If a service provider is outside the UAE, or if you ask us to send data to a recipient abroad, we transfer data only as the PDPL allows, for example to a country with adequate protection or with suitable safeguards or your consent. If you use the service from abroad, your data is still processed in the UAE.

8. Security

  • Encryption at rest and in transit, hashed passwords, and access limited to people who need it.
  • Separate accounts so one client cannot see another client's data.
  • If a personal data breach is likely to harm you, we will notify you and the competent authority as the PDPL requires.

9. Your rights

Subject to the PDPL, you may ask us to:

  • give you access to your personal data and information about how we use it;
  • correct data that is wrong or incomplete;
  • delete your data, where we no longer need it or the law allows;
  • give you your data in a structured, commonly used format (portability);
  • stop or restrict processing, or object to it, and withdraw consent you gave.

Write to info@decarbosintelligence.ae. We will reply within a reasonable time and may need to confirm your identity first. You also have the right to complain to the UAE Data Office, the authority that supervises the PDPL. You are welcome to contact us first so we can try to fix the issue.

10. Cookies

We use only strictly necessary cookies. See the Cookies page for the list.

11. Children

The service is for businesses. It is not directed at children, and we do not knowingly collect data from children.

12. Changes and contact

We may update this notice and will show the version and date at the top. Questions or requests: info@decarbosintelligence.ae.

●