How OASIS Finance handles personal data
OASIS Finance is a business administration and CRM service operated by OASIS Executive Solution-FZCO, Dubai, UAE. This page explains the service's current data flows. A customer organisation controls the business records its authorised users enter; OASIS operates the platform and manages account, security and support data. The precise controller/processor responsibilities must also be documented in the customer agreement.
Data and purposes
We process account details, roles and sign-in events to give authorised people access. Customer organisations may enter contacts, CRM notes, invoices, accounting records, bank statements, uploaded documents and support requests. These records are used to provide the requested finance and CRM functions, protect the service, meet applicable tax and accounting duties, and support users. We do not use uploaded financial records for advertising.
Access and suppliers
Access is restricted by organisation and role. The service uses Supabase for authentication and database/storage services and its website host for application delivery. Data may be processed outside the UAE. OASIS must confirm the actual hosting regions, subprocessors and lawful cross-border transfer arrangements for each customer before representing a deployment as UAE-localised.
Retention
Financial and tax records cannot always be erased on request. Applicable UAE VAT records generally require at least five years after the relevant tax period, with longer periods for some records; Corporate Tax records generally require seven years after the relevant tax period. Other records are retained only as needed for the service, contract, security or legal claims. The customer-specific retention and deletion schedule is being finalised; no automatic deletion of statutory accounting records is enabled.
Your choices and rights
Depending on the applicable law and circumstances, you may request information, access, correction, restriction, objection or deletion. We verify identity and the responsible organisation before responding, and may need to retain records required by law. Signed-in users can submit a privacy request. If you cannot sign in, contact OASIS through its business website; do not send identity documents or bank details in an initial message.
Cookies and security
The application uses essential authentication/session storage and a language preference. These are needed for sign-in and your selected language. We do not currently use advertising cookies in the application. Connections use HTTPS; access and relevant actions are logged. No internet service can promise absolute security.
This operational notice does not replace the customer contract or a UAE legal review. If the customer is established in DIFC or ADGM, additional or different data-protection rules may apply.