Security & privacy
How Float protects your data and your rights over it, under the UAE Personal Data Protection Law (PDPL).
Export everything as JSON or delete your account entirely at any time from Settings — never gated.
United Arab Emirates-edition data is processed in-region under the UAE Personal Data Protection Law (PDPL). Complaints go to the UAE Data Office.
Magic-link (and optional Google) sign-in, rate-limited, with optional TOTP two-factor for every user.
Bank data flows through Lean (Open Banking). Float stores a masked reference, never your banking password.
KYB/KYC use the trade-licence registry + Emirates ID/passport; a “verified” badge is always backed by a real check.
Bank consents expire on a fixed window — Float reminds you at 21, 7 and 1 days so you never lose a feed.
Notifications you control
Float only sends what you switch on under Settings → Notifications:
- Crunch alerts (urgent SMS if within 14 days)
- Weekly Monday digest
- Overdue-invoice chase reminders
- VAT deadline countdown (14 / 7 / 1 days)
- Bank-consent expiry (21 / 7 / 1 days)
- Re-verification reminders (30 / 7 / 1 days)