Terms of service — the rules of the road.

These Terms of Service take effect on the date you (or anyone with authority to bind your business) clicks Accept on the sign-up flow, or on the date you first use the service — whichever is earlier. The version with the latest Last updated stamp at the top of this page is the version that applies.

By creating a tenant, by issuing an invoice, or by allowing your employees to do either, you confirm that you have read these terms, that you have authority to bind your legal entity, and that your business agrees to be bound. If you do not agree, stop using the service and email us — we will refund any unused fees on a pro-rata basis.

These terms, together with our Privacy Policy and the order form you accepted at checkout (or in a sales contract, if any), form the entire agreement between us.

Six terms do a lot of work in this document. Read them once and the rest will read cleanly.

The Service is for UAE-registered businesses. To sign up, you must hold a valid trade licence issued by an Emirate or free zone, and the person creating the account must be authorised to bind that entity.

You may issue test invoices on the Service from day one. To issue live invoices that are transmitted to Peppol or reported to the FTA, the tenant must have a valid VAT Tax Registration Number (TRN) on file. We verify the TRN against the FTA registry at the point of activation; if the TRN is invalid, suspended, or in a status that bars e-invoicing, the live channel stays disabled until the issue is resolved on your side.

The Service is not available to entities subject to UAE sanctions, to entities whose trade licence has lapsed, or to individuals (the Service is B2B; consumers are not Tenants).

You agree to give us accurate, current information at sign-up — legal name, trade licence number, TRN, billing address, the email and mobile of each user — and to keep that information current. If we cannot reach the account admin via the contact details on file, we cannot send you the legally required notices in section 13, and that is not a defence to anything in these terms.

One tenant per legal entity. Each TRN gets one tenant. Group companies with multiple registered entities open one tenant per entity, billed and administered together where the plan supports it.

Account security is on you. You are responsible for choosing strong authentication (UAE Pass or password + MFA), for the actions of every user you provision, and for revoking access when an employee leaves. If you suspect a credential has been compromised, email support@bluewhalefincore.com immediately — we will help you contain the incident and audit the trail.

You may use the Service to issue, receive, sign, and report your own genuine business invoices, to connect your own ERP or accounting system via the published APIs, and to use the AI scanner and Compliance Coach on documents that belong to you or that you have permission to process.

You may not, and you may not allow any user to:

• Issue invoices that you know to be false, inflated, duplicated, or that record a transaction that did not occur.
• Use the Service to evade tax, to launder funds, or to violate UAE AML, sanctions, or competition law.
• Probe, scan, load-test, scrape, or reverse-engineer the Service without our written consent — aside from the legitimate use of the published APIs at documented rate limits.
• Resell the Service, white-label it, or grant access to anyone outside your tenant who is not a permitted user of that tenant.
• Upload malware, unlawful content, or content that infringes a third party’s rights.
• Train any third-party AI model on data extracted from the Service.

We reserve the right to suspend any user or any tenant that we reasonably believe is doing any of the above — see section 10 for how that works in practice.

Your content is yours. You retain all rights, title, and interest in every invoice, attachment, logo, and record you upload or generate inside the Service. We do not claim ownership over any of it.

To run the Service, you grant us a narrow, royalty-free, worldwide licence to host, copy, transmit, transform, sign, and display your content solely for the purpose of providing the Service to you — PINT AE generation, XAdES-BES signing, Peppol DCTCE dispatch, FTA C5 reporting, backups, search inside your own tenant, and the customer-visible features you have enabled. The licence ends when you delete the content or close your tenant, subject to the statutory retention periods set out in the Privacy Policy.

We do not use your content to train AI models — ours or any third party’s. We do not sell or share your content for advertising. We do not browse it for purposes other than running the Service and responding to support requests you raise.

Fees are set out on the pricing page or on the order form you accepted at sign-up or in a sales contract. Prices are quoted in AED and are exclusive of UAE VAT, which we add at the prevailing rate and remit to the FTA in the normal way.

Auto-renewal. Subscriptions renew automatically at the end of each term — monthly plans every month, annual plans every year — on the same payment method, at the price effective on the renewal date.

Cancellation. You can cancel at any time:

• Monthly plans — give us at least 30 days’ notice before the next renewal date. Cancellation takes effect at the end of the paid term.
• Annual plans — cancellation takes effect at the end of the term in which notice is given. Annual fees are not refundable mid-term except where the law requires.

Overage. If you exceed the invoice volume included in your plan, additional invoices are billed at AED 0.10 per invoice on the next invoice cycle. We send you an email at 80% and 100% of the included volume so there are no surprises.

Late payment. Invoices are due 14 days from issue. If a charge fails, we retry; if it keeps failing, we email the account admin, give you 14 days to fix it, and then suspend the live FTA reporting channel — not the read-only access to your records — until the balance is cleared.

We run the Service on UAE-resident infrastructure with redundancy across availability zones. Our uptime targets:

These are targets, not contractual SLAs with credits. Until v1.0, we do not offer service credits for missed targets — we offer transparency and root-cause analysis on the public status page instead. Enterprise customers with a signed MSA may negotiate a credit-bearing SLA from v1.0 onwards.

Planned maintenance is announced at least 72 hours in advance on the status page and by email to account admins. Emergency maintenance happens with whatever notice is possible — sometimes zero — and we explain it in a post-incident report within 5 business days.

The Service is designed to help you comply with the UAE e-invoicing mandate under Cabinet Decision 106/2025 — PINT AE 1.0 generation, XAdES-BES signing, Peppol DCTCE dispatch, FTA C5 reporting. Our FTA ASP accreditation and Peppol Access Point certification are in progress on a track timed to land before Wave 1 (January 2027). We do not currently claim either accreditation — the live status is always on the compliance page.

We provide tools; you are the taxpayer. The legal obligation to comply with UAE VAT law, with the e-invoicing mandate, with record-keeping requirements, and with any subsequent FTA decisions rests with your business. We are not your tax advisor and the Service is not a substitute for tax advice. You are responsible for the accuracy of the data you upload, for confirming the tax treatment of each transaction, and for reviewing FTA acknowledgements and rejections on the platform.

Where the Service flags a risk — an invoice at risk of late-transmission fine, a missing TRN, a Peppol routing failure — you agree to act on the flag promptly. We are not liable for fines imposed because a flag was ignored.

Either party can terminate this agreement. You terminate by cancelling under section 7. We may terminate or suspend a tenant for:

• Non-payment — after the 14-day cure window in section 7 has passed.
• Material breach of these terms (section 5 prohibitions, abuse of the Service, fraudulent invoicing) — with notice and, where the breach is curable, a 14-day cure window.
• Legal or regulatory requirement — an order from a UAE authority, a sanctions listing, or a change in law that makes the Service unlawful to provide to that tenant.
• Risk to the platform — activity that materially endangers the security, integrity, or availability of the Service for other tenants. Suspension in this case may be immediate; we explain it in writing within 24 hours.

On termination, your live access ends, but we keep your invoice data for the statutory UAE VAT retention period (5 years), during which you retain a read-only export right. After that window, your data is deleted or irreversibly anonymised in line with the Privacy Policy.

To the maximum extent permitted by UAE law, each party’s total aggregate liability arising out of or related to this agreement is capped at the total fees you paid to us in the 12 months immediately preceding the event giving rise to the claim. Neither party is liable for indirect, incidental, consequential, or punitive losses, or for loss of profit, revenue, goodwill, or anticipated savings.

The cap does not apply to: (a) your obligation to pay fees due; (b) breach of confidentiality; (c) gross negligence or wilful misconduct; or (d) any liability that cannot be excluded under UAE law.

The Service is provided as is and as available. Aside from express warranties in this agreement, we disclaim all implied warranties to the extent permitted by law.

This agreement is governed by the laws of the United Arab Emirates. The courts of Dubai have exclusive jurisdiction over any dispute arising out of or related to it — subject to the note below on incorporation status.

Our UAE leg, an Ajman Free Zone entity, is currently in incorporation. Until that entity is fully registered, contracts are signed by the offshore parent (BlueWhale Consulting & Technologies, India) under the same UAE-law, Dubai-Courts forum — with the express agreement that the UAE entity will step in as counterparty by novation once incorporated. Customers do not need to resign anything for this to happen; we will notify you in writing when it does.

Where you have a signed MSA that names a different forum (DIFC Courts, arbitration in Dubai or Abu Dhabi), that MSA controls.

If we change these terms in a way that affects your rights or obligations — price changes, new restrictions, narrower warranties, a different forum — we will give you at least 30 days notice by email to the account admin and by a banner inside the app on login. If you keep using the Service past the effective date, you have accepted the new version; if you do not, cancel under section 7 and we will pro-rate any prepaid fees for the unused period.

Non-material edits — typos, link fixes, clarifications — are made silently and reflected in the Last updated stamp at the top. Past versions are kept in an internal archive and available on request.

One inbox for anything legal — questions about these terms, MSA negotiation, notices of breach, data subject requests routed our way:

Postal address — Ajman Free Zone (UAE entity, incorporation in progress). Once the address is registered, it will appear here in place of this note.