Privacy Policy
Last updated: 18.08.2026
ALYASI is committed to respecting the privacy of its visitors, users, and clients and to processing personal data lawfully, fairly, and transparently in accordance with the laws applicable in the Sultanate of Oman, including the Personal Data Protection Law issued by Royal Decree No. 6/2022, its Executive Regulations, and any applicable amendments or decisions.
Legal notice: These texts are provided as a general legal framework for the ALYASI platform and do not constitute legal advice. They should be reviewed by a lawyer licensed in the Sultanate of Oman before final adoption, particularly before enabling online payments, subscriptions, or processing sensitive personal data.
1. Scope
This Policy applies to the ALYASI website, pages, contact forms, user accounts, community, news, digital services, APIs, integrations, bots, artificial intelligence services, text-to-speech, and content-generation services whenever available. Certain services may be subject to additional notices or terms presented at the time of use.
2. Definitions
Platform means the ALYASI website and its digital services. User means any person who visits or uses the Platform. Client means any person or entity requesting a service or project. Personal Data means any information relating to an identified or identifiable natural person. Processing means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, or deletion.
3. Personal Data We May Collect
We may collect names, email addresses, telephone numbers, organization names, account details, messages, requests, files submitted by users, project and billing information when applicable, support records, community content, language preferences, and consent records. We may also collect technical information such as IP addresses, device and browser type, operating system, login logs, pages used, referral source, usage time, session identifiers, and cookies.
4. Sensitive Data
The Platform does not request sensitive data unless it is legally or technically necessary for a specific service and the applicable legal requirements have been satisfied. Users must not submit external account passwords, banking card information, or sensitive identity documents through general forms or communication channels not designated for that purpose.
5. Sources of Data
We collect data directly from users when they register, request services, communicate, or upload content; automatically through server logs, cookies, security tools, and analytics; and from third parties when users connect an external service, grant permission, or when necessary to perform a project or comply with a legal obligation.
6. Purposes of Processing
Data may be used to operate the Platform, create and manage accounts, respond to inquiries, prepare quotations, perform projects, provide support, publish user-submitted content, improve performance and user experience, prevent fraud and misuse, protect security, comply with legal obligations, and send operational notices. Personal Data will not be used for direct marketing without consent where consent is required.
7. Legal Bases
Processing may be based on consent where required, performance of a contract or steps requested before entering into a contract, compliance with legal obligations, legitimate interests that do not override the rights of the data subject, or any other lawful basis permitted by applicable law.
8. Consent and Withdrawal
Where processing is based on consent, users may withdraw consent through official contact channels. Withdrawal does not affect the lawfulness of processing carried out before withdrawal and may prevent delivery of a service that depends on the relevant data.
9. Cookies
The Platform may use strictly necessary cookies for sessions, security, language, and preferences, as well as functional or analytics cookies when enabled. Users may control cookies through browser settings or a consent tool, where available. Disabling necessary cookies may affect Platform functionality.
10. Logs and Analytics
The Platform may retain technical and security logs relating to login attempts, errors, requests, network addresses, and device information. These logs are used to diagnose issues, measure performance, prevent intrusion and fraud, investigate misuse, and meet legal requirements.
11. Data Sharing
ALYASI does not sell or rent Personal Data. We may share the minimum necessary data with hosting, security, email, analytics, payment, messaging, storage, AI, or approved contractor service providers; with public or judicial authorities where legally required; or as part of a lawful restructuring or transfer with appropriate safeguards.
12. Service Providers
Some Platform functions may depend on external providers, including hosting, cloud storage, WhatsApp, email, analytics, and AI APIs. These services are also governed by their own terms and policies. ALYASI seeks to select appropriate providers and limit data sharing to what is necessary.
13. International Data Transfers
Some data may be hosted or processed outside the Sultanate of Oman when international service providers are used. In such cases, the Platform will take the measures and safeguards required under applicable Omani law, including obtaining approvals or permits where required.
14. Retention
Data is retained only for as long as necessary for the purpose for which it was collected, to perform a contract, protect rights and legal claims, or comply with legal and accounting retention periods. When no longer required, data will be deleted, destroyed, or anonymized unless retention is required by law.
15. Security
ALYASI implements reasonable technical and organizational measures, including access controls, encryption in transit where available, backups, security updates, and log monitoring. However, no electronic method is completely secure and absolute protection against events beyond reasonable control cannot be guaranteed.
16. Personal Data Breaches
If a security incident affects Personal Data, the Platform will take steps to contain, investigate, and remediate the incident and will notify the competent authority or affected data subjects where notification is required by law.
17. Data Subject Rights
Subject to applicable legal conditions and exceptions, a data subject may request access to, a copy of, correction or updating of, portability of, erasure of, or restriction of Personal Data; object to certain processing; withdraw consent; and lodge a complaint with the competent authority. Identity verification may be required before acting on a request.
18. Accounts and Public Content
Information that users choose to publish in the community or a public profile may be visible to visitors or search engines. Users should not publish Personal Data they do not wish to make public and remain responsible for content they submit and for having the rights necessary to publish it.
19. Artificial Intelligence and Automation
The Platform may use AI or automation for translation, summarization, classification, speech, image or video generation, or suggestions. Inputs may be transmitted to an external provider where necessary. Users should avoid entering confidential or sensitive data unless the service expressly permits it and appropriate safeguards are available.
20. Children
The Platform is not intentionally directed to children and does not knowingly collect their data without a lawful basis and parental consent where required. If data relating to a child is collected unlawfully, reasonable steps will be taken to delete or restrict it.
21. External Links
The Platform may contain links to or embedded content from external websites. ALYASI does not control their practices, and users should review their privacy policies before providing Personal Data.
22. Policy Updates
This Policy may be updated to reflect legal, technical, or operational changes. The revised version will be published with its effective date, and users may be notified of material changes through an appropriate method.
23. Governing Law and Authority
This Policy is governed by and interpreted under the laws in force in the Sultanate of Oman, without prejudice to any rights or jurisdiction granted to data subjects or competent regulatory authorities.
24. Contact and Privacy Requests
Privacy requests, inquiries, and complaints may be submitted through the official contact channels published on the Platform. Users should identify the type of request and provide sufficient contact information for verification and response.