Privacy policy
We collect only what is needed for the assessment, we never share invoices without consent, and you can delete your data on request.
This policy explains what information is processed by Oman Fawtara, how it is used, and the controls you have over it. It covers the readiness assessment service only.
Scope
This policy applies to the Oman Fawtara public service: uploading an invoice, the assessment itself, optional business details, leads and consultation bookings.
What we process
We process the minimum needed to run the assessment:
- The file you upload and its SHA-256 hash for integrity.
- Extracted invoice data used by the rule engine (never shown to others).
- Optional contact and business details you choose to provide.
- A short-lived locale cookie to remember your language preference.
Storage and security
Uploads are stored in private object storage with encryption at rest, strict upload limits and short-lived signed access. Files are never exposed publicly, and invoice contents are never written to logs.
Consent
Assessment consent and marketing consent are tracked separately. Marketing consent is optional and is never required to receive your result or to contact a consultant.
Optional AI-assisted extraction
AI-assisted extraction, if enabled, is optional, isolated behind a provider interface, explicitly disclosed and confidence-scored. Your invoice is never sent to an AI provider unless you are clearly informed and the configured privacy or legal basis permits it.
Retention and deletion
Data is kept only as long as needed and is subject to a retention policy. You can request deletion of your invoice and details at any time; the immutable assessment snapshot used for technical auditability remains governed by applicable records and retention requirements.
Cookies
Oman Fawtara sets a single locale cookie (1 year) to remember your language. No advertising or tracking cookies are used.
Contact
For privacy questions or deletion requests, email :email.