سياسة الخصوصية

1Introduction

At mytool.om (the "Site") we respect your privacy and are committed to protecting your personal data in line with the Personal Data Protection Law of the Sultanate of Oman and the regulations in force. This policy explains what data we collect, why we collect it, how we use and protect it, and your rights over it. It applies to the Site, all of its tools and the My Tool Plus subscription.

By using the Site you confirm that you have read this policy. It should be read together with the Terms & Conditions.

2Data we collect

• Account data: your email address; your name and profile picture if you sign in with Google; and your password in encrypted form (we never see it in plain text).
• Subscription and payment data: your plan, subscription start and end dates, amounts, transaction and invoice numbers, and payment status. If you turn on auto-renewal, we keep the payment gateway's token for your card and a short label for it (such as Visa •••• 4242). We never see or store your full card number or security code; Thawani handles them.
• Content you create: surveys and their questions, exams, elections and their records, CVs and their photos, to-do lists, short links, and any files or images you upload.
• Data users collect through our tools: answers from survey and exam participants, and voter and candidate details (such as name, civil number and phone number) entered by election organisers.
• Technical data: IP address, browser and device type, usage times and server logs. We keep the IP address and time of your acceptance of the terms with each payment, as a record.
• Correspondence: anything you send us through the contact or tool-suggestion forms.

3How we use your data

• To provide the Service, run the tools, and store and show you your content.
• To create your account, sign you in, and protect the account from unauthorised use.
• To process payments, activate and renew subscriptions, and send payment and renewal notices.
• To answer your questions and provide support.
• To improve the Site and its tools, and to detect and prevent faults and misuse.
• To meet legal requirements and respond to requests from the competent authorities as the law requires.

4Data you collect through our tools

When you use tools such as surveys, exams or elections to collect data from other people, you are responsible for that data; we host and process it on your behalf only to provide the Service. You must:

• Tell participants why you are collecting their data, and obtain their consent or have a lawful basis for collecting it.
• Collect only the data your purpose needs, and not collect sensitive data without a lawful reason.
• Keep results, participation links and shared admin access confidential.
• Respond to participants' requests about their data.

The Site is not responsible for any unlawful collection or use of such data, as set out in the Terms & Conditions.

5Sharing data

We share your data only in the following cases, and only as far as needed:

• Thawani Pay (payment gateway): to process payments and save your card when you turn on auto-renewal, under Thawani's own privacy policy.
• Google: when you choose to sign in with your Google account, to verify your identity.
• Hosting and infrastructure providers: who store the Site's data and are bound to protect it.
• People you share with: such as people you give access to a survey, or people you send participation links and results to.
• Competent authorities: where there is a legal obligation, to protect our rights or users' safety, or to investigate misuse.

6Cookies and local storage

We use one essential cookie for your sign-in session. We use your browser's local storage to remember preferences such as language, and to remember that you have already answered a particular survey. When you ask for the My Tool Plus free trial, we store a random number in your browser (in a cookie and in local storage) that carries no personal information, and record it with the trial, so that the free trial is given once per device; if a device is shared, the site's administrators review the request by hand. We do not use advertising or cross-site tracking cookies. Third-party services such as Google and the payment gateway may use their own cookies under their own policies. You can delete these files in your browser settings; doing so will sign you out.

7How long we keep data

• We keep your account data and content for as long as your account exists.
• After a subscription ends, your content may remain stored for a reasonable time, with no obligation on us to keep it.
• We keep payment records and records of acceptance of the terms for as long as financial and accounting rules require, and as evidence in case of a dispute.
• When you delete your account, we delete your data or make it no longer linked to you within a reasonable time, except where the law requires us to keep it.

8Protecting your data

We apply reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted passwords, access limited to authorised people, and never storing bank card details. However, no system on the internet can be guaranteed to be completely secure. You are responsible for protecting your sign-in details and not sharing them.

9Your rights

Under the law, you have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Ask us to correct, update or complete your data.
• Ask us to delete your data or your account.
• Withdraw your consent to processing based on consent, without affecting what was done before you withdrew it.
• Object to, or ask us to restrict, the processing of your data where the law allows.
• Turn off auto-renewal and delete your saved card at any time from the My Tool Plus page.

To exercise any of these rights, contact us from the email address registered on your account. We may ask you to verify your identity before acting on the request.

10Minors

Paid subscriptions and accounts are intended for adults. Anyone under 18 must use the Service under the supervision and with the consent of a parent or guardian. If we learn that we have collected a minor's data without a guardian's consent, we will take steps to delete it.

11Changes to this policy

We may update this policy from time to time. The updated version will be published on this page with its effective date, and we will announce material changes on the Site. Continuing to use the Service after an update means you accept it.

12Contact

For any question or request about your privacy or data, contact us through the "Contact us" page on mytool.om. If the Arabic and English texts differ, the Arabic text prevails.