LEGAL // PRIVACY

Privacy Policy.

Last updated: 2026-07-10

This policy covers the Brief platform (brief.thuraya.biz), operated by Thurayabiz, Sultanate of Oman, under Oman’s Personal Data Protection Law (Royal Decree 6/2022). The main thuraya.biz website has its own policy.

What we collect

Registration: your name (English/Arabic), email, phone and WhatsApp numbers, address, and — for companies — company name, commercial-registration number, Omanization rate and contact-person details; plus your service categories, portfolio links/files, and a password (stored only as a salted hash). Phone numbers are verified by one-time code.

Verification documents: to confirm you are who you say you are before approving an account, we ask companies for a commercial-registration certificate (and, where applicable, VAT and Chamber of Commerce certificates), and freelancers for a national ID card or passport. These are used solely to verify your registration. They are visible only to Brief administrators — never to clients, other vendors, or anyone else on the platform — and are never included in exports or shared with third parties.

Using the platform: the briefs, proposals, messages, files and payment records you create while participating in engagements. Uploaded files are virus-scanned.

Consent records: when you register we store the time you accepted the Terms of Service and this policy, and which version you accepted.

Technical: server and self-hosted error-monitoring (GlitchTip) logs may record IP addresses and request metadata to keep the service secure. Sign-in uses an essential session cookie; we run no advertising trackers on this platform. If we measure traffic, we use privacy-friendly cookieless analytics (self-hosted Umami).

Why we process it

To operate the marketplace you asked to join: vetting and activating vendor accounts, matching briefs with vendors, recording engagements and payments, resolving disputes, sending the notifications the platform generates (email/WhatsApp), and meeting our legal obligations.

Who can see it

Counterparties on an engagement see the profile and proposal information needed to work together. Thurayabiz staff access data on a role-limited, need-to-know basis. Service providers strictly required to run the platform (hosting, email delivery, WhatsApp Business/Meta, virus scanning, error monitoring) process data on our behalf. We do not sell personal data.

How long we keep it

Account and engagement data is kept while your account is active. On closure we delete or anonymise personal data except records we must retain under Omani law (financial, tax and dispute records) for their statutory periods.

Verification documents are kept only while your account is active and are deleted when it closes. If your registration is rejected, they are deleted with the application.

Your rights

You may see the personal data we hold about you, have it corrected or deleted, and withdraw your consent.

If you have an account, the quickest route is your Security page: Download my data gives you a machine-readable copy immediately, and Correct or delete my data opens a request our team answers within 30 days. You can also email [email protected]. You may complain to the Omani data-protection authority (Ministry of Transport, Communications and Information Technology).

The download excludes your password and two-factor secrets, which are stored only as one-way hashes and are never disclosed to anyone, including you; other people’s personal data; and our staff’s internal notes on support tickets.

Contact

Thurayabiz, Muscat, Sultanate of Oman — [email protected].