Skip to content

Privacy policy

Last updated: 19 October 2026 · Version 2026-10-19

This policy explains how Derbify (operated by Daleel Technology SPC, Commercial Registration 1594831) collects, uses and protects your personal data under Oman's Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulation. When you choose your password, you confirm that you have read this policy and agree to it.

Data we collect

  • Account data: name, email, WhatsApp number, business name and city, and the language you choose. We open accounts ourselves after you contact us, or through the free test form while a test is running.
  • Your project content: what you write in the chat, your answers to the project questions (including your budget if you give it), the photos and logos you upload, the fonts and colours you choose, and the feasibility studies and sites we prepare for you.
  • Your visitors' data: if your site is a store, a booking system or a business system, we keep the orders, bookings and forms your visitors send (such as name, phone, address and request) on your behalf. You decide what to do with this data; we only store and process it to run your site.
  • Payment data: transfer amount, date and receipt reference. We never ask for or store your card details.
  • Messages with us: support requests, your replies to our WhatsApp messages and the feedback you send us.
  • Test feedback: if you join a free test, your answers to the feedback form.
  • Contact form: name, WhatsApp number, business and message, with your consent to be contacted.
  • Security records: sign-in times and important account actions, so we can protect your account.
  • Visit statistics: we count page visits without tracking cookies and without storing IP addresses; we use a hashed token that changes every day.

Why we use your data

  • To provide the service: prepare your feasibility study if you ask for one, build, publish and check your site every week.
  • To send you service messages by email and WhatsApp (see below).
  • To issue invoices and meet legal obligations.
  • To protect your account and the platform.
  • To improve the service through your feedback and through aggregated statistics that do not identify you.

We do not sell your data and do not use it for targeted advertising.

WhatsApp messages

We send service messages to the WhatsApp number on your account, for example:

  • your study is ready, your site is published, a new order or booking has arrived;
  • your credits or your package are about to run out, or your package has ended;
  • a short message after your site is published to ask your opinion;
  • a check-in every few weeks to ask whether you need help.

Passwords, sign-in links and security alerts are never sent by WhatsApp; they go to your email only. You can switch WhatsApp messages off at any time from My account. We send them through Mersal, an Omani WhatsApp messaging service, and they travel through WhatsApp, a service of Meta.

Artificial intelligence

We use Claude models by Anthropic to write feasibility studies, design and write site content, and answer you in the chat. Only your request text and the project information the task needs are sent. Passwords and payment data are never sent. Under Anthropic's commercial terms, data sent through its business API is not used to train its models.

When you buy a domain, the registrar receives the owner contact details that domain registration requires.

Some data is processed by the service providers we work with, some of it outside the Sultanate of Oman. We rely on your consent and on contractual safeguards with them, and send each one only the minimum it needs.

Retention

  • Account and project data: for as long as you subscribe, then 90 days after the account is closed so you can recover it, then deleted.
  • Invoices and payment records: for the period the law requires.
  • Contact requests that did not become subscriptions: one year at most.
  • Free-test sign-ups and feedback: one year at most.
  • WhatsApp message records: one year at most.
  • Backups: overwritten automatically within 30 days.

Your rights

You may ask to access, correct, delete or port your data, withdraw your consent, or object to processing. Send your request to hello@derbifyom.com; we reply within the period the law sets. You may also complain to the personal data protection authority at the Ministry of Transport, Communications and Information Technology.

Security

All our sites use HTTPS, each project is isolated from the others, data access is restricted, backups run daily and sites are checked weekly. When your password changes we tell you by email. If a breach affects your data, we will notify you and the competent authority as the law requires.

Cookies

We only use cookies that are necessary for signing in, remembering your language and protecting forms. No advertising or tracking cookies.

Changes to this policy

When we change this policy in a way that affects you, we tell you and ask you to agree again the next time you sign in.

Contact

Daleel Technology SPC · hello@derbifyom.com · +968 78444129