Privacy Policy

1. Who we are

Sahaala Tax Technology Solutions LLC ("Sahaala", "we", "us") is an Omani tax-technology company providing e-invoicing services for Oman's Fawtara program. Sahaala is a product of Muscat Auditing and Accounting Services and operates as its own business entity in the Sultanate of Oman. For privacy matters, contact us at info@sahaala.ai.

2. Data we collect

• Contact data — name, email address, phone number, company name and message content you submit through our forms.
• Invoice and business data — when you use the Sahaala platform, we process invoice documents, VAT data and related master data on your instructions, to provide the service and meet Peppol and Oman Tax Authority (OTA) obligations.
• Technical data — basic usage logs, device and browser information needed to operate and secure the service.

3. How we use it

• To respond to enquiries and provide readiness assessments.
• To deliver e-invoicing services: validation, exchange, reporting to the OTA, and compliant archiving.
• To meet legal and regulatory obligations, including retention periods required under the Fawtara framework.
• To secure, maintain and improve the platform.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Legal basis & local law

We process personal data in accordance with the Oman Personal Data Protection Law (Royal Decree No. 6/2022) and its implementing regulations. Where we act as a processor of your clients' invoice data, we do so solely on your documented instructions.

5. Data ownership & retention

You and your clients own your invoice and business data. Invoice records are retained for the period required by the Fawtara mandate (currently ten years) and are available for export. Contact-form data is kept only as long as needed to handle your enquiry and any follow-up.

6. Security

The platform operates under ISO/IEC 27001:2022 (information security) and ISO 22301:2019 (business continuity) controls, with encryption in transit and at rest, access controls and full audit logging.

7. Sub-processors & transfers

We use vetted infrastructure sub-processors (such as cloud hosting providers) to operate the service. Form submissions on this website are processed by Web3Forms to deliver your message to our inbox. Where data is processed outside Oman, we apply safeguards consistent with applicable law and our certifications.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Write to info@sahaala.ai and we will respond within a reasonable period.

9. Changes

We may update this policy from time to time. The "Last updated" date above reflects the latest revision; material changes will be highlighted on this page.