Privacy Policy

1. Who we are

Cyberstream Solutions and Trading SPC (“Cyberstream”, “we”, “us”) is a technology company registered in the Sultanate of Oman (Commercial Registration No. 1664225). We are the controller responsible for the personal data described in this policy. You can reach us at [email protected].

2. Scope

This policy covers our two products:

• waynak — a consumer app for discovering local places, products, and service professionals.
• tijariq — a business platform for small and medium businesses (point of sale, stock, books, and related tools).

It applies to our websites, apps, and related services (together, the “Services”).

3. Information we collect

Information you give us

• Account & business details — if you create an account or claim a business listing: your name, email, phone, business name, category, address or area, and any details you choose to add.
• Communications — messages you send us (support, corrections, takedown requests).

Information we collect automatically

• Device & usage data — app or browser type, language, general region, and how you use the Services (searches, taps), used to operate and improve the Services and keep them secure.
• Saved items — items you save in waynak are stored on your device for your convenience.

Public business information

To build our directory, we collect public business-listing facts — business name, category, public contact details, area, and links — from public sources and licensed data providers. This is business information, not the personal data of consumers. Sources are attributed, and every business can claim, correct, or request removal of its listing.

4. Location information

waynak can show results near you. We use your device location only with your explicit permission, and we handle it with care:

• It is used only to rank and measure distance to nearby results for that search.
• It is sent to our servers in the request body (never in a web address) and used transiently — we do not store your precise location or build a location history.
• Where possible we reduce its precision before it is sent.
• You can decline; waynak then falls back to an approximate, on-device or city-level distance.

5. Instagram & Meta Platform data

In short: we only access a business’s Instagram or Facebook information when the business owner connects their account and authorizes it, through Meta’s official APIs. We access public business-profile information — never private data, and never the personal data of a business’s followers.

When a business owner chooses to connect their Instagram or Facebook account to their waynak listing, we access, through Meta’s official Platform APIs and only with the owner’s authorization:

• public business-profile information (such as the account name, username, category, public contact and link), and
• public posts the owner chooses to feature on their listing.

We use this to display the business’s own content on their listing and to help people recognize and reach that business. We do not collect followers’ personal data, private messages, or any login-gated content, and we do not post on the owner’s behalf without their action. A business owner can disconnect their account at any time; on disconnection we stop accessing new data and delete the connected data we hold, subject to our retention section. Our use of Meta Platform data complies with Meta’s Platform Terms and Developer Policies.

6. Google services

We use Google services (such as Google Maps Platform) to show maps, locations, and business information. Your use of these features is also subject to Google’s Privacy Policy. Where we display information sourced from Google, it is attributed to Google.

7. How we use information

• To provide and operate the Services — show listings, search, maps, and nearby results.
• To let business owners claim, connect, and manage their listings.
• To keep the Services safe, prevent abuse, and fix problems.
• To respond to your messages, corrections, and takedown requests.
• To understand and improve how the Services are used, using aggregated or de-identified data where possible.
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising profiling.

8. How we share information

We share personal data only as needed:

• Service providers — trusted vendors who host and support the Services (for example cloud hosting), under confidentiality obligations and only for these purposes.
• Legal & safety — where required by law, or to protect the rights, safety, and security of users, the public, or Cyberstream.
• Business transfers — if we are involved in a merger, acquisition, or asset sale, data may be transferred, subject to this policy.

9. Data retention

We keep personal data only as long as needed for the purposes above:

• Precise location is not retained.
• Account and connected-business data is kept while your account or listing is active, and deleted (or de-identified) on request or after account closure, subject to legal retention needs.
• Public business-listing facts are kept as part of the directory until a business requests removal.

10. Your rights & choices

Subject to applicable law (including Oman’s Personal Data Protection Law), you may:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data (see the next section).
• Withdraw consent — for example, turn off location permission, or disconnect a social account.
• Object to or restrict certain processing.

To exercise any of these, contact [email protected]. We will respond within the time required by law.

11. Deleting your data

To request deletion of your personal data — including any Instagram or Facebook data connected to a waynak listing — email [email protected] with the subject “Data deletion” and the account or business name. We will verify your request, delete the relevant data, and confirm when done.

Business owners can also disconnect a connected Instagram or Facebook account from their listing at any time, which removes the connected data we hold for it.

12. Business listings — correction & takedown

A business listing in waynak may be shown as unclaimed and is drawn from public sources, clearly attributed, and never presented as owner-confirmed until the owner claims it. If you represent a business, you can:

• Claim the listing to manage it,
• Correct information that is wrong, or
• Request removal of the listing.

Use the in-app “Correct or request takedown” option, or email [email protected]. We act on valid requests promptly.

13. Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.

14. Children

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

15. International transfers

We are based in Oman and may process data using service providers located in other countries. Where we transfer personal data across borders, we take steps to ensure it is protected consistently with this policy and applicable law.

16. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, provide a more prominent notice.

17. Contact us

Questions or requests about this policy or your data:

Cyberstream Solutions and Trading SPC Al Sooq, Al Seeb Al Jadidah, Al Seeb, Muscat Governorate P.O. Box 635, P.C. 112 · Sultanate of Oman [email protected] · +968 9580 0930

This policy is governed by the laws of the Sultanate of Oman, including its Personal Data Protection Law.