Privacy Policy

1. Overview

NOS Studio is a platform for the development of National Occupational Standards in the Sultanate of Oman, operated by Tilqai (“we”, “us”, “our”). This policy explains how we collect, use, and protect your personal data when you use the NOS Studio platform at nos.tilqai.om, in accordance with Oman’s Personal Data Protection Law (PDPL), issued by Royal Decree 6/2022 and its Executive Regulations (MD 34/2024).

2. Legal Basis for Processing

We process personal data on the following legal bases under the PDPL: (a) performance of a contract or service to which you are a party; (b) compliance with a legal obligation under GDT-MOL regulatory requirements; and (c) your explicit consent where required. You may withdraw consent at any time by contacting us, without affecting the lawfulness of processing carried out prior to withdrawal.

3. Information We Collect

We collect information that you provide directly when using the platform:

• Account information: Full name, email address, job title, and organisational role.
• Registration data: Organisation name, registration number, sector, governorate, and governing board details submitted through the association registration form.
• Content data: NOS records, unit standards, performance criteria, consultation feedback, and documents you create or upload on the platform.
• Usage data: Login timestamps and actions taken within the platform for audit and system security purposes.

4. How We Use Your Information

• To provide and maintain the NOS Studio platform and its features.
• To process association registration applications and SSU establishment workflows.
• To generate NOS documents, reports, and compliance records required by GDT-MOL.
• To send platform notifications related to tasks, reviews, and stage advancements.
• To provide AI-assisted content drafting. AI processing is performed server-side using only the specific field context required for generation. All AI-generated content is presented as a draft for human review and acceptance before being saved.
• To improve platform performance, security, and user experience.

5. Data Storage and Security

Your data is stored in a secure, managed database with row-level access controls enforced. Each organisation’s data is logically isolated — users can only access records belonging to their own organisation.

All user passwords are encrypted. All data transmission between your browser and our servers is encrypted using TLS. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, as required by Article 14 of the PDPL.

6. Cross-Border Data Transfers

In the course of providing platform services, your data may be processed on servers located outside the Sultanate of Oman. Where such transfers occur, we ensure that adequate safeguards are in place in compliance with Articles 17 and 18 of the PDPL and the conditions set by the Ministry of Transport, Communications and Information Technology (MTCIT) for cross-border data transfers.

7. Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Data may be shared with GDT-MOL as part of the official NOS submission and SSU licensing process, which is the intended regulatory function of the platform. Platform administrators (Tilqai) have access to data for support, compliance, and system administration purposes.

8. Data Retention

NOS records and associated data are retained for the lifetime of the published standard and its review cycle (typically 3 years), or as required by GDT-MOL regulatory obligations. Account data is retained as long as your account is active. Upon account deactivation or deletion request, personal data will be erased or anonymised within a reasonable period, unless retention is required by law.

9. Your Rights Under the PDPL

Under Oman’s Personal Data Protection Law, you have the right to:

• Access your personal data held by us.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data, subject to regulatory retention requirements.
• Object to or restrict the processing of your personal data in certain circumstances.
• Withdraw your consent at any time where processing is based on consent.
• Lodge a complaint with the MTCIT if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at hello@tilqai.com. We will respond within the timeframe prescribed by the PDPL.

10. Cookies

NOS Studio uses essential cookies for authentication session management only. We do not use analytics cookies, advertising trackers, or third-party tracking scripts.

11. Contact

For questions about this privacy policy, your personal data, or to exercise your rights under the PDPL, contact:

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be notified to you via the platform or by email. Changes will be posted on this page with an updated revision date. Continued use of the platform after changes constitutes acceptance of the updated policy.