# Privacy policy | 4Ys AI Solutions Source: https://4ys.org/privacy # Privacy 4Ys AI Solutions · Muscat, Sultanate of Oman · Last updated: 8 October 2026 Legal, privacy and security: [admin@4ys.org](mailto:admin@4ys.org) [العربية](/ar/privacy) ## Privacy Policy ### 1\. What We Collect We collect minimal information needed to provide our services: - Contact details you provide (name, email, phone) when reaching out to us - Business data you input into systems we deploy for you - Basic analytics (browser type, pages visited) to improve our website ### 2\. How We Use It - To deliver and maintain the services you've engaged us for - To communicate with you about your account or services - To improve our systems and website experience ### 3\. We Don't Share Your Data Your data is never sold or shared with third parties for marketing. We only share data when required by law or when necessary to deliver a service you've requested (e.g., a third-party integration you've approved). ### 4\. Security We use industry-standard security measures to protect your data. All client systems run on dedicated, managed infrastructure. That said, no system is 100% immune - we're transparent about that. ### 5\. Your Rights You can request access to, correction of, or deletion of your personal data at any time by emailing [admin@4ys.org](mailto:admin@4ys.org). ### 6\. Changes We may update this policy as our services evolve. We'll update the date at the top and notify you of any material changes. ### 7\. Who Is Responsible for Your Data For what you send us through this website, by email or on WhatsApp, 4Ys AI Solutions is the controller: we decide how it is used, as this policy describes. For personal data inside the systems we run for a client, the client is the controller and 4Ys processes the data on the client's behalf, under the Data Processing Addendum below. ### 8\. Your Rights Under Oman's Personal Data Protection Law Oman's Personal Data Protection Law (Royal Decree 6/2022) gives you the right to: - withdraw your consent to the processing of your personal data - ask us to correct or update it - get a copy of the personal data we process about you - have it transferred to another controller - ask us to erase it - be told of any breach affecting it, and of what we are doing about it Write to [admin@4ys.org](mailto:admin@4ys.org) to use any of these rights. If you believe your data has been processed in breach of the law, you can also complain to the Ministry of Transport, Communications and Information Technology. ### 9\. Where Your Data Is Processed Client systems run on infrastructure managed by 4Ys, which can be outside Oman, unless a client's agreement says otherwise. Some of the providers listed under Subprocessors work from outside Oman, for example the network that serves this website and the AI model providers that Midnight routes to. Personal data leaves Oman only as Article 23 of the Personal Data Protection Law allows. ### 10\. How Long We Keep It We keep what you send us for as long as we need it to reply to you and to keep a record of our dealings with you. We keep a client's data for as long as the client's service agreement runs. When it ends, the data is exported and returned as clause 18 of the Terms & Conditions describes. ### 11\. Contact 4Ys AI Solutions, Muscat, Sultanate of Oman, [admin@4ys.org](mailto:admin@4ys.org) ## AI and your data - Midnight is 4Ys's AI system. For each task it routes to a suitable foundation model from vetted third-party AI providers, under 4Ys's own instructions, guardrails and knowledge controls. - To produce a reply, the provider receives what that task needs: for example a customer's message, the earlier messages in the conversation, and the business content the answer comes from. The providers that apply to a client are named in its agreement (clause 22). - When Midnight answers a business's customers, it says it is an AI assistant in its first message, and says so again whenever it is asked. It never claims to be a person. - Client data is never shared with other clients and never used to train models for other clients. Trinity is trained per client, on that client's own data, for that client alone. - AI output can be wrong. The client reviews AI-generated content before relying on it or sending it to customers (clause 24). - New AI features may be offered as beta, on the terms of clause 23. ## Cookies and local storage - This website sets no advertising or tracking cookies. - We count visits with a cookie-free analytics service, which does not follow you to other sites. - Your browser keeps one setting for this site: 4ys-theme, which remembers whether you chose the light or the dark theme. It stays on your device and is never sent to us. - The design samples under /showcase load typefaces from the font services they were made with. Those services receive the ordinary details of any web request, such as your IP address. ## Subprocessors | Provider | What it does | Data involved | When | | --- | --- | --- | --- | | Website hosting and delivery network | Hosts and delivers this website | Website requests: IP address and browser details | Every visit | | Cookie-free analytics | Counts visits to this website, without cookies | Pages visited, referring site, browser, device type and country | Every visit | | Web3Forms | Delivers the contact form to our inbox | What you write in the form | When you send the form | | Meta Platforms (WhatsApp) | WhatsApp messaging: your conversations with us, and WhatsApp features for clients who enable them | Phone numbers and message content | When WhatsApp is used | | AI model providers | Produce the replies of Midnight and other AI features, and read documents or images a client gives an AI feature | What the task needs: messages, names in them, and the business content the answer comes from | When an AI feature is used | | Cloud database and storage | Stores the data in client systems | Client system data | Managed deployments | | Email delivery | Sends account and notification emails from client systems | Email addresses and the email's content | When a client system sends email | | Telecom and SMS providers | SMS and voice features | Phone numbers and message content | Where SMS or voice is enabled | | Payment processors | Collecting payments online | Payment details | Where online payment is enabled | | Hosting and data-centre providers | The dedicated servers client systems run on | Client system data | Managed deployments | Which of these apply to a client depends on the modules in its agreement (clause 22 of the Terms & Conditions), which names the provider in each category.