This policy explains how UnloadPal ("we", "us") handles personal data when you visit unloadpal.com, create an account, subscribe to our service or send us tasks. We process personal data in line with the Sultanate of Oman's Personal Data Protection Law, issued by Royal Decree 6/2022, and its executive regulations.
1. Who we are
UnloadPal is a virtual assistant service based in Oman. Clients subscribe to a monthly plan and submit tasks ("orders") through a client portal, and our team completes the work and returns it on the order page.
For the personal data described in this policy, UnloadPal is the controller. You can reach us at hello@unloadpal.com.
2. What we collect
Account details
When you create an account or contact us: your name, email address, phone number and company name (where you provide them), plus your sign-in credentials. Passwords are handled by our authentication provider and are never visible to us.
Billing records
Your subscription status, payment dates and amounts, and the bank transfer references you send us so we can match a payment to your account.
Order content
Everything you give us to do the work: the files you upload or email to us, your written instructions, messages in the order chat, revision requests, and the finished documents and earlier versions we deliver back to you.
Technical data
Basic logs created when you use the website and portal, such as IP address, browser and device type, the pages and actions requested, timestamps and error reports. We use these to keep the service secure and working.
Contact form messages
If you use our contact form, the details you enter (name, email, optional company and phone, topic and message) are sent to us by email.
3. Why we use it
| Purpose | Data used |
|---|---|
| Creating and running your account | Account details, technical data |
| Doing the tasks you order and delivering the results | Order content |
| Activating, renewing and refunding your subscription | Account details, billing records |
| Sending service emails (order updates, deliveries, billing notices, replies to your questions) | Name, email address, order references |
| Keeping the service secure and fixing problems | Technical data |
| Meeting legal, tax and accounting obligations | Billing records, account details |
We process your data because it is needed to provide the service you signed up for, to meet our legal obligations, or with your consent where the law requires it. We do not sell your personal data, and we do not use your files or messages for advertising.
4. Who can see what
We built the portal so that the people doing your work don't need to know who you are.
- Operators (the team members who complete orders) see only an automatically generated nickname for you, together with the files, instructions and messages for the orders assigned to them. They never see your real name, email address, phone number, company or profile.
- The account admin can see real identities, because this is needed to handle billing, activate subscriptions, process refunds and give support. Access is limited to what those jobs require.
- You can see everything in your own account, including every order, message and file version.
Your nickname protects your identity, but it can't hide information you include in the content itself. If a document contains your name, logo or contact details, an operator working on it will see them. If that matters for a particular task, remove or mask those details before uploading.
We do not share your personal data with anyone else except the service providers listed below, or where we are required to by law or by a competent authority in Oman.
5. Service providers
We use a small number of trusted providers to run the service. They process data only on our instructions and for the purposes above.
- Google Firebase (Google LLC): hosting of this website and portal, user authentication, the database that stores your account and orders (Cloud Firestore), and storage of uploaded and delivered files (Cloud Storage).
- Resend: delivery of emails we send, such as order notifications, delivery emails, billing notices and messages from our contact form.
- Google Analytics, Google Ads, Meta, TikTok and Snap: measuring visits and the results of our ads, only if you accept cookies (see section 10).
- PayPal (PayPal Pte. Ltd. and its affiliates): processing online card and PayPal payments. We never see or store your full card number.
These providers may store or process data on servers outside Oman. Where this happens, we rely on providers that apply recognised security and data protection safeguards, and we transfer only what is needed to provide the service.
6. Files sent by email
If you prefer not to upload, you can email documents to hello@unloadpal.com and mention your order number. We attach them to the right order so the task is still tracked in your portal, and operators receive the files without your email details.
Email is less controlled than the portal: messages pass through your email provider and ours. For sensitive material, uploading through the portal is the better option.
7. How long we keep it
- Orders, files and messages are kept while your account is active, so you can go back to past work and earlier versions at any time.
- After you close your account, you can ask us to delete your data, and we will delete your account details, orders, files and messages within 90 days of the account being closed.
- Billing records are kept for as long as Omani law requires, even after account deletion.
- Technical logs are kept only as long as needed for security and troubleshooting.
8. Security
We take reasonable technical and organisational steps to protect your data, including:
- encrypted connections (HTTPS) between your browser and our service;
- access rules that restrict each person to the data their role requires, including the nickname system described above;
- confidentiality commitments from everyone on our team;
- storage on Google Firebase infrastructure, which encrypts data at rest.
No online service can be perfectly secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authority where the law requires it. Please keep your password private and let us know straight away if you suspect someone else has used your account.
9. Your rights
Under Oman's Personal Data Protection Law you have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct data that is inaccurate or incomplete (you can update most account details yourself in the portal);
- delete your data, subject to the billing records we must keep by law;
- withdraw consent at any time where we rely on it, without affecting processing that has already taken place;
- complain to the competent authority in Oman if you believe your data has been mishandled.
To use any of these rights, email hello@unloadpal.com from the address linked to your account. We may ask you to confirm your identity before acting on a request, and we will respond within the time the law allows.
11. Children
UnloadPal is a business service intended for adults. We do not knowingly create accounts for, or collect personal data from, children.
12. Changes to this policy
We may update this policy as the service changes or the law develops. We will change the "Last updated" date above, and if a change materially affects how we use your data we will tell you by email or in the portal before it takes effect.
13. Contact us
Questions about this policy or your data? We're happy to help.
See also our terms of service.