Privacy Policy

1. Who we are and the scope of this policy

Xposio (operated by AMWAJ INTERNATIONAL INVESTMENTS, CR No. 1452834) is a creative, marketing and technology agency based in Muscat, Sultanate of Oman.

This policy explains how we collect, use, share and protect personal information when you visit xposio.com, contact us, or use our services, including when we manage marketing and advertising on platforms such as TikTok, Meta and Google on behalf of our clients.

2. Information we collect

• Information you provide: name, email, phone number, business name, message content and any details you submit through our forms, the client portal, or WhatsApp.
• Information collected automatically: IP address, browser and device type, pages visited, and similar usage data via cookies and analytics.
• Information from third-party platforms: when you or a client authorize us to manage accounts or advertising (such as TikTok, Meta and Google), we may access account and campaign data made available to us through those platforms’ official tools and APIs, strictly to provide the agreed services.

3. How we use your information

• To respond to your enquiries and provide our services.
• To create, manage, optimize and report on marketing and advertising campaigns.
• To operate, secure and improve our website and client portal.
• To send service-related messages and, with your consent, updates and offers.
• To comply with legal obligations.

4. Advertising platforms and third-party APIs (TikTok, Meta, Google)

As a marketing agency, we use third-party advertising and content platforms, including TikTok, Meta (Facebook/Instagram) and Google, together with their official business tools and APIs, to deliver services to our clients.

Our use of data obtained through these platforms is limited to providing the agreed services and is governed by each platform’s terms and policies, including the TikTok Developer/Business Terms, the Meta Platform Terms, and the Google API Services policies.

We do not sell personal data, and we do not use platform data for any purpose other than the one authorized by the client and permitted by the platform.

5. Cookies and tracking

We use cookies and similar technologies for essential functionality, analytics and to measure marketing performance. You can control cookies through your browser settings and our consent banner.

6. How we share information

• With service providers and platforms (hosting, analytics, advertising platforms) that process data on our behalf under appropriate safeguards.
• With our clients, where the data relates to services we deliver for them.
• When required by law, or to protect our rights, our users or the public.
• We do not sell your personal information.

7. Data retention

We keep personal information only as long as necessary for the purposes described, to comply with legal obligations, resolve disputes and enforce agreements, after which it is deleted or anonymized.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent at any time. To request deletion, see our Data Deletion page or contact us. We respond within a reasonable period.

9. Data security

We apply reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, but we work to safeguard your data.

10. Children’s privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. International data transfers

We are based in Oman and may use service providers located in other countries. Where data is transferred internationally, we take steps to ensure appropriate protection.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest revision, and continued use of our website or services constitutes acceptance of the updated policy.