Privacy Policy

Who we are

ekycIQ is an identity verification service operated by Muscat Tech Solutions, Muscat, Sultanate of Oman ("we", "us"). This policy explains what personal data we process when an organisation uses ekycIQ to verify your identity, why we process it, and the choices you have.

When you complete an eKYC or reKYC check, the organisation that asked you to verify (for example your bank, insurer or employer) decides why your identity is being checked. Muscat Tech Solutions processes your data on that organisation's behalf and under its instructions.

What data we process

Identity document data: an image of your Oman National ID or Resident ID and the fields read from it, such as your name, civil number, date of birth, nationality and expiry date.

Biometric data: a live selfie or short video, the facial features derived from it for matching against your document photo, and the liveness signals captured during the check.

Technical data: device type, browser, IP address, timestamps and the outcome of each verification step, recorded in an audit log.

Contact data: if you contact us by email or WhatsApp, the details you share with us in that conversation.

Why we process it

To verify that the identity document is genuine, that the person presenting it is its holder, and that a real person is present at the camera.

To detect and prevent fraud, including forged or tampered documents and spoofed selfies.

To let the requesting organisation meet its own Know Your Customer and anti-money-laundering obligations under Omani law.

To keep a tamper-evident record of each verification so that it can be audited later.

Consent and sharing

Before a check starts you are shown what will be captured and asked to agree. Your consent is recorded together with the verification.

The result of a check, and only the fields the requesting organisation is entitled to receive, is shared with that organisation over encrypted connections. We do not sell personal data and we do not share it with anyone else unless the law requires it.

Where your data is stored

Identity and biometric data is stored on infrastructure located in the Sultanate of Oman. It is encrypted in transit and at rest, and access is restricted to personnel who need it to operate and support the service.

How long we keep it

We keep verification data for as long as the requesting organisation instructs us to, which is normally the period its regulator requires it to retain customer identification records. When that period ends the data is deleted or irreversibly anonymised.

Your rights

You can ask to access the personal data we hold about you, to correct it, or to have it deleted where the law allows. Because we process data on behalf of the organisation that requested your check, we may refer your request to that organisation or ask you to contact it directly.

To exercise a right or to ask a question about this policy, email sales@mts-om.com or message +968 7963 3314 on WhatsApp.

This website

This marketing site does not use cookies for tracking and does not run analytics scripts. Fonts are loaded from Google Fonts, which receives your IP address when the font files are requested. The eKYC verification flow itself runs inside the requesting organisation's application, not on this site.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will also be communicated through the organisations that use the service.