1. Who we are
"Orfloat" is a trading name of Afraa & Mufassir LLC, a limited liability company registered in the Sultanate of Oman (Commercial Registration 1504141, License L3717644), with its registered address and primary operations base at Ghala Heights, Way 5026, Marina Building 1549, Muscat, Sultanate of Oman. We are the data controller for the personal data described in this notice.
2. What data we collect
When you submit the contact form, we collect your first and last name, job title, company name, email address, phone number, and the message you write. If you open the optional details panel, we also collect the business, team, tooling, data, budget, timeline, and desired-outcome information you choose to provide. If you verify to use orf, the website helper, we collect the details described insection 5. We do not currently set analytics, marketing, or advertising cookies on this site.
3. Why we collect it
We process enquiry data only to reply to your enquiry, schedule an introductory call where appropriate, and (if both sides see a fit) to enter into an Engagement Letter. We do not sell, rent, or share your data with third parties for their marketing purposes.
4. Where it is stored
Enquiry data submitted through the contact form is processed by Cloudflare and Resend, then delivered to the founders' email inbox. It may also be processed using standard business productivity tools such as email and document storage. These providers may operate facilities outside Oman; where this is the case, we rely on their published security and data protection commitments.
5. orf, the website helper
orf is available only to verified visitors. To verify, you give your full name and a company email address, and confirm the address with a one-time code we email to you. Using orf requires your agreement that Orfloat may contact you at that address for security and marketing purposes. Without that agreement, orf is not available to you.
We keep your name, your email address, when you agreed and the version of this notice you agreed to, when you verified, when you last visited this site while verified, and the daily counts described below. We use these records to protect orf against misuse, to contact you about security and about Orfloat's services, and for analytics on how orf is used.
When you ask orf a question, your question and the last few messages of the conversation are sent to Anthropic, whose Claude model writes orf's answers from the content of this website. We do not store the text of your questions or of orf's answers. We keep a daily count of your questions and of their size, to apply orf's limits and for analytics.
A Cloudflare Turnstile check confirms that a person, not an automated program, is signing up; Cloudflare processes technical signals from your browser to do this. Your IP address is also used briefly to limit how often orf can be used from one connection, and your email's domain is looked up through Cloudflare's DNS service to confirm it can receive mail. Your orf records are stored by Cloudflare, and the code email is sent through Resend. Once you verify, orf sets one cookie in your browser that keeps you verified for 30 days. Only orf reads it, and it does not track you. Signing out of orf removes it.
We keep orf records while you use orf and for as long as is reasonably necessary for these purposes afterwards. You can ask us to delete them at any time by getting in touch; deleting them ends your access to orf.
6. How long we keep it
We retain enquiry correspondence for as long as is reasonably necessary to respond, to operate any resulting engagement, and to comply with our legal and tax obligations. You can ask us to delete your enquiry at any time by getting in touch.
7. Your rights
Subject to Oman's Personal Data Protection Law and any other applicable law, you have the right to ask us to confirm what personal data we hold about you, to correct it if it is inaccurate, to delete it where appropriate, and to withdraw any consent you have given. Please get in touch and we will respond within a reasonable period.
8. Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful access, loss, or disclosure. No system is perfectly secure; please do not share information through this site that you would not be comfortable sending by email.
9. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be announced on this page.
10. Contact
For any question about this notice or about how we handle your personal data, please get in touch.