Acceptable Use Policy

1. The short version

• Use Tsaami only for your own real business and its real customers.
• Only message people who agreed to hear from you, and stop when they ask.
• Be honest: what a card or a message promises, you deliver.
• Do not put anything on a card, a join page or a message that is unlawful in

Oman or offensive to its customs.

• Do not try to reach data that is not yours.

2. Businesses and content that are not allowed

2.1 You may not use Tsaami for a business, a card, a reward or a message that involves:

• anything unlawful in the Sultanate of Oman, or goods and services that need a

licence you do not hold;

• alcohol, tobacco, vaping products, drugs, or medicines that need a

prescription;

• gambling, lotteries or prize draws that are not permitted by law;
• weapons or dangerous goods;
• adult or sexual content;
• unlicensed financial services, lending, investment schemes, pyramid or

"get rich quick" schemes;

• counterfeit goods, or content that infringes someone else's rights;
• content that is hateful, threatening, defamatory, that insults religion, or

that is contrary to public order and morals in Oman;

• political or religious campaigning.

2.2 Cards in Apple Wallet and Google Wallet must also follow Apple's and Google's own rules. A card that they refuse or remove cannot be offered through Tsaami.

2.3 Your shop name, logo, card and join page must be your own and must not imitate another business or mislead people about who you are.

3. Your customers' data

You may not:

• add people who did not ask to join. Each member must have agreed, personally,

on the join page or at your counter;

• upload a list you bought, rented or collected from somewhere else. You may

import the members of your own earlier loyalty programme only if they agreed to be members of it, and you must remove anyone who asks;

• enrol a child without the consent of the child's guardian;
• record sensitive information about a person (for example health, religion,

ethnic origin, political opinions or criminal records) in a name, a note, a tag or anywhere else;

• use members' details for anything other than your own loyalty programme, or

pass them to someone else, unless the member agreed;

• look up members out of curiosity. Staff should open a member's details only

to serve them. Tsaami keeps a record of who viewed customer data.

4. Messages to your customers

4.1 Two kinds of message.

• A service message tells a member something about their own card: a stamp

was added, a reward is ready, their points are about to expire, a card they hold is ending.

• A promotional message advertises or markets something: an offer, a new

product, an event, an invitation to come back.

4.2 Offers need the member's consent first. You may send a promotional message only to a member who agreed, personally, to receive offers from your shop — a separate choice from joining the card — was told by which channel they would come, and has not asked you to stop (Personal Data Protection Law, Article 22; Executive Regulation, Article 22). Joining a loyalty card is not, by itself, consent to offers, and you may not send an offer to a member who did not agree.

4.3 Stopping must be easy and free. Every promotional message must say how to stop. When a member asks to stop, by any means, you stop at once and record it.

4.4 Timing and frequency. Tsaami delivers offers only between 8:00 am and 9:00 pm, Oman time, and never at night; a shop can make its own quiet hours longer but not shorter. Do not send more than two promotional messages to the same member in a week, and do not send during Friday prayer (11:30 am to 1:30 pm).

4.5 Every message must:

• clearly come from your shop, under its real name;
• be true. No false "last chance", no invented prices, no prize the member has

not won;

• honour what it offers, on the terms stated;
• contain nothing listed in section 2;
• not ask for passwords, card numbers, one-time codes or payments;
• not be written to look like a message from a bank, a government body, Tsaami,

Apple or Google.

4.6 You may not send messages for another business, sell or lend your audience to anyone, or send chain messages or "forward this to win" messages.

4.7 The consent is the member's own. A member agrees to offers by ticking a box on your join page, beside wording that Tsaami sets and that you cannot change. You may not tick it for a customer, on your device or on theirs. You may not promise or give anything in return for the tick (a free drink, extra stamps, a discount), on your join page or anywhere else, and you may not tell a customer that joining needs it.

5. WhatsApp from your shop's number

Tsaami may later let you connect your shop's own WhatsApp number. It is switched off today; when Tsaami enables it, these rules apply:

• messages go from your number, in your name, and you are the sender;
• you must follow WhatsApp's own terms and business rules. WhatsApp may restrict

or ban a number that sends bulk or unwanted messages, and that risk is yours;

• sections 3 and 4 apply in full, and Tsaami applies monthly limits per plan;
• you may only message members of your own programme, never numbers taken from

elsewhere.

Tsaami never messages your customers from its own number.

6. Being fair to members

• Honour the stamps, points and rewards a member has earned under the rules

that applied when they earned them.

• Do not add or remove stamps or points to deceive a member, to favour staff or

friends, or to create rewards that were not earned.

• Tell members before you end a programme, and give them a fair chance to use

what they have earned.

• Do not block a member for a reason the law forbids.

7. Security and fair use of the service

You may not:

• share one login between several people, or let someone outside your business

use your account;

• try to get into another shop's data, test for weaknesses, or get round limits,

locks or plan restrictions;

• copy, scrape or automate the dashboard or join pages, other than through the

API with your own key;

• resell Tsaami or run it for another business without our written agreement;
• upload malware, or use Tsaami to attack or overload any system;
• open more than one free trial for the same business.

If you connect your own systems (API keys, webhooks), keep the keys secret and protect the data they receive.

8. What happens if this policy is broken

8.1 Depending on how serious it is, we may: ask you to put it right; remove a card, a message or a campaign; pause messaging; suspend the account; or end the contract (Terms of Service, clause 16).

8.2 Where there is a risk to customers or to other shops we may act at once and tell you afterwards.

8.3 We may report unlawful activity to the authorities and co-operate with them as the law requires.

9. Reporting a problem

If you received a message you did not agree to, or you think a shop is misusing Tsaami, write to info@tsaami.com or on WhatsApp at +968 7727 2705. Tell us the shop's name and, if you can, send the message.