Privacy Policy

This Privacy Policy explains how Omniroq ("Omniroq", "we", "us") collects, uses, shares, and protects personal data, and the rights you have under the EU/UK General Data Protection Regulation (GDPR) and similar laws. It applies to our websites and the Omniroq Services.

1. Controller vs. processor

We act as a data controller for personal data about our website visitors, prospects, and the account administrators and users of the Services (for example, account and billing details). We act as a data processor for the personal data our customers upload into the Services about their own contacts and customers ("Customer Data"); for that data, the customer is the controller and our Data Processing Agreement governs.

2. Personal data we collect

3. How we use personal data & legal bases

4. Cookies & tracking

We use cookies and similar technologies as described in our Cookie Policy. Where required, we ask for your consent to non-essential cookies through our cookie banner, and you can change your choices at any time.

5. How we share personal data

• Sub-processors. Vendors that process data on our behalf (hosting, email, analytics, payments). See our Sub-processors list.
• Our merchant of record. Paddle.com Market Limited sells our subscriptions to you and receives the data it needs to do so (name, email, billing address, tax number, payment details). Paddle processes that data as an independent controller under its own privacy notice.
• Integrations you enable. When you connect a third-party product, data is shared with it at your direction.
• Legal & safety. Where required by law, or to protect rights, safety, and the integrity of the Services.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal data.

6. International transfers

We may transfer personal data to countries outside your own. Where we transfer data out of the EEA/UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), together with additional measures where needed.

7. Data retention

We keep personal data only as long as necessary for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained per the customer's configuration and our DPA; after account closure we make it available for export for a limited period, then delete or anonymize it.

8. Your rights (GDPR / UK GDPR)

Subject to conditions and exemptions, you have the right to:

• Access a copy of your personal data;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting prior processing;
• Lodge a complaint with your supervisory authority.

To exercise these rights, email [email protected]. If your data was provided to us by one of our customers (i.e. we act as processor), we will refer your request to that customer.

9. How we protect your data

We implement technical and organizational measures appropriate to the risk, including encryption in transit (TLS) and encryption of sensitive credentials at rest, access controls, least-privilege administration, logging, and regular review. Learn more on our Trust & Security page. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the Services or by email, and the "Effective date" above will be updated.

12. Contact us & Data Protection

Controller: Omniroq, [Registered company address].
Privacy / Data Protection contact: [email protected]
General privacy questions: [email protected]