Omnya

    Privacy Policy

    Omnya LLC operating as Omnya ("we," "us," or "our"), have designed this Omnya Website Privacy Policy (this "Website Privacy Policy") to help you understand how we may collect, use, and share information through, or in relation to, our corporate website, www.getomnya.com, and any other websites owned or operated by us (each, this "Website").

    Information We Collect and Use

    WE COLLECT INFORMATION IN A VARIETY OF DIFFERENT WAYS:

    1. Information You Directly and Voluntarily Provide to Us.

    We collect personal information (e.g., email address and similar identifiers) that you provide to us when filling out the fields on our Contact Us page or otherwise submitting your contact information to us (such as by signing up for a newsletter). We may use this information to investigate and respond to your inquiries, to communicate with you, and to enhance the Website. The information may be stored into our customer relationship management databases (CRMs) for purposes such as sales and marketing. With respect to email marketing, please follow the instructions within our messages and review the Online Privacy Choices section below.

    2. Information Automatically Collected Through This Website.

    We collect certain personal information (primarily, digital identifiers, such as IP address) automatically when you visit the Website, including:

    • Web logs: Our web servers keep log files that record data every time a device accesses those servers. As such, when you access this Website, we will automatically collect information such as your browser type and version, device and connection information, the Internet Protocol (IP) address used to connect your device to the Internet, and standard web log information.
    • Cookies and Pixel Tags: We may automatically collect information about you and your use of this Website (or enable a third-party to do the same) via "cookies." Cookies are small data files stored within your device's browser. They are created by pixel tags, which are essentially lines of JavaScript code that will create (and store onto your browser), read, and write information into the cookie and collect other information about you in relation to your Website visit.

      Upon subsequent visits (either within the same browsing session or across separate browsing sessions), these cookies are read by its corresponding pixel tags so that the same browser can be recognized again, either on our Website or on other websites that have the same pixel tag. Cookies that are stored by us are called "first-party cookies" and cookies that are stored by third parties (via their own pixel tags) are called "third-party cookies."

      These technologies help us to recognize you, customize or personalize your experience, advertise products or services to you, and analyze your use of the Website. These technologies may also allow us to collect demographic and statistical data and provide this information to our service providers to help deliver their services. Most internet browsers allow you to remove or manage cookie functions and adjust your privacy and security preferences. For information on how to do this, access the "help" menu on your internet browser, or access http://www.aboutcookies.org/how-to-control-cookies. Please note, however, that disabling our cookies may mean that you will not be able to take full advantage of the Website.

    • Google Analytics: We use "Google Analytics" to collect information about your use of the Website. Google Analytics collects information such as how often users access the Website, what pages they access when they do so, and what other sites they used prior to using the Website. Google uses the data collected to track and examine the use of the Website and to prepare reports relating thereto and share them with us and other Google services. To learn more about the use of data collection technologies by Google for analytics and to exercise choice regarding those technologies, please visit the Google Analytics Opt-Out browser add-on page.
    • Profile Pictures: Upon user registration, our platform securely shares a hashed version of the email address with the Gravatar service to retrieve profile pictures associated with the provided email. Gravatar is a third-party service that provides avatars linked to email addresses. It's important to note that only the hashed version of the email address is shared with Gravatar for the sole purpose of obtaining profile pictures. No other identifiable user information is exchanged. By using our platform, you acknowledge and agree that your profile picture may be obtained from Gravatar based on the hashed email address used for registration. Your use of Gravatar is subject to Gravatar's terms of service and privacy policy.

    Use of Google User Data

    When you connect your Google Analytics or Google Ads account to Omnya, we access data through Google APIs using the following OAuth scopes:

    • https://www.googleapis.com/auth/analytics.readonly — to read your Google Analytics reports and display performance metrics in your Omnya dashboard.
    • https://www.googleapis.com/auth/adwords — to read your Google Ads campaign data and, on your direct instruction, create, edit, pause, or optimize campaigns on your behalf.

    Omnya's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    We do not sell Google user data, do not use it for serving ads other than the campaigns you direct us to run, and do not allow humans to read it unless we have your affirmative consent, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymized. We retain Google user data only as long as needed to provide the service. You may disconnect your Google account at any time from account settings, which revokes our access tokens and triggers deletion of cached Google data.

    Other Uses of Personal Information

    IN ADDITION TO THE USES DESCRIBED ABOVE, WE MAY COLLECT AND USE PERSONAL INFORMATION FOR THE FOLLOWING PURPOSES:

    • To create, maintain, improve, and operate the Website.
    • To personalize your user experience.
    • To communicate with you to provide technical or administrative support.
    • To conduct, manage, and grow our organization.
    • To market and advertise to you, such as to provide information and updates on our Website or other news or information about Omnya.
    • To analyze, research, investigate, and improve the use of the Website.
    • To prevent, investigate, and provide fraud notifications, unlawful or criminal activity, unauthorized access to or use of personal information, our data system services, and to meet governmental and institutional policy obligations.
    • To investigate and resolve disputes and security issues.
    • For any other lawful, legitimate business purpose.

    How We Share Your Personal Information

    IN ADDITION TO ANY SHARING DESCRIBED ELSEWHERE IN THIS WEBSITE PRIVACY POLICY, WE MAY SHARE YOUR INFORMATION WITH THIRD PARTIES IN SOME CIRCUMSTANCES AS FOLLOWS:

    • Service Providers: We share personal information with third-party service providers who perform services on our behalf, such as technology providers (including web platforms and hosting providers, email communications providers, analytics providers, and data storage providers).
    • Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
    • Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
      • in connection with the establishment, exercise, or defense of legal claims;
      • to comply with laws or to respond to lawful requests and legal process;
      • to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
      • to detect, suppress, or prevent fraud;
      • to reduce credit risk and collect debts owed to us;
      • to protect the health and safety of us, our customers, or any person; or
      • as otherwise required by applicable law.
    • Consent: Without limiting the foregoing, we may disclose personal information about you to certain other third parties with your consent.

    Control Over Your Information

    ONLINE PRIVACY CHOICES

    We may work with advertisers, advertising networks, advertising servers, and analytics companies ("Ad Partners") that use data collection technologies to understand how our Website is being used and to analyze your browsing history in order to deliver advertising relevant to your interests, as well as to provide advertising-related insights. These advertisements may appear on other websites or services, including through social media networks. These Ad Partners may be able to associate devices across third-party websites or services over time and link various devices used by the same individual.

    For more information about how Ad Partners use the information collected by these technologies and your options for restricting cookies placed by some of these Ad Partners, please visit the DAA's opt-out page. The DAA's opt-outs are device- and browser-specific and may not work on all devices. If you choose to opt-out through the DAA's tools it does not mean you will cease to see advertising. Rather, the ads you see will be based on the website you are visiting and not your interests.

    COMMUNICATIONS PREFERENCES

    You can stop receiving promotional email communications from us by clicking on the "unsubscribe link" provided in the email. You may not opt-out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Website, technical and security notices).

    INFORMATION YOU SHARE ON THIRD-PARTY DIGITAL PROPERTIES

    The Website may include links to third-party websites, plug-ins, and applications. This Website Privacy Policy does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.

    Security and Data Protection Measures

    We implement administrative, technical, and organizational safeguards designed to protect information, including sensitive data such as authentication credentials, OAuth tokens, and payment information. These measures include:

    Encryption

    • In transit: All data transmitted between your browser and our servers, and between our internal services, is encrypted using TLS 1.2 or higher.
    • At rest: Sensitive data stored in our databases and infrastructure is encrypted at rest using AES-256 encryption or equivalent standards provided by our hosting and storage providers.

    Sensitive Data Handling

    • Passwords: User passwords are never stored in plain text. They are cryptographically hashed using industry-standard algorithms before storage.
    • OAuth tokens: Access tokens and refresh tokens received from third-party platforms (such as Google and Meta) are stored encrypted and are accessible only to authorized backend services that require them to perform actions on behalf of the user. Tokens are automatically refreshed and old tokens are invalidated.
    • Payment data: Payment card details are processed and stored by our PCI DSS-compliant payment processor (Stripe). Omnya does not store full credit card numbers, CVVs, or other raw payment card data on its own servers.
    • Google user data: Data received from Google APIs is stored with the same encryption and access controls described in this section and is handled in compliance with the Google API Services User Data Policy, including Limited Use requirements (see the Use of Google User Data section above).

    Access Controls

    • Role-based access control (RBAC): Access to customer data within the Platform is governed by role-based permissions. Users can only access data associated with accounts they have been granted access to, at the permission level assigned by the account owner.
    • Internal access: Omnya employees and contractors operate under the principle of least privilege. Access to production systems and customer data is restricted to personnel who require it for their role and is logged for audit purposes.

    Data Minimization and Retention

    • We collect and retain only the data necessary to provide the Services and fulfill the purposes described in this Privacy Policy.
    • OAuth tokens are revoked and deleted when a user disconnects a third-party account.
    • Logs and telemetry data are retained for a limited period and purged or de-identified on a rolling basis.

    Monitoring and Incident Response

    • We maintain logging, monitoring, and alerting systems to detect unauthorized access, anomalies, and potential security incidents.
    • We maintain an incident response process to assess, contain, remediate, and notify affected parties as required by applicable law and customer agreements.

    No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If you have security concerns, contact us at support@getomnya.com.

    Updates to This Website Privacy Policy

    From time to time, we may revise this Website Privacy Policy to reflect changes to this Website or for other reasons. Therefore, it is important to check this Website Privacy Policy periodically. If we make any material revisions to this Website Privacy Policy, we will update this Website Privacy Policy and change the 'Last Updated' date accordingly. It is the obligation of those visiting this Website to learn of changes to this Website Privacy Policy since their last visit. Any change to this Website Privacy Policy shall be effective once the modified Website Privacy Policy is made available on this website (or as otherwise stated by us).

    CONTACT US

    If you have any questions about this Website Privacy Policy, please contact us at: support@getomnya.com

    Last Updated: June 17, 2026