Privacy Policy

We collect information you provide directly (name, email address, company, billing details, and marketing content you create), information generated by your use of the platform (campaign data, dispatch logs, open and click events, contact lists you upload), and technical information collected automatically (IP address, browser type, device identifiers, and cookies).

We do not collect sensitive personal data such as health information, financial account details beyond payment processing tokens, or government identification numbers.

We use collected information to: provide and improve the platform; process payments; send transactional emails (receipts, password resets, invite notifications); provide customer support; detect and prevent fraud and abuse; comply with legal obligations; and, with your permission, send product update emails.

We do not sell your personal data to third parties. We do not use your marketing campaign content to train AI models.

When you upload contact lists or generate outbound messages, OmniPromote processes personal data of your contacts as a data processor on your behalf. You are the data controller for that data. You are responsible for having a lawful basis to market to your contacts and for maintaining suppression lists.

OmniPromote provides suppression and unsubscribe management tools. Using them is your responsibility.

We use essential cookies for session management and authentication. We use analytics cookies (privacy-respecting, no cross-site tracking) to understand how the platform is used and improve it.

We do not use advertising cookies or share cookie data with ad networks.

Account data is retained for as long as your account is active. Dispatch logs and analytics data are retained for 12 months by default. You may request earlier deletion at any time.

When you delete your account, your personal data is purged within 30 days. Aggregated, anonymized statistics may be retained indefinitely.

We share data with the following categories of subprocessors: cloud infrastructure (hosting, database, object storage), payment processing (Razorpay), error monitoring, and email delivery.

A current list of subprocessors is available on request at support@omnipromote.in. We require all subprocessors to meet GDPR-equivalent data protection standards.

Integration credentials stored in your account are encrypted at rest using Fernet symmetric encryption. Passwords are hashed with bcrypt. All data in transit is encrypted via TLS 1.2 or higher. We conduct regular security reviews.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@omnipromote.io.

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (right to erasure); object to or restrict processing; and data portability.

To exercise any of these rights, contact us at privacy@omnipromote.io or use the Data & Privacy section in your account settings. We will respond within 30 days.

OmniPromote is operated from India. If you are located in the European Economic Area, the UK, or another jurisdiction with data transfer restrictions, your data may be transferred to and processed in countries with different data protection laws. We use Standard Contractual Clauses where required.

OmniPromote is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected such data, contact us immediately.

We may update this Privacy Policy periodically. We will notify registered users by email at least 14 days before material changes take effect. The current version is always at omnipromote.io/privacy.

For privacy questions or to exercise your rights:

Email: privacy@omnipromote.io Postal: TechVent Labs, [Address on file]