Privacy Policy

Contact Information

• ●Name, email address, phone number, and business address
• ●Account login credentials

Payment Information

• ●Billing name and address
• ●Payment card details are collected directly by Stripe via Stripe Elements or our mobile application — Omnita never sees or stores raw card numbers, CVV codes, or full PAN data
• ●Omnita stores a Stripe PaymentMethod token (a reference identifier) along with limited card metadata: last 4 digits, card brand, and expiry date, used solely to display saved payment methods
• ●When a customer saves a payment method through a business's Omnita-powered storefront or app, that card is stored in Stripe and linked to the customer's Stripe record; the business can subsequently use it to process charges for that customer
• ●If a customer shares card information directly with the business outside of the Omnita storefront, storage and handling of that information is the business's responsibility and is governed by the business's own policies
• ●Transaction history, payment status, and subscription records

Business & Client Data

• ●Client contact records and communication history you store in the CRM
• ●Appointment and scheduling data
• ●Invoices, estimates, and financial records you create
• ●Files and documents you upload to the platform

AI Interaction Data

• ●Prompts, inputs, and responses generated through AI features
• ●Automation logs and agent activity records
• ●Feedback you provide on AI outputs

Usage & Technical Data

• ●IP address, browser type, device identifiers, and operating system
• ●Pages visited, features used, and time spent on the platform
• ●Error logs and performance data

Service Providers & Sub-processors

• ●Stripe — payment processing sub-processor; handles card data, tokenization, payouts, and fraud detection. Stripe operates under its own privacy policy (stripe.com/privacy) and acts as a data processor on our behalf
• ●Cloud infrastructure, email delivery, analytics, and support vendors bound by confidentiality agreements and data processing agreements

Businesses Using the Platform

• ●When you make a payment to a business through their Omnita-powered storefront, your name, email address, phone number, payment metadata (last 4 digits, card brand), and transaction details are shared with that business
• ●Tax-relevant information — including your billing postal code and jurisdiction — is stored as part of a location snapshot to support the business's own tax filings
• ●This sharing is necessary to fulfill the transaction and deliver the service you requested

Legal & Compliance

• ●Law enforcement or regulatory authorities when required by applicable law, subpoena, or court order, or to protect our legal rights
• ●Acquirers or successors in the event of a merger, acquisition, or sale of assets, with advance notice to you

Third-Party Integrations

• ●Third-party tools and services you connect to your account; data shared with those services is subject to their own privacy policies

What Will Be Deleted by Omnita

• ●Email address and phone number associated with your Omnita account
• ●Vehicle information stored in your account profile
• ●Service and delivery addresses saved to your account (does not include billing address — see below)
• ●Payment method records stored in your Omnita account (note: your payment processor, such as Stripe, may independently retain transaction records under their own legal obligations and privacy policy)
• ●Conversation logs, message history, and in-platform communication threads
• ●Call recordings and call transcripts
• ●AI-generated summaries, action items, and notes derived from your communications
• ●Support tickets and associated correspondence initiated through your account
• ●Media files you uploaded or shared through the platform

What Will Not Be Deleted

• ●Reservation and service history records with your personal data removed — these are retained as anonymized business records for operational and audit purposes
• ●Transaction amounts and payment history with your personal data removed — financial records are retained to satisfy tax and accounting obligations
• ●Your name and billing address — retained to comply with applicable tax, financial reporting, and legal record-keeping requirements; this data is not used for marketing or service delivery after your request is processed
• ●Media captured or uploaded by the business in connection with services rendered to you (e.g., before-and-after photos, inspection records) — these are business records owned by the service provider; you may contact the business directly to request review or removal of specific items

Authentication & Session Cookies

• ●We use strictly necessary cookies to maintain your login state and keep your session active while you use the platform
• ●These cookies are required for the platform to function and cannot be disabled
• ●Session cookies expire when you close your browser; persistent authentication cookies expire after a defined period or when you sign out

Preference & Functionality Cookies

• ●We store lightweight preferences (such as your selected theme or language) in your browser to personalize your experience
• ●These are first-party cookies and are not used for advertising or cross-site tracking

Behavioral Analytics & Event Tracking

• ●We collect in-platform behavioral events — including page views, search queries, product interactions, add-to-order actions, and checkout steps — to understand how users navigate and use the platform
• ●Each event is associated with a rotating session ID, not with your account, name, email address, or any other directly identifying information
• ●Session IDs are regularly rotated and are designed so that they cannot be linked back to any individual user — this is an intentional data minimization practice
• ●This data is used solely for product improvement, performance monitoring, and feature usage analysis; it is not used for advertising and is not sold or shared with third parties for marketing purposes
• ●Aggregated and anonymized behavioral data may be retained for up to 24 months for trend analysis; raw session-level event logs are purged on a rolling 90-day basis

Two-Way Chat & Conversation Logs

• ●All messages sent and received through the Omnita platform — including customer replies, business responses, and AI-drafted messages — are stored as conversation records in your CRM
• ●Conversation threads are accessible to any team member with appropriate permissions in your Omnita account
• ●The Omnita AI reads conversation history to generate contextually relevant draft replies, summaries, and follow-up suggestions on your behalf
• ●Conversation logs are retained for the life of your account and deleted within 90 days of account termination, in accordance with our data retention policy

SMS & Text Messaging

• ●Omnita.ai may send SMS messages to phone numbers you or your customers provide, including appointment reminders, booking confirmations, follow-up notifications, and AI-assisted replies
• ●Phone numbers are collected directly at account setup, via CRM import, or when a customer contacts your business through an Omnita-connected channel
• ●Opt-in consent is captured at the point of number entry and logged with a timestamp
• ●Message frequency varies based on your business activity and automation settings
• ●Message & data rates may apply

Phone Calls & Voice

• ●Omnita.ai may facilitate, record, and transcribe phone calls between you and your customers through the Voice for Omnita feature
• ●Call recordings and transcripts are stored securely in your account and are accessible to team members with appropriate permissions
• ●Calls are recorded for quality assurance, customer service, and compliance purposes
• ●Callers are notified that calls may be recorded at the start of each call session, as required by applicable law
• ●In states or jurisdictions that require all-party consent for call recording, it is your responsibility to obtain and document consent from all parties before enabling call recording
• ●Call recordings are retained for the life of your account and deleted within 90 days of account termination

AI Processing of Communications

• ●Omnita’s AI agent reads incoming and outgoing messages to draft replies, detect intent, and log relevant details (e.g., appointment requests, payment follow-ups)
• ●Call transcripts are processed by AI to generate summaries, action items, and follow-up suggestions for quality assurance, customer service, and compliance review
• ●AI-generated messages are presented for your review before sending, unless you have enabled auto-send for specific workflow types
• ●Anonymized and aggregated communication patterns — including transcripts — may be used to improve AI model quality; identifiable message content, customer data, and call recordings are not used for model training without your explicit consent

SMS Data Sharing

• ●No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

SMS Opt-Out & Help

• ●To stop receiving SMS messages, reply STOP at any time. You will receive a one-time confirmation and no further messages will be sent.
• ●To get help or information about the messaging program, reply HELP.
• ●For support, contact us at legal@omnita.ai.