Legal
Privacy policy
Last updated 2 August 2026
This policy explains what personal data Omni Workforce collects, why we collect it, and what you can do about it. It covers omniworkforce.com and the Omni customer dashboard.
Who we are
Omni Workforce (“Omni”, “we”, “us”) is the data controller for the personal data described in this policy. You can reach us at info@omniwfm.ai.
What we collect
When you browse the site
- Analytics data — pages viewed, referring site, approximate region (country or city level), device type and browser. This is aggregated and is not used to identify you.
- Consent preferences — which cookie categories you accepted, stored locally in your browser so we do not ask again.
When you book a demo
- Your name, email address, company, and anything you type into the booking form. Demo scheduling is handled by Calendly, which processes this data on our behalf.
When you become a customer
- Account data — name, work email, company, role, and authentication credentials.
- Billing data — company billing details and invoice history. Card numbers are handled entirely by Stripe; we never see or store them.
- Service data — the business data your Omni employees need to do their jobs, and the record of work they perform. This is covered in more detail below.
- Support communications — messages you send us and our replies.
Service data and your customers’ data
Omni employees work inside your business, which means they process data belonging to you and to your customers — inboxes, tickets, ledgers, CRM records. For that data, you are the controller and Omni is the processor. We handle it only on your documented instructions and only to deliver the service you hired us for.
We do not sell service data, and we do not use your business data or your customers’ data to train general-purpose models for other customers.
Why we use it
- To deliver the service — performing the contract you entered into with us.
- To run and secure the business — billing, fraud prevention, support, and keeping the service available. Our legitimate interest.
- To understand how the site is used — improving what we publish. Your consent, or our legitimate interest where the analytics are aggregate and cookieless.
- To meet legal obligations — tax, accounting, and responding to lawful requests.
Who we share it with
We share personal data with service providers who help us operate, each bound by contract to protect it:
- Supabase — database, authentication and file storage
- Vercel — website hosting and delivery
- Stripe — payment processing
- Calendly — demo scheduling
- Google Workspace — email and calendar
- Model providers — the AI infrastructure that powers Omni employees, under agreements that prohibit training on your data
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Cookies
We use a small number of strictly necessary cookies to keep you signed in and remember your consent choice. These do not require consent because the site cannot function without them.
Anything beyond that — analytics and marketing — only runs if you turn it on. You can change your mind at any time from the cookie settings link in the footer, and rejecting non-essential cookies does not reduce your access to the site.
How long we keep it
- Analytics data — 14 months
- Demo booking enquiries — 24 months from last contact
- Customer account and service data — for the life of the account, then 90 days
- Invoices and financial records — 7 years, as tax law requires
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict how we use it, receive a portable copy, and withdraw consent at any time. Exercising these rights will never result in worse service.
Email info@omniwfm.ai and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you can complain to your local data protection authority.
International transfers
Our providers may process data in the United States and elsewhere. Where data leaves the EEA or UK, we rely on Standard Contractual Clauses or an equivalent safeguard.
Security
We use encryption in transit and at rest, row-level access controls, and least-privilege access for staff. No system is perfectly secure, but if a breach affects your data we will tell you what happened, what we did, and what happens next.
Children
Omni is a business service and is not directed at anyone under 16. We do not knowingly collect their data.
Changes
If we change this policy materially we will update the date above and, for customers, tell you by email before it takes effect.
Questions about this policy? info@omniwfm.ai