Privacy Policy

Omnioto ("we," "us," or "our") operates the website and application at omnioto.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account information — email address and display name when you create an account.
• Tasks, projects, and reminders — content you create and manage within the Service.
• Chat messages — text and voice messages you send to the AI assistant.
• Memory and facts — personal preferences, context, and facts extracted from your conversations to personalize the AI experience.

1.2 Information Collected Automatically

• Usage data — pages visited, features used, timestamps, and interaction patterns.
• Device information — browser type, operating system, and device identifiers.
• Timezone and locale — to deliver reminders and notifications at the correct local time.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including AI-powered task management, reminders, and chat features.
• Personalize your experience through our memory system, which learns your preferences and context over time.
• Process your messages with AI models to understand intent, extract tasks, and generate helpful responses.
• Send push notifications for reminders and important updates you have configured.
• Communicate with you about your account, respond to support inquiries, and send service-related notices.
• Monitor and analyze usage patterns to maintain, troubleshoot, and improve the Service.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

3. AI and Service Improvement

We are committed to continuously improving the quality and capabilities of our Service. To that end, we may use anonymized and aggregated data derived from your use of the Service to:

• Improve and develop our services, features, and user experience.
• Enhance our AI capabilities, including the accuracy and relevance of AI-generated responses.
• Train and fine-tune AI models that power the Service.
• Conduct research and analysis to build better products.

When data is used for these purposes, it is stripped of personally identifiable information and aggregated so that it cannot reasonably be used to identify you. We do not sell your personal data to third parties.

4. Third-Party Services

We use trusted third-party service providers to operate the Service:

• Supabase — authentication, database hosting, and file storage. Data is stored on Supabase's infrastructure.
• OpenAI — AI language model processing. Your chat messages are sent to OpenAI's API to generate responses. OpenAI's data usage policies apply to this processing.
• Vercel — application hosting and deployment infrastructure.
• Resend — transactional email delivery (e.g., password resets, account notifications).

These providers process data on our behalf and are contractually obligated to protect your information. We encourage you to review their respective privacy policies.

5. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and all associated data at any time by contacting us at support@omnioto.com.

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

6. Cookies and Tracking

We use minimal cookies strictly necessary for the operation of the Service. These include authentication cookies to keep you signed in and session cookies for security purposes. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that track you across other websites. We do not participate in cross-site tracking or behavioral advertising.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including relying on Standard Contractual Clauses or other legally recognized transfer mechanisms where required.

8. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us at support@omnioto.com and we will take steps to delete such information promptly.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), secure authentication, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights Under the GDPR (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete personal data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request a machine-readable copy of your data.
• Right to object — object to our processing of your data for certain purposes.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent.

Our legal bases for processing include: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and consent (where applicable). To exercise any of these rights, contact us at support@omnioto.com. You also have the right to lodge a complaint with your local data protection authority.

11. Your Rights Under the CCPA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know — request information about the categories and specific pieces of personal information we have collected about you.
• Right to delete — request deletion of your personal information, subject to certain exceptions.
• Right to opt-out — opt out of the "sale" of your personal information. We do not sell your personal data.
• Right to non-discrimination — exercise your privacy rights without receiving discriminatory treatment.

To exercise these rights, contact us at support@omnioto.com. We will verify your identity before fulfilling any request.

12. Your Rights Under the India DPDPA 2023

If you are located in India, the Digital Personal Data Protection Act, 2023 (DPDPA) provides you with the following rights:

• Right to access — obtain a summary of your personal data and processing activities.
• Right to correction and erasure — request correction of inaccurate data or erasure of data no longer necessary for the purpose it was collected.
• Right to grievance redressal — raise concerns about how your data is being processed.
• Right to nominate — nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

We process your data based on your consent provided when you create an account and use the Service. You may withdraw consent at any time by deleting your account or contacting us. To exercise any rights under the DPDPA, contact us at support@omnioto.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by providing additional notice (such as an in-app notification or email). Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: