Privacy Policy

Last Updated: July 29, 2025

1. Introduction

This Privacy Policy explains how Omnity AI LTD ("Omnity AI," "we," "us") collects, uses, and discloses information when you use our website or our services (collectively, the "Service"). This policy is an integral part of our Terms of Service.

2. Data Processing Roles under GDPR

Our role under the UK General Data Protection Regulation (UK GDPR) depends on the situation.

Omnity AI as Data Processor: When a business User provides us with Content containing personal data for processing by the Service, the User is the "data controller" and Omnity AI is the "data processor." Our processing of this data is governed by our Terms of Service and, for business Users, a separate Data Processing Addendum ("DPA") which must be executed with us.

Omnity AI as Data Controller: Omnity AI acts as the "data controller" for the personal data we collect to manage our business and our relationship with our Users. This includes account information (e.g., names and email addresses) and usage data.

3. Information We Process as a Data Controller

A. User Account Information

What We Process: Contact details, professional information, and payment information you provide when you create an account or make a purchase.

Lawful Basis: Performance of our contract (the Terms of Service) with you and our legitimate interest in administering the Service.

B. Usage Data

What We Process: Technical and usage data from your interactions with our Service.

Lawful Basis: Our legitimate interest to operate, secure, analyze, and improve the Service.

C. Website and Marketing Information

What We Process: Information you provide via our website forms or when interacting with our marketing communications.

Lawful Basis: Your consent, or our legitimate interest to respond to your inquiries.

4. How We Disclose Information

We do not sell personal data. We may disclose information to:

• Sub-processors and Service Providers: Third-party vendors who help us provide the Service (e.g., cloud hosting). These are bound by strict confidentiality and data protection obligations.
• Legal Obligations & Rights Enforcement: If required by law or to protect the rights and safety of Omnity AI, our Users, or others.
• Corporate Transactions: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement and maintain robust technical and organizational measures designed to protect the data we process against unauthorized access, disclosure, or destruction.

6. International Data Transfers

We may transfer personal data to countries outside the United Kingdom (UK) and European Economic Area (EEA). When we do so, we ensure such transfers are lawful by relying on appropriate safeguards, such as the UK's International Data Transfer Agreement (IDTA) or Addendum to the EU's Standard Contractual Clauses (SCCs), or an applicable adequacy decision.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, to meet our legitimate business needs, or to comply with legal, accounting, or reporting requirements.

8. Your Data Protection Rights

Under UK GDPR, you may have rights to access, rectify, or erase your personal data, as well as rights to restrict or object to processing. To exercise these rights regarding data for which we are the controller, please contact us. If your request concerns data for which we are a processor, we will forward your request to the relevant data controller (our User). You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO).

9. Contact Information

For any questions regarding this Privacy Policy or our data protection practices, please contact us at: [email protected].