Privacy Notice

1.Who is responsible

The controller of the personal data described here is Damian Jabłoński tribe, ul. Modlińska 61, lok. 106, 03-199 Warszawa, Poland, NIP 5243008010. For any privacy question write to team@omnia-inteligance.com.

We have not appointed a Data Protection Officer, because we are not required to. Privacy requests are handled at the address above.

2.Two different roles — please read this one

We handle personal data in two distinct capacities, and your rights differ between them.

• As a controller, for data about you as our customer: your account, your billing, your support messages, how you use the console. This notice describes that processing.
• As a processor, for data we read from the accounts you connect — your contacts, your messages, your customers. There, you are the controller and we act only on your instruction. That processing is governed by the Data Processing Agreement, not by this notice.

If someone whose data reached us through your connected account asks us to exercise a right, we will refer them to you and tell you about the request.

3.What we collect

• Account data — name, e-mail address, password (stored hashed, never in readable form), organisation, language.
• Billing data — plan, usage counts, invoices, tax identifiers. Card details are handled by the payment provider and never reach our servers.
• Connection data — which third-party accounts you connected and the access tokens for them, held encrypted. We store the token, not your password for those services.
• Chat and automation content — what you type into the Omnia chat, the automations you create, and the records of runs, including their inputs, outputs and errors.
• Technical data — IP address, browser and device information, timestamps, and application logs produced when you use the Service.
• Feedback — the message, e-mail address and consent choices you submit through the feedback form in the console.

4.Why we process it, and on what legal basis

• To provide the Service, run your automations and bill you — performance of a contract, Art. 6(1)(b) GDPR.
• To keep the Service secure, prevent abuse, debug faults and improve it — our legitimate interest, Art. 6(1)(f) GDPR, in operating a reliable platform. We balance that against your interests, and you may object at any time.
• To meet accounting and tax duties — legal obligation, Art. 6(1)(c) GDPR.
• To send marketing messages, and to place non-essential cookies — your consent, Art. 6(1)(a) GDPR, which you may withdraw at any time without affecting processing done beforehand.

Providing account and billing data is necessary to use the Service; without it we cannot conclude or perform the contract. Everything else is optional.

5.The Omnia chat and automated processing

The chat sends what you type, and the context needed to answer it, to a large-language-model provider acting as our processor under contract. That provider does not use your content to train its models.

Automations act on your instruction. Where an automation would change something, the console asks you to confirm first. We do not make decisions producing legal or similarly significant effects about you by automated means alone, within the meaning of Art. 22 GDPR.

6.Who else sees the data

We do not sell personal data and we do not share it for anyone else’s marketing. We disclose it only to:

• service providers acting as our processors — hosting and infrastructure, e-mail delivery, error monitoring, the language-model provider, and the payment provider, each bound by a written contract;
• the third-party platforms you chose to connect, to the extent your automations send data to them;
• public authorities, where the law requires it;
• a purchaser, if the business is sold — you would be told beforehand.

The current list of our processors is available on request from team@omnia-inteligance.com.

7.Where the data is held

Our infrastructure runs in the European Union. Some processors may access data from outside the European Economic Area. Where they do, the transfer is covered by an adequacy decision or by the European Commission Standard Contractual Clauses, with supplementary measures where needed. Ask us for a copy of the safeguards.

8.How long we keep it

• Account data — for as long as the account exists, then up to 3 months after closure so it can be restored if closed in error.
• Invoices and accounting records — 5 years from the end of the tax year, as Polish tax law requires.
• Run records and application logs — up to 12 months, then deleted or aggregated so individuals cannot be identified.
• Chat history — until you delete it, or until the account closes.
• Feedback — up to 24 months.
• Data pending a legal claim — until the claim is finally resolved.

9.Your rights

You may ask us to give you access to your data, correct it, erase it, restrict how we use it, or hand it to you or another provider in a portable format. You may object to processing based on legitimate interest, and withdraw consent at any time.

Write to team@omnia-inteligance.com. We answer within one month, and will tell you if we need longer. We may ask you to confirm your identity first.

If you think we are handling your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, or with the supervisory authority where you live.

10.Cookies and local storage

We use cookies and browser storage that are strictly necessary to run the Service — keeping you signed in, remembering your language, and holding your session. These do not need your consent.

Any analytics or marketing cookie is set only after you agree, and you can change your mind at any time.

11.Security

Data is encrypted in transit. Access tokens and passwords are stored encrypted or hashed. Access to production systems is restricted to those who need it and is logged. We keep tenants separated so that one customer cannot read another customer’s data.

No system is perfectly secure. If a breach is likely to result in a high risk to your rights, we will tell you without undue delay, and notify the supervisory authority within 72 hours as the GDPR requires.

12.Changes to this notice

We will update this notice as the Service changes. Material changes are announced in the Service or by e-mail before they take effect. The date above always shows the version in force.