Privacy Policy

1. Introduction

OmniDesk ("we", "us", or "our") operates the getomnidesk.com website and the OmniDesk customer messaging platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Information You Provide Directly

• Account Data: Name, email address, password, and workspace name when you register.
• Billing Data: Payment card details processed securely through our payment processor (Stripe). We do not store full card numbers.
• Communications: Messages you send to our support team or through our contact forms.
• Channel Credentials: API tokens and credentials for third-party channels (WhatsApp, Instagram, etc.) that you connect to OmniDesk. These are encrypted at rest.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, IP address, browser type, and device information.
• Log Data: Server logs including IP addresses, browser types, referring URLs, and timestamps.
• Cookies: We use cookies and similar tracking technologies. See our Cookie Policy for details.

Information from Third Parties

When you connect messaging channels (WhatsApp, Instagram, Messenger, Telegram, LinkedIn), we receive message content and sender metadata as permitted by those platforms' APIs and your customers' interactions. This data is processed solely to operate the Service on your behalf.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process transactions and send billing-related communications
• To send administrative emails (account confirmation, password resets, service updates)
• To respond to support requests and improve customer experience
• To detect, prevent, and address technical issues and security incidents
• To analyze usage patterns and improve our product features
• To comply with legal obligations

We do not sell your personal data or your customers' message data to third parties.

4. Data Sharing and Disclosure

We share information only in the following circumstances:

• Service Providers: Trusted third-party vendors (hosting, payment processing, email delivery, analytics) who process data on our behalf under data processing agreements.
• Legal Requirements: When required by law, court order, or government authority.
• Business Transfers: In connection with a merger, acquisition, or sale of company assets, with appropriate notice to you.
• With Your Consent: For any other purpose with your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time by contacting privacy@getomnidesk.com. We will delete or anonymize your data within 30 days of a verified deletion request, except where retention is required by law.

Message history and conversation data is retained for the duration of your subscription plus 90 days, after which it is permanently deleted.

6. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive credentials, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. International Data Transfers

Our servers are located in the European Union. If you access the Service from outside the EU, your information may be transferred to and processed in the EU. We rely on standard contractual clauses approved by the European Commission to protect your data during such transfers.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, email us at privacy@getomnidesk.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact our Data Protection Officer:

• Email: privacy@getomnidesk.com
• Address: OmniDesk Ltd., Dubai, United Arab Emirates