Privacy Policy

1. Who we are

OmniChat ("we", "us", "our") is the unified messaging inbox platform at www.getomnichat.com. OmniChat is operated by ALMOHSIN DEV LTD, registered in England and Wales (Company No. 17328500), 182-184 High Street North, East Ham, London E6 2JA.

Payments from customers in Pakistan are processed locally by AlMohsin Dev, Dak Khas 197GB, Tehsil Samundri, District Faisalabad, Pakistan.

This Privacy Policy explains how we handle personal data when you use our website, web app, and mobile apps.

2. Data we collect

We may collect the following categories of information:

• Account data: email address, name, password (stored hashed by our auth provider), and profile settings you provide at signup.
• Message content: text, media metadata, and delivery status for conversations across channels you connect (WhatsApp, Telegram, Instagram, Messenger, web chat, email).
• Channel credentials: OAuth tokens, page IDs, bot tokens, and related identifiers required to send and receive messages on your behalf. These are stored securely in our database.
• Lead & form data: submissions and files collected through OmniChat lead forms you publish.
• Usage data: logs of API calls, AI autopilot actions, gem/billing usage, and diagnostic information to keep the service reliable.
• Push notification tokens: if you enable browser or mobile push, we store device subscription endpoints to alert you of new messages.

3. How we use your data

We use collected data to:

• Deliver, display, and sync messages in your unified inbox
• Send outbound replies and AI-generated responses you configure
• Authenticate your account and maintain session security
• Process subscriptions, gems, and usage-based billing
• Improve reliability, debug issues, and prevent abuse
• Send service-related notifications you opt into

We do not sell your personal data to third parties.

4. Third-party services

OmniChat integrates with processors and platforms that may receive data as needed to operate:

• Supabase — authentication, database, and edge functions
• Meta — WhatsApp Cloud API, Instagram Messaging, and Facebook Messenger
• Telegram — Bot API for Telegram channel messages
• Vercel / hosting — application hosting
• Cloudflare R2 — media file storage
• Amazon SES — transactional and API email when enabled
• Payment partners — billing may use local or international processors as described in our payment routing notice
• AI providers — message content may be sent to AI models when you enable autopilot

Each third party has its own privacy policy. When you connect a channel, you also agree to that platform's terms (e.g. Meta Platform Terms).

Optional Google integrations (Google Sheets lead export and Google Calendar appointments) use Google Workspace APIs only to sync data you choose to export or schedule. Those integrations are separate from OmniChat AI features.

Customers in Pakistan may be charged via a local payment processor (e.g. Safepay). Customers outside Pakistan are billed via our international reseller / merchant-of-record partners (e.g. FastSpring). OmniChat’s primary contracting entity for the platform is ALMOHSIN DEV LTD (UK); the Pakistan entity acts only as a local payment rail where applicable.

5. Google Workspace API data (Limited Use)

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. OmniChat does not use Google Workspace API data to develop, improve, or train generalized AI/ML models.

Spreadsheet cell contents, Calendar event payloads, and related Google Workspace data obtained through our OAuth integrations are used solely to provide the Sheets export and Calendar appointment features you enable. This data is not transferred to third-party AI/ML services for training, improvement of generalized models, or other secondary purposes.

6. Retention and deletion

We retain your data while your account is active and as needed to provide the service. When you disconnect a channel, associated tokens are revoked or marked inactive. You may request account deletion via our account deletion page or by emailing support@getomnichat.com.

For Meta-connected accounts, data deletion requests initiated through Facebook/Instagram are handled via our registered callbacks:

• Instagram: /api/instagram/data-deletion
• Messenger: /api/messenger/data-deletion

7. Cookies and sessions

We use essential cookies and local storage to maintain your login session and OAuth state during channel connection flows. We do not use third-party advertising cookies.

8. Security

We use industry-standard measures including HTTPS, row-level security on database tables, and restricted access to production systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at support@getomnichat.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Continued use of OmniChat after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Email support@getomnichat.com or visit Customer Support.