Privacy Policy
Last Updated: August 20, 2025
Effective Date: November 1, 2024

1. Introduction

OmniGPT Ltd. ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and disclose your information when you use our website (http://omnigpt.co) (the "Service"). By accessing or using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please refrain from using the Service.

We may modify this Privacy Policy at any time without prior notice. Changes will take effect 180 days after being posted on the Service. Continued use after this period constitutes acceptance of the updated Privacy Policy. We encourage periodic review of this page.

2. Information We Collect

We collect and process the following personal information:

• Name

• Email

• Mobile Number

3. How We Collect Information

We collect your information through:

• Registration forms or direct submission

• Interaction with our website

• Public sources

4. How We Use Your Information

We use your information for the following purposes:

• Marketing and promotional activities

• Account creation and management

• Customer feedback collection

• Enforcement of Terms & Conditions

• Payment processing

• Customer support

• Administrative purposes

• Targeted advertising

• Site security and protection

If we need to use your information for any other purpose, we will request your consent beforehand and will process it only for the specified purpose unless required otherwise by law.

5. How We Share Your Information

We do not share your personal information with third parties without your consent, except in the following cases:

• Ad Services

• Analytics

• Data Collection & Processing

Third parties are required to use your data only for the intended purpose and not retain it longer than necessary. We may also disclose information to:

• Comply with legal obligations

• Enforce agreements, including this Privacy Policy

• Respond to claims related to Service usage

In the event of a merger or acquisition, your information may be transferred to the new owner.

6. Retention of Your Information

We retain your personal information for 90 days to 2 years after an account remains inactive or as long as necessary to fulfill collection purposes. Certain information may be retained longer for legal compliance, fraud prevention, or enforcing legal rights. Anonymous data may be stored indefinitely.

7. Your Rights

Depending on applicable laws, you may have the right to:

• Access, rectify, or delete your personal data

• Restrict or object to processing

• Request data transfer (portability)

• Withdraw consent for data processing

• File a complaint with regulatory authorities

To exercise these rights, contact us at data@omnigpt.co. We will respond as required by law.

You may opt out of marketing communications by emailing data@omnigpt.co. Note that withdrawing consent may limit access to certain services.

8. Cookies & Tracking Technologies

For more details on our use of cookies and tracking technologies, please refer to our Cookie Policy.

9. Security Measures

We implement reasonable security measures to protect your information from loss, misuse, or unauthorized alteration. However, we cannot guarantee absolute security, and you transmit data at your own risk.

10. Assistant Integrations & Data Security

OmniGPT provides assistants that connect securely to third-party services such as Holded, Slack, Gmail, and Google Calendar to enhance workflows and automate tasks. We understand that these services may contain sensitive information and we take your privacy seriously. This section explains how we handle data from integrations and the controls you have.

10.1 How We Handle Your Data

On Demand Retrieval
OmniGPT does not automatically fetch or store all your integration data. Data is only accessed when you explicitly ask the assistant to perform an action such as "Get my unpaid invoices" or "Summarize my Gmail".

End to End Encryption
All communication between OmniGPT and third-party services is encrypted both in transit and at rest using industry-standard protocols.

Scoped API Access
We request the minimum required permissions for each integration and use secure access tokens provided by each service. Your login credentials are never stored in plain text.

Full Control
You can connect or disconnect integrations at any time directly from your OmniGPT dashboard.

No Unauthorized Storage
Data retrieved from integrations is processed in real time and not permanently stored unless required for the requested action.

Deletion on Request
You can request deletion of your integration-related data at any time by emailing data@omnigpt.co or using your account settings. Deletion requests are processed during our bi-monthly cleanup cycles and once removed the data cannot be recovered.

10. 2 Permissions & Data Access

We only request the permissions necessary for your assistants to function. Below is a summary of the scopes used for each integration.

1. Holded

When you connect Holded, your OmniGPT assistants may access invoicing, document, contact, inventory, and CRM data but only when you explicitly ask for it. These capabilities support assistants that help retrieve invoices, track payments, fetch quotes, manage leads, and more.

What We Access
We request only the minimum permissions needed to fulfill the assistant’s requested action. Depending on your needs, this may include:

• Documents and finance: invoices, receipts, credit notes, estimates, sales orders, packing lists, pro forma invoices, purchases, refunds, purchase orders

• Contacts and inventory: contacts, products, services, warehouses, sales channels, taxes, payments, remittances, attachments, tracking updates

• CRM functionality: leads, lead tasks, lead notes, stages, funnels, booking events and slots

What We Do Not Do
We do not fetch your entire Holded data automatically upon connection
We do not modify, delete, or create any records unless you specifically request such an action
We do not share your Holded data with any third parties

How We Protect Your Data
All data exchanged with Holded is encrypted in transit and at rest using industry-standard protocols
We use secure access tokens provided by Holded and never store your credentials
You can connect or disconnect Holded at any time directly from your OmniGPT dashboard

Holded Privacy Policy: https://www.holded.com/es/legal/privacy-policy

B. Slack

Slack permissions are required to enable assistants to read, send, and respond to messages in your workspace.

Key Permissions

• Messaging and actions: chat:write, chat:write.customize, chat:write.public

• Channel and group management: channels:write, groups:write, im:write, mpim:write

• Read access: channels:history, groups:history, im:history, mpim:history, app_mentions:read

• Workspace metadata: users:read, users.profile:read, users:read.email, usergroups:read

Slack Privacy Policy: https://slack.com/trust/privacy

C. Gmail

Gmail access is requested only when required for assistant actions such as drafting, reading, or sending emails.

Key Permissions

• View your email messages and settings

• Read, compose, and send emails

• Manage drafts securely

• Access Gmail API endpoints only when explicitly requested by you

Google Privacy Policy: https://policies.google.com/privacy

D. Google Calendar

Assistants may connect to Google Calendar to help you manage schedules and events.

Key Permissions

• View and edit events

• Check your availability

• Access calendars you have permission to view

Google Privacy Policy: https://policies.google.com/privacy

10.3 Data Retention & Deletion

OmniGPT processes integration data on demand only and does not permanently store full datasets.
If you disconnect an integration OmniGPT stops syncing immediately.
Deletion requests for integration-related data are handled during scheduled bi-monthly cleanup cycles. After deletion the data cannot be recovered.

11. Third-Party Links

Our Service may contain links to external websites. This Privacy Policy does not apply to third-party sites. We recommend reviewing their privacy policies, as we do not control or assume responsibility for their content or practices.

11. Contact & Grievance Officer

If you have concerns about how we process your data, contact our Grievance Officer at:
OmniGPT Ltd., 128 City Road, London EC1V 2NX, UK
Email: data@omnigpt.co

We will address your concerns in accordance with applicable laws.