Privacy Policy

Effective September 1, 2026

Omni CRM ("Omni CRM," "we," "us," or "our") provides a customer relationship management platform that helps organizations manage contacts, companies, leads, deals, tasks, and customer communications. This policy explains what information we collect, how we use it, and the choices you have — whether you’re a subscriber who manages a workspace ("Customer") or someone whose information a Customer has stored in their workspace ("Contact" or "End User").

1. Information we collect

Account information

When you create a workspace, we collect your name, email address, password (stored as a salted hash, never in plain text), and organization details. If you sign in with a third-party identity provider, we receive the profile information that provider shares with us — typically your name, email, and profile photo.

Customer data

Customers and their authorized users may store data about their own contacts, leads, and business relationships — such as names, email addresses, phone numbers, company details, deal and pipeline information, notes, and the content of messages, calls, or other communications logged or sent through the platform. This data belongs to the Customer, who is responsible for having a lawful basis to collect and process it. We process it strictly on the Customer’s behalf and instructions.

Communications content

Where a Customer connects email, messaging, or calling capabilities to their workspace, we process the content and metadata of those communications (for example, message text, timestamps, and delivery status) in order to send, receive, and log them against the relevant contact or deal record.

Usage and device information

We automatically collect certain technical information when you use Omni CRM — including IP address, browser type, device identifiers, pages viewed, and actions taken within the product. We use this to secure accounts, debug issues, and understand how the product is used so we can improve it.

Cookies

We use strictly necessary cookies to keep you signed in and to protect your session. We do not use third-party advertising cookies.

2. How we use information

To provide, maintain, and secure the Omni CRM platform and your workspace.
To operate features you or your organization enable — including sending transactional and account-related email, logging calls and messages against records, and running automations or notifications you configure.
To authenticate you, enforce your organization’s permission settings, and prevent unauthorized access.
To respond to support requests and communicate service-related updates.
To monitor, investigate, and prevent fraud, abuse, and security incidents.
To understand aggregate usage patterns and improve reliability, performance, and features.
To comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use Customer data to train third-party AI models without explicit consent.

3. How we share information

We share information only in the following circumstances:

Within your organization — data you store is visible to other members of your workspace according to the roles and permissions your organization’s administrators configure.
Service providers — we work with vetted infrastructure and communication providers (for example, to deliver email or host data) who process information on our behalf under contractual confidentiality and data-protection obligations, and only to the extent needed to provide their service.
Integrations you enable — if you or your organization connect a third-party service (such as an email, calling, or messaging provider), information flows to that provider as necessary to operate the integration, subject to that provider’s own privacy practices.
Legal and safety — where required to comply with law, enforce our terms, or protect the rights, property, or safety of Omni CRM, our users, or others.
Business transfers — if Omni CRM is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy’s commitments.

4. Data retention

We retain account and Customer data for as long as a workspace is active, and for a reasonable period afterward to allow for account recovery, comply with legal or contractual obligations, and resolve disputes. A Customer administrator may request deletion of their organization’s data at any time, subject to any retention we’re legally required to maintain.

5. Security

We apply technical and organizational safeguards designed to protect your information, including encryption in transit, access controls scoped to each organization’s own data, and role-based permissions within every workspace. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights and choices

Depending on where you’re located, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. If your data is held in a Customer’s workspace, the fastest way to exercise these rights is usually through that organization directly, since they control the data. You can also contact us using the details below and we will route your request appropriately.

7. International data transfers

We may process and store information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards required by applicable data protection law.

8. Children’s privacy

Omni CRM is a business tool not directed at children, and we do not knowingly collect personal information from individuals under 16.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify Customers by email or through the product before the changes take effect. Continued use of Omni CRM after a change becomes effective constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this policy or how we handle information, contact us at privacy@omnicrm.example.