Legal
Privacy Policy
Last updated: June 30, 2026
1. Introduction
Omni Links (“we”, “us”, or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at omni-links.com, use our platform, or interact with our services.
By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access our services.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide
- Account registration details including your name, email address, and organisation name.
- Billing and payment information processed securely through our payment provider, Stripe.
- Content you create on our platform such as short links, bio link pages, QR codes, and workspace configurations.
- Communications you send through contact, compliance, abuse, migration, or support workflows.
2.2 Information Collected Automatically
- Request, device, and browser information used for security, rate limiting, routing, analytics, and abuse prevention. Raw IP addresses are not stored for click analytics.
- Usage data such as pages visited, features used, links created, and click analytics.
- Log data including access times, referring URLs, and server response codes.
- Necessary cookies for authentication, session refresh, and workspace selection as described in our Cookie Policy.
2.3 Information from Third Parties
We may receive information from service providers connected to the product, such as Supabase Auth, Stripe billing events, SSO provider metadata, or webhook/report delivery providers you configure. We process this data to provide the requested service and operate the workspace.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services including link management, analytics, and routing features.
- Process transactions and send related information including purchase confirmations, invoices, and subscription updates.
- Improve, personalise, and expand our services based on usage patterns and feedback.
- Communicate with you about product updates, security alerts, and support responses.
- Send marketing communications where you have opted in, including newsletters and product announcements.
- Detect, prevent, and address technical issues, fraud, and abuse of our platform.
- Comply with legal obligations and enforce our terms of service.
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your information in the following circumstances:
- Service Providers: We share data with trusted vendors who assist in operating our platform, including Supabase for authentication, database, and storage; hosting infrastructure; Stripe for billing; Resend for email delivery when enabled; and customer-request or compliance-support tools configured for production.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.
- With Your Consent: We may share information for any other purpose with your explicit consent.
5. Data Retention
We retain personal data for as long as needed to provide the service, maintain security and audit evidence, comply with legal or accounting obligations, and support customer workspaces. Workspace owners and admins can configure analytics retention windows and purge click events older than that window. Workspace deletion removes workspace-scoped product data that is not required for minimal deletion evidence, legal, accounting, security, or abuse-prevention purposes.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (“right to be forgotten”).
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing of your data for legitimate interest or marketing purposes.
- Restriction: Request that we limit the processing of your personal data.
To exercise any of these rights, please contact us at privacy@omni-links.com. We will respond to your request within 30 days.
7. International Data Transfers
Omni Links uses cloud and service providers whose processing regions depend on the production configuration and customer agreement. Where personal data is transferred outside the EEA, appropriate safeguards such as Standard Contractual Clauses may apply. Customers with strict residency requirements should contact us so the required provider setup can be reviewed before launch.
8. Security
We use security controls designed for the product, including Supabase Auth, Row Level Security, server-side authorization checks, role-based workspace permissions, hashed API keys, webhook signing, audit logs, safer destination validation, and transport encryption through the configured hosting and provider stack. While no method of transmission over the Internet is completely secure, we continuously invest in improving our security posture.
9. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: privacy@omni-links.com