Privacy policy

Last updated: […]

Draft pending legal review. Details in square brackets will be completed before publication.

The data omnly handles as controller: people who visit omnly.io, who write to us and who use the console. Data about each shop’s customers is explained in that shop’s privacy policy.

Controller

[razón social], tax ID [NIF], registered at [domicilio]. For any privacy question: privacidad@omnly.io.

What data we process and why

Visitors: minimal technical data (the IP in server logs), for security, for 30 days. People who write to us: name, email, shop and message, to reply, for 12 months. Customers and their team: name, email, job title, permissions and logins, to provide the service, for as long as it lasts plus legal periods. Billing: company name, tax ID, address and invoices, for 6 years; the card is held by the payment provider, not omnly.

Who we share it with

Only the providers we need to run the service (hosting, payments and email), and nobody else unless the law requires it. We don’t sell data.

Transfers outside the EU

Some providers, such as Stripe or Shopify, may process data outside the EU, under the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability of your data at privacidad@omnly.io. You can also complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.

Automated decisions

We don’t make automated decisions with legal effects on people.

Security

Encrypted connections, encrypted passwords and keys, permission-based access, access logs and encrypted backups.