Privacy Policy

1. Introduction

OmniHero ("we", "our", "us") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our email marketing platform at omnihero.co.uk and app.omnihero.co.uk (the "Service").

2. Data we collect

We collect the following categories of data:

• Account information: Name, email address, password (hashed), and organisation details provided during registration.
• Contact data: Email addresses, names, business names, and other fields you upload or enter for your email recipients. This data is stored and processed solely on your behalf.
• Usage data: Campaign analytics (opens, clicks, bounces, complaints), login activity, and feature usage to improve the Service.
• Payment information: Billing details are processed securely by Stripe. We do not store your full credit card number.
• Technical data: IP address, browser type, and device information collected automatically for security and performance purposes.

3. How we use your data

We use your data to:

• Provide and maintain the Service, including sending emails on your behalf via Amazon SES.
• Process your payments and manage your subscription.
• Track campaign performance (opens, clicks, bounces, complaints) and provide analytics.
• Communicate with you about your account, including service updates and support.
• Improve the Service based on usage patterns and feedback.
• Comply with legal obligations.

4. Data processing and third parties

We use the following third-party services to operate the platform:

• Amazon Web Services (SES, SNS): Email delivery and webhook processing.
• Stripe: Payment processing and subscription management.

We do not sell, rent, or share your personal data or your contact data with any other third parties. Your contact lists are your data — we process them solely to provide the Service.

5. Data storage and security

Your data is stored on servers located within the European Union. We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), hashed passwords, and access controls.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Contact removal audit records are retained for regulatory compliance purposes.

7. Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict processing of your data.
• Export your data in a portable format (CSV export is available in the platform).
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@omnihero.co.uk.

8. Cookies

The Service uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies on the marketing website.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@omnihero.co.uk