1. Who we are
Onmo for Services, registered in Qatar, Lusail, Doha, Qatar, operates Onmo.
Contact: privacy@onmo.ai.
We act as controller for our website, business communications and account administration. Where we process personal data on a customer’s behalf through the platform, our DPA governs that processing.
2. Information we process
Depending on your interaction with Onmo, we process:
- Contact, business, account and subscription information.
- Communications and support requests.
- Content and information submitted by customers.
- Connected-account identifiers, authorization information, campaign information and performance or measurement data.
- Device information, IP addresses, usage and diagnostic records, cookies and marketing-attribution information.
We receive information directly from you, through your use of Onmo and from integrations you authorize. Advertising, AI, measurement and attribution integrations process information where enabled.
Paddle processes payment details. Onmo receives transaction and subscription information needed to administer access and support. We do not receive full payment-card numbers or security codes from Paddle.
3. Purposes and legal bases
We use information to provide the Services, maintain integrations, administer subscriptions, respond to requests, protect security, prevent misuse and meet legal obligations.
We also use website and business-contact information to understand website use and market Onmo where permitted.
Where a legal basis is required, we rely on performance of a contract, legal obligations, consent or legitimate interests recognized by applicable law. These interests include operating, securing and improving our business.
Where processing depends on consent, you may withdraw it. Necessary information may be required to provide the relevant service.
4. Connected-platform information
We access and use connected-platform information to provide functions you authorize, including campaign management, automation, creative delivery and reporting.
We safeguard authorization information and restrict access to connected data. We do not sell or license this data or use one customer’s connected information for another customer’s independent benefit.
Providers processing it on our behalf are contractually restricted to permitted purposes, confidentiality, security and applicable deletion requirements.
Onmo’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.
For Snapchat integrations, this Policy incorporates by reference the Snap Privacy Policy, which explains Snap’s own processing.
5. AI processing
AI providers process submitted content, relevant connected information and generated results as necessary to deliver enabled features.
Onmo will not use Customer Data to train general-purpose AI models or permit providers appointed by Onmo to do so. Onmo-appointed AI processing must be covered by appropriate business/API contractual protections.
Onmo-appointed providers include Google/Gemini and Anthropic. Their applicable processing terms and the DPA govern processing on our behalf.
Where customers independently connect services such as OpenAI, Higgsfield or Runway, the applicable customer-provider agreement and account settings govern that provider’s processing.
Providers may retain information for service delivery, security, abuse prevention or legal requirements under their applicable terms. We do not promise zero retention or automatic deletion of independently held provider information when an integration is disconnected.
6. Recipients
We disclose information as necessary to:
- Contracted providers supporting hosting, communications, security, support and AI processing.
- Integrations and destinations authorized by customers.
- Paddle for subscription purchases and related administration.
- Professional advisers, authorities or other recipients where legally required or necessary to establish or protect legal rights.
- Parties to a business transaction, subject to appropriate safeguards.
Paddle acts as an independent controller for its merchant-of-record activities under its Privacy Policy. Connected providers’ roles depend on their services and applicable agreements.
Our DPA identifies providers processing customer personal data on our behalf.
7. Cookies, analytics and advertising
We use necessary browser storage for authentication, security and platform operation. We also use storage for preferences and website attribution, and the following analytics and advertising technologies:
| Technology | Purpose | Cookie lifetime |
|---|---|---|
| Onmo cookies and browser storage | Authentication, preferences and attribution | Session or persistent, depending on purpose |
| Google Analytics | Website traffic and usage measurement | Approximately 400 days for the persistent cookies currently used |
| Meta Pixel | Advertising measurement and remarketing | Approximately 90 days for _fbp |
| LinkedIn Insight Tag | Advertising measurement and audience insights | Varies by identifier; see LinkedIn’s cookie table |
Lifetimes may renew on subsequent visits. Cookie expiry is separate from retention of information already collected.
Use “Change tracking preferences” on our website to manage optional analytics and advertising technologies. Where required by law, we obtain consent before using them.
Browser settings also allow you to block or delete stored cookies. Changing preferences affects subsequent collection and does not necessarily remove identifiers already stored on your device.
Website preferences are separate from customer campaign-measurement settings.
We do not sell personal data for money. Advertising disclosures may constitute “sharing” or targeted advertising under applicable privacy laws. Where those laws apply, you may exercise relevant opt-out rights through tracking preferences or privacy@onmo.ai.
8. International processing and security
Information may be processed outside Qatar, including in the United States and countries where authorized providers operate.
Where applicable law requires transfer safeguards, we use the appropriate contractual or other lawful mechanism. You may request information about applicable safeguards.
We maintain technical and organizational measures appropriate to the information and processing risks. No system can guarantee absolute security.
9. Retention and deletion
We retain personal data only as long as reasonably necessary for its purpose and applicable obligations.
Account information is retained during the relationship and as needed for legal, accounting or dispute purposes. Support and security records are retained according to their operational purpose and applicable requirements.
Customer personal data processed on a customer’s behalf is governed by the DPA.
Eligible information is deleted or de-identified when no longer needed. Restricted retention may continue where justified by law, security, disputes or backup requirements.
10. Rights and choices
Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection; withdraw consent; opt out of relevant marketing; and complain to the competent privacy authority.
Contact privacy@onmo.ai. We may verify your identity and will respond within applicable legal time limits.
For data controlled by your organization, contact that organization. We assist it as required by the DPA and applicable law.
You may unsubscribe from marketing without losing essential service communications. Deletion requests remain subject to applicable law, justified retention and the rights of other workspace members.
11. Children
Onmo is intended for adult business users and is not directed to children. Contact us if you believe a child has provided personal information improperly.
12. Changes and contact
We will publish updates with a revised effective date and provide additional notice or obtain consent where legally required.
Onmo for Services — Lusail, Doha, Qatar