Privacy Policy

1. Who we are

This Privacy Policy explains how Omega Trove LLC, doing business as OmegaOps (“we”, “us”, “our”), collects, uses and shares personal data when you visit omegaops.ai, buy a subscription, or use the OmegaOps software and its skills (the “Service”). For the purposes of data-protection laws such as the GDPR, Omega Trove LLC is the controller of that data.

Omega Trove LLC · 2431 Aloma Ave, Ste 124, Winter Park, FL 32792, USA · info@omegatrove.com · (407) 978-6811

2. What stays on your computer

The OmegaOps software runs on your own Windows computer. The following are handled there and are not sent to us:

• the passwords, credentials and API keys you store or use with the software;
• your files, screens and the conversations you have with your AI assistant;
• the values you type into forms, and the ordinary browsing the software does for you, which goes directly from your computer to the sites you use.

Your AI assistant is provided by a third party (for example Anthropic, OpenAI or Google) under your own account with them. What you send to it is governed by that provider’s privacy policy, not this one.

The exceptions — the only places where information about your work reaches our servers — are skill processing and failure reports, both described in section 3.

3. What we collect

• Account and purchase data. When you subscribe, Stripe collects your payment details and sends us your email address, your Stripe customer and subscription identifiers, your plan, and your payment and refund history. Stripe may also hold your name and billing address. We never see or store your full card number.
• Agreement records. The version of our license agreement you accepted at checkout, and when.
• License and device data. When you activate the software and while it runs, it exchanges with our license server: your license key; a device fingerprint, which is a one-way cryptographic hash of an identifier Windows assigns to your computer and cannot be turned back into that identifier or your hardware details; an installation identifier; the software version and build; and a usage counter. The software checks in periodically (about every three hours) so we can confirm your subscription is active and limited to one device.
• Skill processing data. A few skills do part of their work on our servers — for example, pulling structured rows out of a web page, or working out where the fields of a form are. For those skills, the software sends us the content (HTML) of the page the skill is working on, together with the instructions for that step. That page can contain information about you or your account if you are signed in to the site. We process it in memory only to complete the step, we do not write it to disk, and it is discarded when the skill finishes or after about two minutes of inactivity. We log only that a skill ran (the skill, the time and your license key). The values you type into forms are never sent. Video-review skills send only measurements computed on your computer, never the video itself.
• Failure reports. When an automation step fails, the software sends us a short report so we can fix it: which skill and step failed, a description of the error, where it happened (for example the application or website and the step), its severity, and when it first occurred. Passwords, keys, tokens and similar secrets are removed automatically on your computer and again on our server, and reports are designed to exclude page content and form values. We link each report to your license and account email so we can tell you when the problem is fixed.
• Communications. What you send us when you email or call us, and records of the emails we send you (receipts, license keys, renewal, price and payment notices, and fix notices).
• Website and server data. When you visit omegaops.ai or the software contacts our servers, our server necessarily receives your IP address and basic request information (such as browser type and the page requested). We use IP addresses to prevent abuse and to secure the Service. We do not use analytics or visitor tracking of any kind — see our Cookie Policy.

We collect this data from you, from your use of the Service, and from Stripe. We do not buy data about you from anyone. Giving us account and license data is necessary to subscribe and use the software; everything else is generated only as you use the Service.

4. How and why we use it

We use personal data only for the purposes below. Where the GDPR or UK GDPR applies, the legal basis is shown in italics.

• To sell you a subscription, deliver and activate the software, run skills, enforce the one-device license and end access when a subscription ends — performance of our contract with you.
• To take payment, send receipts and required notices, and keep tax, accounting and consent records — contract and legal obligation.
• To diagnose and fix failures, and tell you when a fix is ready — contract and our legitimate interest in a working product.
• To answer your questions and provide support — contract and legitimate interests.
• To secure the Service, prevent fraud, piracy and abuse, and enforce our terms — legitimate interests and legal obligation.

We do not use your data for advertising, we do not build marketing profiles, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We send marketing email only if you have agreed to receive it, and every such email lets you unsubscribe.

5. Who we share it with

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We disclose it only to the service providers below, who process it on our behalf and under contract, and only to the extent each one needs:

• Stripe — payment processing, subscription billing and the billing page where you manage or cancel your subscription. Stripe also uses payment data under its own privacy policy, for example to prevent fraud and meet its legal obligations.
• Google Workspace (Google LLC) — our email, used to send and receive email with you from info@omegatrove.com.
• Hostinger — the dedicated virtual private server that runs our website, license server and skill processing. There is no content-delivery network in front of it.

Our pages also load their typefaces from Google Fonts, so your browser connects to Google’s servers and Google receives your IP address and browser information when you view them. Google states that Google Fonts does not set cookies. Our domain name is registered with Porkbun, which does not receive personal data about you from us.

We may also disclose personal data if required by law or valid legal process, to protect the rights, safety and property of our customers, ourselves or others, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to it.

6. International transfers

We are based in the United States, and we and our service providers may process personal data in the United States and other countries whose data-protection laws may differ from those where you live. Where the GDPR or UK GDPR requires it, transfers to our service providers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or the provider’s certification under the EU-U.S. Data Privacy Framework. You can ask us for more information about these safeguards.

7. How long we keep it

• Account and license data — while your subscription is active and for 12 months after it ends, so we can handle renewals, refunds, disputes and support, then deleted or anonymised.
• Failure reports — 90 days.
• Skill processing data — not stored; discarded from memory when the step completes. The record that a skill ran is kept with your account data.
• Records we must keep by law — invoices, payment and tax records, and records of your agreement to our terms and to automatic renewal are kept for as long as the law requires (for example, up to seven years for tax records and at least three years for renewal-consent records), even after the periods above.
• Emails with you — as long as needed to deal with your request and for 12 months after your subscription ends, unless a longer period is required by law.
• Server and security logs — only as long as needed for security and troubleshooting.

8. Your rights

Depending on where you live — including under the GDPR, the UK GDPR, and U.S. state privacy laws — you may have the right to:

• know what personal data we hold about you and get a copy of it, including in a portable format;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing, including processing based on legitimate interests;
• withdraw any consent you have given, without affecting earlier processing; and
• not be discriminated against for exercising these rights.

We honour these requests for all customers, wherever they live, to the extent the law allows. To make a request, email info@omegatrove.com or call (407) 978-6811. We will verify your identity, usually by confirming control of the email address on your account, and reply within the time the law requires — generally within one month under the GDPR and 45 days under U.S. state laws. You may use an authorised agent, who must show us your signed permission. If we refuse a request, we will tell you why, and where the law gives you a right to appeal, you can do so by replying to our decision; we will respond within the time the law requires.

Some data cannot be deleted while you have an active subscription, because the license depends on it, and some must be kept to meet legal obligations (section 7). If you are in the EEA or the UK, you may also complain to your local data-protection authority.

9. California residents

This section supplements the rest of this policy for California residents under the California Consumer Privacy Act, as amended (CCPA). In the last 12 months we have collected the following categories of personal information, from the sources and for the business purposes described in sections 3 and 4:

• Identifiers — email address, license key, device fingerprint, installation identifier, IP address, Stripe customer identifier;
• Customer records and commercial information — plan, subscription status, payment and refund history (name and billing address are held by Stripe);
• Internet or other electronic network activity — license check-ins, skill usage records, failure reports, website request data, and web-page content processed transiently by skills.

We disclose these categories only to the service providers in section 5, for the purposes in section 4. We do not sell or share personal information as the CCPA defines those terms, and we have not done so in the last 12 months; we do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information for any purpose that would give you a right to limit it. Because we do not sell or share, there is nothing to opt out of, but we treat a Global Privacy Control signal as a valid opt-out request. We keep each category for the periods in section 7. You can exercise your rights to know, delete and correct as described in section 8.

10. Children

The Service is intended for adults. You must be at least 18 to subscribe, and the Service is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

We protect personal data with measures appropriate to the risk, including encryption in transit, one-way hashing of device identifiers, removal of secrets from failure reports, signed license tokens, access limited to the people who need it, and server-side storage of our own secrets. No system is perfectly secure. If a security breach affects your personal data, we will notify you and the relevant authorities as the law requires.

12. Changes

We may update this policy as the Service or the law changes. We will post the new version here and update the “Last updated” date, and we will email you before any material change takes effect.

13. Contact

Questions or requests about privacy: info@omegatrove.com · (407) 978-6811 · Omega Trove LLC, 2431 Aloma Ave, Ste 124, Winter Park, FL 32792, USA.