Information We Collect

We collect several types of information from and about users of our Service, including:

• Information You Provide to Us: When you create an account, we collect personal information such as your name, email address, business contact details, and account login credentials. If you integrate third-party services (e.g. social media accounts), we may collect your usernames or account IDs and authentication tokens for those services. You may also provide content and media by uploading images, videos, graphics, or text for use with our platform’s AI agents. Any correspondence with us (for example, with any AI marketing agent of customer support inquiries) may also be collected.
  
  
• Social Media Credentials: If you choose to connect your social media or third-party accounts to Omada.ai (for example, to allow the social media agent to post or retrieve content on your behalf), we will collect the OAuth tokens or credentials necessary to access those accounts with your permission. We do not collect your social media passwords; rather, you authorize us through the third-party platform’s authentication process. Information from your social profiles or pages (such as analytics or content needed for the Service to function) may be accessed or stored as needed to provide the Service.
  
  
• Automatically Collected Information: When you use Omada.ai, we automatically collect certain information about your device and usage of the Service. This may include your IP address, browser type, device type, approximate location (e.g. city/state) derived from your IP, operating system, referring URLs, and activity on the platform (such as features you use, content you generate, and timestamps). We use cookies and similar tracking technologies (described more below) to collect some of this information. This data helps us understand how users interact with our Service and enables us to improve performance and user experience.
  
  
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to remember your preferences, authenticate your account, and gather usage data about your interactions with our Service. For example, cookies help keep you logged in as you navigate the site and may track aggregate usage metrics. We may use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted). You can control or delete cookies through your browser settings; however, note that disabling cookies may affect certain features of the Service (like remaining logged in or retaining your preferences).

Information Collected from Public and Third-Party Sources

In order to enhance our understanding of your business and better tailor our AI marketing tools, Omada.ai may collect publicly available or authorized information about your business from your website or other third-party sources. This may include, for example, publicly accessible business descriptions, product or service listings, pricing, contact details, metadata, social media posts, images, logos, or branding elements. We may also use data from third-party providers (such as business directories, social media platforms, or analytics tools) to supplement our understanding of your brand and target audience. This information is used to help build your marketing knowledge base, optimize content generation, and improve service personalization. Where required by law, we will obtain your consent before using such data.

How We Use Your Information

Omada.ai uses the collected information for the following purposes:

• Providing and Improving the Service: We use your information to operate the platform’s features and provide services to you. This includes using your personal data and uploaded media to enable our AI agents (graphics, video, social media, customer chat, and marketing assistant) to generate content or perform tasks as instructed. For example, our Service might analyze an uploaded image to help the graphics agent create a design, or use your social media token to publish a post you’ve approved. We also use data to maintain and improve the Service’s functionality, quality, and user experience (for instance, fixing bugs, analyzing usage trends to refine our algorithms, or developing new AI features). Your information may be used internally to train and enhance our proprietary AI models only in compliance with applicable privacy laws and, where required, after anonymizing or obtaining any necessary consents.
  
  
• Account Management and Communication: We process your email and other contact details to manage your account (e.g. for login authentication, password resets, or account-related notifications). We will also use your contact information to send you important updates about the Service, such as changes to this Privacy Policy or security alerts. If you have opted in, we may send marketing communications or newsletters about new features or offers; you can unsubscribe from promotional emails at any time by clicking the unsubscribe link or contacting us.
  
  
• Content Generation and User Requests: All data and content you provide (including text, images, and other media) may be used to carry out the specific operations you request on the platform. For example, if you use our customer chat agent, any chat inputs you provide will be processed (potentially via AI models and systems) to generate responses. Similarly, if you use the social media agent to create, draft, refine, or schedule posts, the content you input will be used to generate post text or creative media. We only use your content and personal information to fulfill your requests and provide the AI-generated results to you, and for no other purpose unless you give explicit permission.
  
  
• Safety, Security, and Legal Compliance: We may use information to protect the security and integrity of the platform, our users, and others. This includes monitoring for fraudulent activity, network threats, or misuse of the Service. If necessary, we will use and disclose information to investigate potential violations of our Terms of Service or to detect, prevent, or address fraud and other illegal activities. Additionally, we may process personal data to comply with legal obligations to which we are subject (such as responding to lawful requests by public authorities or regulators, or to comply with industry standards and legal processes).
  
  
• Aggregated and De-Identified Data: We may aggregate or de-identify personal information so that it can no longer be linked to any individual user. We may use such aggregated/anonymized data for purposes such as analytics, research, and marketing (for example, to publish trends about how our Service is used, or to improve AI models). This data will contain no personally identifying information and is not subject to this Privacy Policy once anonymized.
  
  

How We Share Your Information

We understand the importance of keeping your personal information private. We do not sell your personal information to third parties. However, we do share certain information in the following circumstances, to operate our business and provide our Service:

• Service Providers and Processors: We share information with trusted third-party vendors who perform services on our behalf. These include, for example: cloud hosting providers (for data storage and servers), email service providers (for sending account notifications or marketing emails), payment processors (if payments are involved), analytics providers (to help us understand usage of our platform), and customer support tools. We also utilize third-party AI platform providers and APIs – for instance, large language model APIs or image/video generation services – as part of our content generation process. These service providers are only given access to the information necessary for them to perform their functions, and they are contractually obligated to protect your data and use it only for our specified purposes. When your data is processed by an AI model or third-party API, we take steps to avoid including more personal information than necessary and, where feasible, use providers that commit not to retain or use the data beyond the immediate processing task.
  
  
• Third-Party Integrations (at Your Direction): If you connect or integrate third-party accounts or services with Omada.ai, we will share information with those third parties as needed to fulfill the integration. For example, if you link a social media account to publish content, we will transmit the content (text, images, videos) you choose to publish, and possibly certain account identifiers, to the social network’s platform via its API. Similarly, if our Service offers integrations with other marketing or analytics platforms, any data you explicitly choose to export or sync will be shared with those platforms. Such sharing is done only at your request or with your consent, and the third-party’s use of your information is governed by their own privacy policies. We recommend you review the privacy policies of any third-party services you connect to our platform.
  
  
• Business Transfers: If Omada AI, Inc. is involved in a merger, acquisition, sale of assets, bankruptcy, or other corporate change, your information may be transferred to a successor or affiliate as part of that transaction. We will ensure any such entity is bound by terms that are at least as protective of your privacy as those in this Policy, and we will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
  
  
• Legal Requirements and Protection of Rights: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to (i) comply with a legal obligation, court order, or government request; (ii) enforce our Terms of Service or other agreements; (iii) protect the rights, property, or safety of Omada.ai, our users, or the public. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction (in accordance with applicable laws). If we receive a subpoena or another legal request for your data, we will attempt to notify you (for example, via email to the address on your account) unless we are legally prohibited from doing so.
  
  
• With Your Consent: In cases other than those above, if we wish to share your personal information with third parties, we will obtain your consent. For instance, we might present you with an opportunity to opt-in to share information with a partner for a particular program or event; we will only proceed if you agree.
  
  

Data Security

We take the security of your personal information seriously. Omada.ai implements a variety of technical and organizational security measures designed to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (e.g., using SSL/TLS when information is exchanged with our platform) and at rest, firewalls and intrusion detection systems, regular security audits, and restricted access to personal data by our employees and contractors (limited to those who need the information to operate or improve the Service). We also encourage you to use a strong, unique password for your Omada.ai account and to keep your account credentials confidential.

However, please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by law.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, as outlined in this Privacy Policy, and to comply with applicable legal requirements. This generally means we will keep your account information and content for as long as your account is active. If you delete your account or request deletion of certain data, we will remove or anonymize that information within a reasonable timeframe, except for any data we are required to keep for legal or compliance purposes (for example, records of transactions or communications may be retained if needed for tax, audit, or legal obligations). We may also retain backup copies of data for a limited period of time in our secure archives before they are deleted as part of our routine backup lifecycle. Any residual anonymous or aggregated data, which no longer identifies you, may be retained indefinitely for analytical purposes.

Your Rights and Choices

• Access, Correction, and Deletion: You have the right to access the personal information we hold about you and to request correction of any inaccuracies. You may review and update much of your basic account information by logging into your account settings. If you need assistance accessing or correcting other personal data we may have, please contact us at our email below. You also have the right to request deletion of your personal information. Keep in mind, deleting certain data or your account may affect your ability to use the Service. If you request deletion, we will delete your personal data (subject to the exceptions provided by law, such as if the information is required to be retained for legal compliance or internal business purposes like fraud prevention).

• Opting Out of Marketing: If you have subscribed to marketing communications, you can opt out at any time by clicking the “unsubscribe” link in emails or by contacting us. Please note that you will still receive transactional or account-related messages from us (such as password reset emails or important notices about service changes) even if you opt out of marketing messages.

• Cookies Preferences: As mentioned above, you can control or delete cookies through your browser settings. Additionally, some web browsers offer a “Do Not Track” feature; while our site does not currently respond to Do Not Track signals, you may opt out of certain tracking (such as Google Analytics) by using browser ad-ons or setting cookie preferences as provided by those third parties.

• GDPR - European Residents: If you are located in the European Economic Area, United Kingdom, or another region with laws governing data collection and use (such as the EU General Data Protection Regulation (GDPR)), you have certain rights regarding your personal data. Subject to applicable law, you have the right to:
• Access your data – You can ask us to confirm if we are processing your personal data and request a copy of the data.
  
  
• Rectify your data – You can request that we correct any incomplete or inaccurate personal information we hold about you.
  
  
• Erase your data – You can request that we delete your personal data in certain circumstances (for example, if it is no longer necessary for the purposes collected, or if you withdraw consent and no other legal basis for processing exists).
  
  
• Restrict or Object to Processing – You may request that we limit processing of your data or object to certain types of processing (such as direct marketing). For example, you have an unconditional right to object to the processing of your personal data for marketing purposes.
  
  
• Data Portability – Where processing is based on your consent or a contract with you and carried out by automated means, you have the right to request a copy of your personal data in a structured, commonly used, machine-readable format, and to have that information transmitted to another controller where technically feasible.
  
  
• Not be subject to automated decisions – Omada.ai does not make solely automated decisions involving your personal data that produce legal or similarly significant effects without human review.
  
  
• Withdraw Consent – If we rely on your consent to process any personal data, you have the right to withdraw that consent at any time (which will not affect the lawfulness of processing based on consent before its withdrawal).
  
  

To exercise any of these GDPR rights, please contact us using the contact information below. We may need to verify your identity before fulfilling certain requests (for instance, to ensure that it is actually you requesting the data and not an unauthorized person). We will respond to your request within the timeframes required by law (generally within one month for GDPR requests). You also have the right to lodge a complaint with a supervisory authority in your country or region if you believe we have infringed your data protection rights. We encourage you to contact us first so we can address your concerns directly.

CCPA - California Residents: If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) (as amended by the California Privacy Rights Act, CPRA). These rights include:

• Right to Know: You can request that we disclose what personal information we collect, use, disclose, and sell (please note, however, that Omada.ai does not sell your personal information). You may request details on the specific pieces of personal information we have about you, as well as the categories of sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
  
  
• Right to Delete: You have the right to request deletion of personal information we have collected from you (with certain exceptions – for example, if the information is necessary to complete a transaction you requested, to detect security incidents, to comply with legal obligations, etc., we may retain the necessary data).
  
  
• Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
  
  
• Right to Opt-Out of Sale/Sharing: CCPA gives you the right to opt out of the sale of personal information or the sharing of personal information for cross-context behavioral advertising. As noted, Omada.ai does not sell personal data. If in the future we were to consider “selling” personal data as defined by CCPA, we would provide a clear opt-out mechanism.
  
  
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you our services, charge you a different price, or provide a different level of quality of service just because you exercised your rights under CCPA. However, please note that in some cases, if you request deletion of data that is necessary to provide the Service, we may not be able to continue providing you with certain features (for example, if you ask us to delete your account data entirely, the Service will no longer recognize your account).
  
  

To exercise your California privacy rights, you (or your authorized representative) can contact us at the email or mailing address listed in the Contact section below. We may need to verify your identity (and authority, if through an agent) before processing your request, such as by requiring you to log into your existing account or provide information matching our records. We aim to respond to verifiable consumer requests within 45 days as required by CCPA (or notify you if we need an extension).

Other Regions: If you are located in a jurisdiction with additional privacy rights by law, we will respect those rights as applicable. For example, residents of certain U.S. states (such as under Virginia’s CDPA, etc.) may have rights to access and delete data. Omada.ai’s policy is to extend fundamental privacy rights to all our users, regardless of jurisdiction, to the extent reasonably feasible. You can always contact us with any privacy-related inquiries or requests, and we will do our best to accommodate you consistent with applicable law.

International Data Transfers

Omada.ai is headquartered in North America (United States), and our Service is primarily designed for users in North America. However, the data we collect from you may be transferred to, and stored on, servers located in the United States or other countries. These countries may have data protection laws that are different from those in your country of residence. We will take steps to ensure that your data is afforded a high level of protection in the jurisdictions where we process it. If you are located outside of the United States and provide personal information to us, we rely on lawful transfer mechanisms (such as Standard Contractual Clauses for data transfers from the EEA) or your consent to transfer your data to the U.S. or other jurisdictions as needed to provide the Service. By using Omada.ai, or by providing us with any information, you acknowledge the transfer, processing, and storage of your personal information in the United States and other jurisdictions where we or our service providers operate, and understand that your information may be subject to access by law enforcement and authorities in those jurisdictions.

Children’s Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from anyone under 13. If you are under 13, please do not attempt to register an account or send any personal information about yourself to us. If we learn that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information as soon as possible. For users between 13 and 18 (or the age of majority in your jurisdiction), the Service should be used only with the involvement and consent of a parent or legal guardian, and the account should be registered by an adult. Parents or guardians who believe that Omada.ai might have any information from or about a child under the age of 13 may contact us at our support email to request removal of that data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make changes, we will revise the “Last Updated” date at the top of this Policy. If the changes are material, we will provide a more prominent notice (such as by email notification to registered users or a notice on our website) to inform you of the update. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Omada.ai Service after the effective date of an updated Privacy Policy will constitute your acceptance of the changes. If you do not agree with the changes, you should discontinue use of the Service and may request deletion of your data as described above.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you can contact us at:

Omada AI, Inc. (Attn: Privacy)
Mailing Address: 1100 Bellevue Way NE Ste 8A #133, Bellevue, WA 98004

Email: privacy@omada.ai

We will respond to your inquiries as promptly as possible. Your privacy is important to us, and we welcome your feedback. Thank you for trusting Omada.ai with your marketing needs.