Privacy Policy

1Scope & roles

This policy covers the Omnia website, API, and console (the "Service"), operated by [LEGAL ENTITY NAME] ("Omnia," "we"). For your account information, Omnia is the controller. For the data you submit to the API to run a calculation, you are the controller and Omnia is a processor acting on your instructions (see §4).

2Information we collect

• Account & contact. Name, work email, business name, phone, the password you choose (kept only as a salted one-way hash, never in readable form), and the verification code you enter, when you sign up.
• Agreement records. The terms version you accepted, the name you typed to sign, and the time and IP address of acceptance — kept as evidence of consent.
• Billing. Legal/business name and billing contact. Card and bank numbers are collected and stored by our payment processor, not by Omnia; we receive only a token, the card brand, and the last four digits.
• Usage & logs. API calls (timestamps, status codes, the check date, request identifiers, approximate volume), rate-limit counters, and basic technical logs used to run, secure, meter, and support the Service.
• Communications. Messages you send us for support.

3How we use information

• To provide, operate, secure, and improve the Service;
• To authenticate accounts and API keys and to meter and bill usage;
• To send transactional messages (verification codes, billing and account notices) and, where permitted, service updates;
• To detect, prevent, and respond to fraud, abuse, and security incidents;
• To comply with law and enforce our agreements.

We do not sell your personal information, and we do not use your calculation inputs to train models or for advertising.

4Calculation inputs

The data you send to the API to compute a paycheck (wages, deductions, W-4 fields, year-to-date figures, and jurisdictions) is processed only to return the calculation and the associated usage record. It may relate to your employees or clients. You are responsible for having the rights and notices needed to send it, and for not sending more sensitive data than a calculation requires — the API does not require government identifiers such as Social Security numbers, and you should not include them.

We process these inputs on your behalf, retain the operational record described in §7, and make them available to you through your account.

5Who we share information with

• Service providers that help us run the Service under contract, including our payment processor (Stripe) for billing and our email provider for verification and notices. They may process information only to provide their service to us.
• Legal & safety. When required by law, subpoena, or to protect the rights, property, or safety of Omnia, our customers, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell or rent personal information to third parties.

6Cookies

The console uses a single strictly-necessary session cookie (HTTP-only) to keep you signed in. It is required for the console to work and is not used for advertising or cross-site tracking. Your browser may also store small non-tracking preferences locally. We do not use third-party advertising or analytics cookies.

7Data retention

We keep account and agreement records for as long as your account is active and as needed to comply with legal, tax, and audit obligations. Usage logs are retained on a rolling basis for operations, security, and billing and are trimmed over time. When data is no longer needed, we delete or de-identify it. You may request deletion as described in §9, subject to records we must keep by law (for example, proof of consent and billing records).

8Security

We use reasonable technical and organizational measures appropriate to the data, including encryption in transit (HTTPS), hashing of API keys and passwords, access controls, and keeping card/bank numbers with our PCI-compliant processor rather than on our servers. No system is perfectly secure; we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.

9Your rights & choices

Depending on where you or your data subjects are located, you or they may have rights to access, correct, delete, port, or restrict personal information, and to object to certain processing. For account information, contact privacy@omniatax.io and we will respond as required by applicable law. For calculation inputs, where Omnia is a processor, please direct requests to the customer (controller) who submitted the data; we will assist that customer as required. We will not discriminate against you for exercising a right.

U.S. state privacy laws (such as California's CCPA/CPRA and similar laws): we do not sell or "share" personal information for cross-context behavioral advertising. To exercise a right, email privacy@omniatax.io.

10International users

Omnia is operated from and stores data in the United States and is intended for U.S. payroll use. If you access it from outside the United States, you consent to processing in the United States, which may have different data-protection laws than your location. [If you serve EU/UK data subjects, confirm a lawful transfer mechanism with counsel.]

11Changes

We may update this policy. Material changes will be posted here with a new effective date and, where appropriate, notified to you. Continued use after a change means you accept the updated policy.

12Contact

[LEGAL ENTITY NAME], [COMPANY ADDRESS]. Privacy questions: privacy@omniatax.io.