Privacy policy

The controller of personal data described here is OMNIVIEWLAB LLC, a Wyoming limited liability company (EIN 98-1971036), at 30 N Gould St, Ste N, Sheridan, WY, 82801, US.

For any question about this policy, or to make a request about your data, write to [email protected].

Omniviewlab is offered to businesses in the United States and Vietnam. We do not offer it to businesses or people in the European Economic Area or the United Kingdom, and we do not direct this website or our pricing at them.

That is a deliberate limit rather than an omission. A company established outside the European Economic Area that offers services to people inside it must appoint a representative there under Article 27 of the General Data Protection Regulation. We have not appointed one. If we begin to offer the service in the European Economic Area we will appoint a representative first and name them in this section.

From the people who use the software. Name, work email address, the business they belong to, their role and permissions, and a record of when they signed in.

From the business that subscribes. Legal name, addresses, tax registration where applicable, the billing contact, and a record of payments. Card numbers are entered into our payment processor and are never held by us; we receive the outcome of a payment and the last four digits.

Put into the software by you. Your own business records — customers, suppliers, employees, students, orders and so on — which may themselves contain personal data about people we have no direct relationship with. For that data you are the controller and we are your processor.

Technical data. Log records of requests made to our servers, including IP address, time and what was requested, kept for security and for diagnosing faults.

From this website: nothing. This site sets no cookie, loads no third-party script, and runs no analytics. Nothing you do here is recorded, which is why you were not asked to consent to anything.

To provide the service you subscribed to — creating accounts, storing and returning your records, and supporting you. Legal basis: performance of a contract.

To take payment and keep accounts — billing, receipts, and our own bookkeeping. Legal basis: performance of a contract, and compliance with a legal obligation for the records we must keep.

To answer support requests — reading what you send us and replying, with the help of AI systems. Legal basis: performance of a contract, or our legitimate interest in answering people who write to us. You can ask for a person to handle your request instead.

To keep the service secure — detecting and investigating abuse, faults and unauthorised access. Legal basis: our legitimate interest in operating a service that is not compromised, balanced against the limited data involved.

To meet legal obligations — tax, accounting and sanctions requirements. Legal basis: compliance with a legal obligation.

Providing the data described under "from the people who use the software" and "from the business that subscribes" is a contractual requirement: without it we cannot open or operate an account. The data you put into the software is yours to decide on.

We share personal data only with:

Our payment processor, to take payment and handle refunds and disputes; our hosting and infrastructure providers, who store and serve the data on our instructions; AI model providers, which run the AI assistant on the data you ask it about and help us draft replies to support requests, on our instructions and not for training their own models; and our professional advisers — accountants and lawyers — where they need it to advise us.

We also disclose data where we are legally required to, and will tell you unless we are prohibited from doing so.

We do not sell personal data, and we do not share it for advertising.

We are established in the United States, and our infrastructure and AI providers process data in the United States and in Asia — so data about a business in one country we serve is processed in another. Where the law of a country we serve requires a safeguard for such a transfer, we put a written one in place with the recipient, alongside the technical measures described in the next section. Tell us which country you are in and we will say what applies and send you a copy, at [email protected].

Account and user records — for as long as the account is open, and for 30 days after it is closed, after which they are deleted.

Your business records — for as long as the account is open. On closure they remain available for export for 30 days and are then deleted.

Billing and accounting records — for as long as tax and company law require us to keep them, which is longer than the account lasts.

Server logs — 90 days.

Data is encrypted in transit. Access within our systems is limited by role and permission, and access by us is limited to the people who need it to run the service. We keep backups, and we test that they restore.

Where data protection law gives you these rights, you have the right to be told what we hold and why, to a copy of it, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable form, and — where we rely on consent — to withdraw it at any time without affecting what was done beforehand. You are not subject to any decision based solely on automated processing that produces legal effects.

To exercise any of these, write to [email protected]. We answer within one month. We do not charge for this, and we will not refuse unless the law allows it — if we do, we will say why.

You also have the right to complain to the data protection authority of the country where you live or work, where your country has one. We would rather you told us first, but you do not have to.

Where the personal data concerned is data you put into the software about other people, we hold it as your processor: send such requests to the business that holds the account, and we will help them answer.

Omniviewlab is a product for businesses and is not directed at children. Where a business uses the learning module to record students who are children, it does so as the controller of that data and is responsible for the basis on which it holds it.

We will publish any new version here with a new "last updated" date, and where a change materially affects how we handle your data we will tell you by email before it takes effect.