Privacy Policy - OMNISYNC

OMNISYNC ("we," "our," or "us") is committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Software as a Service (SaaS) platform.

By accessing or using OMNISYNC, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect and process the following types of personal data:

a. Information You Provide

Name
Email address
Account credentials
Billing and transaction details
Communications (including messages, attachments, and support queries)

b. Automatically Collected Data

IP address
Browser type and version
Device information
Usage data (pages visited, actions taken, session duration)

c. Payment Information

Payments are processed by third-party providers (e.g., Paddle). We do not store full payment card details.

2. Legal Basis for Processing (GDPR & UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases:

Contractual Necessity – to provide our services
Legitimate Interests – to improve and secure our platform
Legal Obligations – to comply with applicable laws
Consent – where required (e.g., marketing communications, cookies)

3. How We Use Your Information

We use your information to:

Provide, operate, and maintain the platform
Improve and personalize user experience
Analyze usage and platform performance
Develop new features and services
Communicate with you (support, updates, notifications)
Process payments securely through authorized providers
Prevent fraud, abuse, and security threats

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience.

Types of cookies we use:

Essential Cookies – required for platform functionality
Performance Cookies – help us understand usage and improve services
Functional Cookies – remember user preferences
Analytics Cookies – track usage patterns (non-identifiable data)

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect platform functionality.

Where required by law (e.g., GDPR/UK GDPR), we will request your consent before placing non-essential cookies.

5. Log Files

We follow standard industry practices of using log files. These include:

IP addresses
Browser type
ISP
Date and time stamps
Referring/exit pages
Clickstream data

This information is used for analytics, security, and system administration and is not directly linked to identifiable personal data.

6. Payment Processing

We use trusted third-party providers such as Paddle to process payments.

We do not store full payment card information
Payment data is processed securely by Paddle
Paddle handles your data in accordance with its own privacy policies

We recommend reviewing Paddle's privacy policy for more details.

7. Data Sharing and Disclosure

We do not sell your personal data.

We may share your information with:

Service providers (hosting, analytics, payment processors)
Legal authorities when required by law
Business partners strictly for service delivery

All third parties are required to handle your data securely and in compliance with applicable laws.

7A. Marketplace Data (Amazon and Other Sales Channels)

When you connect a sales channel such as Amazon to OMNISYNC, we access data from that channel on your behalf and only to run the features you turn on: orders, listings, pricing, inventory, fulfillment and financial reports. We handle Amazon data in line with Amazon's Selling Partner API Acceptable Use Policy and Data Protection Policy.

a. Amazon buyer information

If you ship your own Amazon orders (Fulfilled by Merchant) through a third-party logistics (3PL) warehouse connected to OMNISYNC, we retrieve the recipient's name, shipping address, phone number and buyer email address for each order. This information is used only to fulfill that order:

It is sent over an encrypted connection (TLS 1.2 or higher) to the 3PL warehouse that you have chosen and connected with your own account, so that the warehouse can ship the order.
We then send the carrier and tracking number back to Amazon so the order is marked shipped.
OMNISYNC does not store buyer names, street addresses, postal codes, phone numbers or email addresses. They are kept in memory only while the shipment is created, and are not written to our database, logs, files or backups.
We keep only non-personal order details (order number, items, amounts, city, state and country, carrier and tracking) so you can manage your inventory and accounting.

b. What we never do with marketplace data

We never sell, rent or share Amazon buyer information, except with your 3PL warehouse to ship your order.
We never use it for marketing, advertising, analytics, profiling, or to contact buyers.
We never combine it with data from other sources or use it for any seller other than the one it belongs to.

c. Retention, deletion and security incidents

Because buyer personal information is not stored, it is never retained beyond the time needed to create the shipment, and in all cases well within 30 days of order delivery.
If you disconnect Amazon, close your OMNISYNC account, or Amazon asks us to, we delete the Amazon data we hold for your account within 30 days, unless the law requires us to keep it.
Access to systems that process marketplace data is limited to authorized personnel using unique accounts and two-factor authentication.
If a security incident affects marketplace data, we notify Amazon within 24 hours of detection and inform affected sellers as required by law.

Buyers who want to access, correct or delete their information can contact us at the email address below; we will respond, and where appropriate refer the request to the seller they bought from.

8. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including countries that may not have equivalent data protection laws.

Where required, we implement appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Data processing agreements

9. Data Retention

We retain personal data only for as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal obligations
Resolve disputes and enforce agreements

10. Your Data Protection Rights (GDPR & UK GDPR)

If you are in the EEA or UK, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion ("Right to be Forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise these rights, contact us using the details below.

11. Data Security

We implement appropriate technical and organizational measures to protect your data.

However, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet.

12. Limitation of Liability

To the maximum extent permitted by law:

OMNISYNC shall not be liable for any indirect, incidental, or consequential damages arising from the use of our platform
We do not guarantee uninterrupted or error-free service
Users are responsible for maintaining the confidentiality of their account credentials

13. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for their privacy practices or content.

14. Children's Information

Our services are not intended for individuals under the age of 13 (or equivalent minimum age under applicable law). We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

Continued use of the platform constitutes acceptance of any changes.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, you may contact us at:

Email: info@versifyd.com
Company: Versifyd