Privacy Policy

1. Who we are

OmniHand (“OmniHand”, “we”, “us”) is an AI customer support service that businesses add to their websites. It is operated by Faizan Mumtaz, based in Pakistan. You can reach us at support@omnihandai.com.

2. Two kinds of people, two roles

This policy covers two groups of people, and our role is different for each:

• Our customers and their teams: the businesses that sign up for OmniHand and the people they invite. For their account data, we decide what is collected and why.
• Visitors to our customers' websites: people who chat with an OmniHand agent on a business's website. We handle their chats on behalf of that business, which decides how the chat is used. If you chatted with a business, its own privacy policy applies too, and it is the first place to go with questions about your chat.

We also collect a small amount of data from people who visit omnihandai.com itself, described below.

3. What we collect

From customers and their teams

• Account details: your name, email address, password (stored only in a hashed form we can't read), profile photo if you add one, and your business's name.
• What you put into OmniHand: your agents and their instructions, files you upload, text you add, and pages from websites you ask us to read.
• Sign-in and security data: the IP address and browser type used for each sign-in, so we can keep accounts secure and spot misuse.
• Billing details: when online payments are available, a payment provider (Stripe) will handle your card. We will never see or store your full card number.

From visitors who use a chat widget

• Your messages and the replies from the AI or the business's team.
• Your name and email address, only if you choose to give them, for example so the team can reply later.
• Technical details: the page you chatted from and your browser type.

From visitors to omnihandai.com

We don't use analytics or advertising trackers on our website. Our servers keep standard technical logs (such as IP address and pages requested) to keep the service running and secure.

4. How we use it

• To provide OmniHand: running your agents, answering visitors, showing chats in your inbox.
• To write AI answers: a visitor's message and the relevant parts of the business's knowledge are sent to our AI provider to produce a reply.
• To send service emails: invitations, password resets, notices that a visitor is waiting, and replies a visitor asked for.
• To keep OmniHand secure, prevent abuse and fix problems.
• To answer you when you contact us.

We do not sell personal data. We do not use your content or your visitors' chats to train AI models, and our AI provider does not use data sent through its API for training.

5. Who we share it with

We use a small number of trusted services to run OmniHand. They only receive what they need to do their job:

• OpenAI: writes AI answers and prepares knowledge so it can be searched.
• Pinecone: stores the search index built from a business's knowledge.
• Cloudflare: stores uploaded files, and runs our domain and email routing.
• Akamai (Linode): hosts our servers and database.
• Resend: sends our emails.
• Stripe: will process payments once online payments are available.

We may also share data if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of OmniHand, in which case this policy would continue to apply.

6. Where your data is processed

Our providers may store and process data in countries other than yours, including the United States. We choose providers that protect data to a high standard.

7. How long we keep it

• Account data is kept while your account exists. When you delete your account, we delete it.
• A business's content and visitor chats are kept until the business deletes them or deletes its workspace. When a workspace is deleted, its chats, files and search index are deleted with it.
• Copies may stay in logs or backups for a limited time before they are overwritten.

8. How we protect it

Everything is sent over encrypted connections (HTTPS), passwords are hashed, and access to data is limited to what is needed to run the service. No service can promise perfect security, but we work to protect your data and will tell affected customers promptly if a breach affects them.

9. Your choices and rights

You can ask us to show you the personal data we hold about you, correct it, delete it, or give you a copy. You can also object to how we use it. Customers can edit their profile and delete their account or workspace from the dashboard at any time.

If you chatted with a business through OmniHand, please contact that business first, since it controls your chat. If you can't reach it, email us and we'll help. We answer requests at support@omnihandai.com, usually within 30 days.

10. Cookies and browser storage

• Dashboard: one cookie keeps you signed in. It is needed for OmniHand to work.
• Chat widget: stores a random visitor ID in the browser, so a chat continues when the visitor moves to another page, and remembers if a pop-up message was dismissed.

We don't use advertising or tracking cookies.

11. Children

OmniHand accounts are for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

12. Changes to this policy

We may update this policy as OmniHand changes. We'll change the date at the top, and for important changes we'll tell customers by email or in the dashboard before they take effect.

13. Contact

Questions or requests about your data: support@omnihandai.com.