Privacy Policy
Last Updated: September 22, 2026
01. Introduction
Ominiflow Enterprises is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform services, or use the Ominiflow mobile app. By accessing or using Ominiflow, you agree to the terms of this Privacy Policy.
02. Company Information
Legal Name: Ominiflow Enterprises
Address: 18 Tarani Colony, Dewas, Madhya Pradesh 455001, India
GSTIN: 23BMKPN8756M1ZA
Contact: Contact our team
03. Information We Collect
3.1 Information You Provide
This includes account information (name, email), payment details for subscriptions, profile information, content you create or upload, and communications you have with our support team.
3.2 Automatically Collected
We collect usage data, device information (IP address, browser type), log data, and use cookies to enhance your experience and analyze platform performance.
3.3 Third Parties
Information from WhatsApp/Meta, integrated third-party applications, and social media platforms when you link them to your Ominiflow account.
04. How We Use Your Information
- Service Provision
- Account Management
- Communication
- Product Analytics (first-party)
- Security
- Legal Compliance
We do not use personal data collected from the Ominiflow mobile app to track you across other companies’ apps or websites for advertising, and we do not sell personal data to data brokers.
05. Data Sharing
We share data with trusted service providers, WhatsApp/Meta for API functionality, during business transfers (mergers/acquisitions), or when required by law to comply with legal processes.
06. Data Security
We implement industry-standard security measures including SSL/TLS encryption for all data in transit, secure authentication protocols, and regular security audits to protect your sensitive information.
07. Data Retention
We retain your data for as long as your account is active. Upon account removal request, all personal data is permanently deleted from our primary databases within 30 days.
08. Your Rights
You have the right to access, correct, delete, or port your personal data. You may also object to processing or request restriction of processing in certain circumstances.
09. Children's Privacy
Ominiflow is not intended for use by individuals under the age of 18.
10. International Transfers
Data may be transferred and processed outside your country of residence.
11. Cookies
Cookies apply to our website (ominiflow.com), not the mobile app. See our Cookie Policy for details.
12. Third-Party Links
We are not responsible for the privacy practices of external sites linked here.
14. GDPR-Aligned Practices (EU / UK Users)
For users in the European Economic Area (EEA) and the United Kingdom, we process personal data in accordance with the GDPR / UK GDPR. Depending on the activity, our legal bases include:
- Consent — non-essential cookies/analytics/marketing (via our cookie banner), and newsletter marketing.
- Contract — providing the Ominiflow platform and support you request.
- Legitimate interests — securing our services, preventing abuse, and improving product reliability (balanced against your rights).
- Legal obligation — where we must retain or disclose data under applicable law.
You may request access, correction, deletion, restriction, objection, or data portability by emailing . We aim to respond within 30 days. You may also lodge a complaint with your local supervisory authority.
Where we transfer data outside the EEA/UK, we use appropriate safeguards (such as Standard Contractual Clauses) with processors, or rely on other lawful transfer mechanisms. Platform customers can review our processor commitments and current subprocessors on the DPA & Subprocessors page, or request a signed DPA at .
15. California Privacy Rights (CCPA)
California residents have specific rights regarding their personal information, including the right to know what personal information is collected, the right to delete that information, and the right to opt-out of the sale of personal information.
16. Ominiflow WhatsApp Automation (Google Workspace Marketplace)
This section applies specifically to the Ominiflow WhatsApp Automation application or add-on made available through the Google Workspace Marketplace, when you install or use it with your Google account.
- Google Sheets. The application may access your Google Sheets data only as needed to configure and run automation workflows that you initiate or approve. We do not use your spreadsheet content for unrelated purposes.
- Where data stays. Your Google Workspace data (including Sheets) remains under Google’s control and your Google account, subject to Google’s terms and privacy settings. We process such data only to provide the features you enable.
- Third-party services. If you connect or route data to external services (for example WhatsApp or other APIs), information may be shared with those providers according to your configuration and their policies, in addition to this Privacy Policy.
- Google’s terms. Your use of the add-on is also subject to Google’s applicable agreements for Google Workspace, Google APIs, and the Marketplace.
- Limited Use & AI Policy. Ominiflow’s use and transfer of information received from Google APIs to any other app will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements. Ominiflow does not use, transfer, sell, or disclose Google Workspace user data (raw, aggregated, or derived) to create, train, or improve any machine learning (ML) or artificial intelligence (AI) models. Our application does not integrate with or transfer any Google Workspace user data to any third-party AI/ML services.
17. Ominiflow Mobile App (Android & iOS)
This section applies to the Ominiflow mobile application (package name com.ominiflow.com) used by business teams to manage WhatsApp conversations through their Ominiflow account.
17.1 Data We Collect Through the App
- Account information: name, email, and authentication credentials you use to sign in.
- Contacts: if you grant permission, contact names and phone numbers so you can start or continue WhatsApp conversations from the app. We access contacts only when you use contact-related features.
- Location: if you grant permission, device location to support order or delivery position features when enabled for your account.
- Photos, camera, and files: images or documents you choose to capture or attach when sending messages.
- Microphone and audio: voice recordings when you send voice messages.
- Messages and chat content: text, media, notes, pipeline status, and related metadata for conversations you manage in the app.
- Push notification tokens: device tokens (for example via Firebase Cloud Messaging or Expo) so we can alert you about new messages.
- Device and usage data: app version, device type, and basic diagnostic logs needed to operate and secure the service.
17.2 How We Use App Data
We use mobile app data only for app functionality: authenticating you, displaying and syncing chats, sending and receiving WhatsApp messages through your connected business account, delivering push notifications, uploading media you attach, and keeping the app secure and reliable. We do not sell your personal data.
17.3 No Advertising Tracking (Apple App Tracking Transparency)
Under Apple’s definition of “tracking,” the Ominiflow iOS app does not track users. Specifically:
- We do not collect or use the Identifier for Advertisers (IDFA) or similar advertising identifiers.
- We do not link data from the app with third-party data for targeted advertising.
- We do not share app data with data brokers.
- We do not use third-party advertising or cross-app tracking SDKs in the mobile app.
- Location (when permitted) is used only for order/delivery position features within your business workflows — not for advertising or cross-app tracking.
- Contacts (when permitted) are used only so you can message customers from the app — not for advertising audiences.
Because the app does not track users for advertising, it does not present an App Tracking Transparency (ATT) permission prompt. Website analytics or marketing cookies on ominiflow.com (if you consent via our cookie banner) are separate from the mobile app and are described in our Cookie Policy.
17.4 Where Data Is Sent
App data is transmitted over encrypted connections to Ominiflow servers (including whatsapp.ominiflow.com) and, where required to provide messaging, to Meta / WhatsApp Cloud API. Push delivery may use Google Firebase (Android) or Apple push services (iOS). Real-time inbox updates are delivered through Ominiflow’s own infrastructure.
17.5 Permissions
The app requests OS permissions (contacts, location, camera, photos, microphone, notifications) only when needed for features you use. You can deny or revoke permissions in your device settings; some features may not work without them.
17.6 Account Deletion
You may delete your account from Profile → Delete account in the app, or request deletion at our account deletion page. See Section 07 for retention after a deletion request.
18. Contact Us
If you have any questions about this Privacy Policy or our data practices, or to exercise your privacy rights, contact our privacy team:
General inquiries: