Privacy Policy
Our Privacy Policy outlines how we collect, use, and protect your personal information. Your privacy and security are our priorities.
Last Updated on February, 1, 2026
About Us & Scope
Omnivert.ai ("we", "us", or "our") is a company registered in the United Kingdom. This policy applies to our B2B SaaS platform and services. We act as a Data Controller for our clients' account information and a Data Processor when handling employee data uploaded by our clients. Our processing is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Collection & Sources
We collect Account Data (names, business emails, billing details) directly from you. We also process Client-Provided Data (employee tenure, performance metrics, and engagement data) to generate turnover predictions. Additionally, we automatically collect Technical Data (IP addresses, device identifiers, and session logs) via cookies and similar technologies to ensure platform security and performance.
Legal Basis for Processing
We process data under the following legal bases: Contractual Necessity to provide our services; Legal Obligation for tax and regulatory compliance; and Legitimate Interests for platform analytics, fraud prevention, and business development. Where we process employee data on behalf of a client, the client is responsible for ensuring a valid legal basis exists for such processing.
Data Security & Retention
We implement industry-standard technical and organisational measures, including AES-256 encryption and secure access controls, to protect against unauthorised access or data breaches. We retain personal data only for as long as necessary to fulfil the purposes outlined or to comply with statutory retention periods. Client data is typically deleted or anonymised within 30 days of contract termination.
International Transfers
As a UK company, we primarily store data within the UK or the EEA. If we transfer data to third countries (e.g., using US-based cloud providers), we ensure such transfers are protected by Standard Contractual Clauses (SCCs) or other "adequacy" mechanisms approved by the UK Information Commissioner’s Office (ICO) to ensure a comparable level of protection.
Your Rights & Choices
Under UK GDPR, you have the right to access, rectify, or erase your personal data. You may also object to processing, request restriction of processing, or exercise your right to data portability. To exercise these rights, or if you are an employee of a client wishing to access data held within our platform, please contact us or your employer (the Data Controller) directly.
Liability & Contact
Omnivert.ai's liability regarding data processing is limited to the terms set out in our Master Service Agreement. For any privacy-related enquiries or to lodge a formal request, please contact our Data Protection Lead at support@omnivert.ai. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.