Privacy Policy

Last Updated: September 2026

This Privacy Policy explains how Omphacite ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit omphacite.org (omphacite.org) or use our software-as-a-service (SaaS) platform. We are committed to protecting your privacy and complying with applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), and other State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.).

The United States follows a notice-and-choice model for privacy regulation. This means that while we do not generally require your opt-in consent to process your personal information for core business operations, we provide you with clear notice of our practices and offer specific opt-out choices where legally required, such as for the sale or sharing of personal information or the tracking of children under 13. Our practices are governed by sector-specific federal laws, the Federal Trade Commission Act § 5, 15 U.S.C. § 45 (FTC Act — unfair/deceptive practices), and a growing patchwork of state comprehensive privacy laws. This policy is designed to provide maximum legal protection and transparency regarding our data practices.

By accessing or using our SaaS platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services. Your continued use of omphacite.org constitutes your acceptance of this Privacy Policy and any future modifications. Please also review our Terms and Conditions and our Cookie Policy for a complete understanding of our legal framework.

1. Information We Collect

As a provider of SaaS solutions, we collect information necessary to deliver our services, maintain account security, and comply with legal obligations. The specific types of information we collect depend on your interactions with our platform, the features you utilize, and the level of service you require. We adhere to data minimization principles, collecting only what is necessary for the purposes outlined in this policy.

We collect several categories of personal information directly from you when you register for an account, contact our support team, or interact with our platform. This includes personal identifiers such as your name, email address, business address, and phone number; professional or employment-related data such as your job title and company name; and account credentials. If you engage in financial transactions through our platform, we may collect billing address and payment card information, though payment processing is typically handled by third-party service providers subject to the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions and Payment Card Industry Data Security Standard (PCI DSS) requirements.

In addition to information you provide directly, we automatically collect technical and usage data when you access omphacite.org. This includes Internet Protocol (IP) addresses, browser type and version, time zone settings, operating system, and platform usage statistics. We utilize cookies, web beacons, and similar tracking technologies to gather this data. For more detailed information on how we use these technologies, please review our Cookie Policy.

We may also receive information from third parties, such as marketing partners or data enrichment services, to enhance our service offerings or verify the accuracy of the information you provide. If you use third-party integrations or APIs within our SaaS platform, we may receive data from those services based on your authorization. We do not knowingly collect sensitive personal information, such as health or medical data protected by the Health Insurance Portability and Accountability Act (HIPAA) where applicable, unless strictly necessary for a specific service feature and with your explicit consent where required by law.

2. How We Use Your Information

Omphacite uses the information we collect for legitimate business purposes, including providing and maintaining our SaaS platform, processing transactions, and communicating with you about your account. We process your data in accordance with the notice-and-choice framework established by US privacy laws, ensuring that our use of your information is compatible with the context in which it was provided.

Specifically, we use your personal information to create and manage your user account, authenticate your identity, and provide you with access to the features and functionalities of our SaaS platform. We use your contact information to send you critical service announcements, security alerts, and administrative messages. Additionally, we may use your email address to send you marketing and promotional communications regarding our products and services, provided you have not opted out of receiving such communications. You can unsubscribe from marketing emails at any time using the link provided in the message.

We also use your information to monitor and analyze usage trends, improve our platform's functionality, and develop new features. This involves aggregating and anonymizing data to understand user behavior and optimize the user experience. Furthermore, we use your technical and usage data to detect, prevent, and address technical issues, security vulnerabilities, and fraudulent or illegal activities. Our commitment to security and fraud prevention is a core component of our service delivery.

Finally, we may use your personal information to comply with our legal obligations, enforce our Terms and Conditions, and protect our legal rights, privacy, safety, or property. Where required by law, such as under the Restore Online Shoppers' Confidence Act, 15 U.S.C. §§ 8401-8405 (ROSCA), we ensure that all material terms of any transaction are clearly disclosed prior to obtaining your billing information.

3. Information Sharing

We do not sell your personal information to third parties for monetary consideration. However, under certain state laws, such as the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the term "sale" may be broadly interpreted to include the sharing of data for cross-context behavioral advertising or other value exchanges. We may share your information with specific categories of third parties to facilitate our business operations, and we provide you with the right to opt-out of such sharing where applicable.

We share your personal information with our service providers, vendors, and contractors who perform services on our behalf, such as hosting providers, cloud infrastructure services, analytics providers, and customer support tools. These third parties are contractually obligated to protect your information and are prohibited from using it for any other purpose. We may also share your information with our affiliates and subsidiaries, provided they adhere to the privacy standards outlined in this policy.

In certain circumstances, we may disclose your personal information to comply with applicable law, legal process, or government requests. This includes responding to court orders, subpoenas, or law enforcement inquiries. We may also share information to protect our rights, property, or safety, or the rights, property, or safety of our users or others. If Omphacite is involved in a merger, acquisition, or asset sale, we may transfer your personal information as part of that transaction, provided the receiving entity agrees to honor this Privacy Policy.

We do not share sensitive personal information for purposes of cross-context behavioral advertising. We honor the Global Privacy Control (GPC) signal as a valid opt-out request for the sale or sharing of your personal information, in compliance with California Consumer Privacy Act as amended by CPRA — 'Do Not Sell or Share My Personal Information' / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135).

4. Cookies and Tracking

omphacite.org uses cookies, web beacons, pixels, and other tracking technologies to operate and maintain our platform, remember your preferences, and understand how you use our services. Cookies are small data files stored on your device that allow us to recognize you on subsequent visits. Our use of tracking technologies is designed to enhance your user experience and provide us with analytics to improve our SaaS offerings.

We categorize our use of cookies into strictly necessary, performance, and functionality cookies. Strictly necessary cookies are essential for the website to function and cannot be switched off in our systems. Performance and functionality cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. For a comprehensive breakdown of the specific cookies we use and their purposes, please consult our Cookie Policy.

We comply with applicable state laws regarding tracking technologies, including the California Consumer Privacy Act as amended by CPRA — 'Do Not Sell or Share My Personal Information' / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135). We also monitor compliance with the Electronic Communications Privacy Act, 18 U.S.C. § 2511 (limited application) and State wiretapping/cpw statutes (e.g., California Invasion of Privacy Act § 631, session-replay litigation) by carefully configuring our session replay and analytics tools to avoid capturing sensitive personal information.

You can control and manage cookies through your browser settings. Most web browsers automatically accept cookies, but you can usually modify your settings to decline cookies or alert you when cookies are being sent. Please note that disabling strictly necessary cookies may impact the functionality of our SaaS platform and prevent you from accessing certain features.

5. Your Rights and Choices

Depending on your state of residence, you may have specific rights regarding your personal information. Under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), and other State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.), consumers are granted various rights to control their personal data.

If you are a resident of one of these states, you have the right to know what personal information we have collected about you, the categories of sources from which it was collected, and the business or commercial purpose for collecting it. You also have the right to request access to and a copy of your personal information, request that we correct inaccurate personal information, and request that we delete your personal information, subject to certain exceptions. Additionally, you have the right to opt-out of the sale or sharing of your personal information for cross-context behavioral advertising.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below. We will verify your identity before processing your request, which may require you to provide additional information. We will respond to your request within the timeframes required by applicable state law, generally within 45 days. If we decline to act on your request, we will inform you of the reason for the denial and your right to appeal.

You may also designate an authorized agent to make requests on your behalf. To do so, you must provide the authorized agent with written permission to act on your behalf, and we may still require you to verify your identity directly. Please note that we do not discriminate against consumers who exercise their privacy rights, meaning we will not deny you goods or services, charge you different prices, or provide a different level of service for exercising your rights.

6. Data Security

The security of your personal information is a top priority for Omphacite. We implement industry-standard technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures are continuously reviewed and updated to address emerging threats and comply with applicable federal and state regulations.

Our technical safeguards include the use of encryption in transit and at rest, firewalls, intrusion detection systems, and regular security vulnerability scanning. We employ strict access controls, ensuring that only authorized personnel with a legitimate business need have access to your personal information. Our administrative safeguards include regular employee training on data privacy and security, background checks for personnel handling sensitive data, and strict data retention policies.

Despite our robust security measures, no system can be 100% secure. We cannot guarantee the absolute security of your data, particularly during transmission over the internet. In the event of a data breach, we will notify you and the appropriate regulatory authorities in accordance with applicable state breach notification laws. We maintain an incident response plan to ensure a swift and coordinated response to any security incident.

We regularly audit our security practices and comply with recognized industry standards. If our SaaS platform processes payment card information, we rely on PCI DSS-compliant third-party processors. We do not store sensitive authentication data such as full magnetic stripe data or CVV codes. By using our services, you acknowledge that you understand the inherent risks of transmitting data over the internet and agree that we are not liable for any unauthorized access to your data, except as required by applicable law.

7. International Data Transfers

While Omphacite is primarily based in the United States and our SaaS infrastructure is hosted within the US, we understand that our platform may be accessed by users globally. If you are accessing our services from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States. By using our platform, you consent to this transfer.

The United States does not have a federal omnibus privacy statute, but we adhere to sector-specific regulations and the FTC Act's enforcement of privacy promises. For international users, we ensure that any cross-border data transfers are conducted in compliance with applicable laws. We may utilize standard contractual clauses or other legally recognized transfer mechanisms to ensure appropriate safeguards are in place for the protection of your personal information.

If you are a resident of a jurisdiction with specific data localization or transfer requirements, we will comply with those requirements to the extent necessary to provide our SaaS services. We monitor international legal developments, including the SAFE WEB Act permanently reauthorized 2015 (21st Century DOJ/Apps Act-era codification, 15 U.S.C. § 8401 note), to ensure our practices remain compliant with cross-border enforcement and privacy standards.

Our international data transfer practices are designed to provide a level of data protection consistent with US laws. We do not transfer data to countries identified as lacking adequate data protection standards without implementing additional safeguards. If you have questions about our international data transfer practices, please contact us using the information provided below.

8. Children's Privacy

Our SaaS platform is intended for business and professional use, and it is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA) and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312, 2025 amendments). If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information.

For users located in states with specific age requirements for teens, such as California's restriction on processing the data of consumers under 16 without opt-in consent for sale/sharing, we implement age-gating mechanisms where appropriate. We do not knowingly process the personal information of consumers between the ages of 13 and 16 for targeted advertising or sale without affirmative authorization.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately using the information provided below. We will take immediate steps to delete the information and terminate the child's account. We reserve the right to verify age through reasonable means, including requesting government-issued identification.

Protecting children's privacy is a critical aspect of our compliance program. We regularly review our data collection practices to ensure we are not inadvertently gathering data from minors. Our marketing and advertising partners are contractually prohibited from targeting minors through our platform.

9. Changes to Policy

Omphacite reserves the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological advancements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date at the top of this document.

If we make significant changes to how we process your personal information, we will provide a more prominent notice, such as via email or a notification on the homepage of omphacite.org. We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our SaaS platform following the posting of changes constitutes your acceptance of the updated policy.

We maintain a version history of our Privacy Policies. If you wish to review a previous version of this policy, please contact us using the information provided below. We will retain previous versions in accordance with our record-keeping policies and applicable legal requirements.

Changes to this Privacy Policy do not retroactively affect the collection or use of personal information prior to the effective date of the change. Any disputes arising from previous versions of the policy will be resolved according to the policy in effect at the time the data was collected, unless otherwise required by law.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We have designated a privacy officer to oversee our compliance with US privacy laws and to handle your inquiries.

You can reach us using the following contact details:

  • Company: Omphacite
  • Address: 350 Fifth Avenue, New York, NY 10118, United States
  • Email: [email protected]
  • Phone: +18069624858

For privacy-related requests, such as exercising your right to know, delete, or opt-out, please use the email address provided above and include "Privacy Request" in the subject line. We will respond to your inquiry within the timeframe required by applicable law. For general inquiries about our SaaS platform, please refer to our Terms and Conditions.

By providing your contact information, you consent to us communicating with you regarding your inquiry. We will not use your information provided in a privacy request for marketing purposes. We are committed to resolving your privacy concerns promptly and transparently in accordance with the Federal Trade Commission Act § 5, 15 U.S.C. § 45 (FTC Act — unfair/deceptive practices).