Privacy Policy

Effective Date: September 28, 2026 ยท Last Updated: September 2026

1. Overview & Commitment

Omni SDR ("we", "our", or "us"), operating at omnisdr.com, is committed to safeguarding the privacy and security of your personal data. This Privacy Policy details how we collect, process, store, and protect information when you visit our website, join our early-access waitlist, or use our enterprise AI SDR platform services.

2. Information We Collect

  • Contact & Account Data: Name, professional email address, company name, phone number, and business location provided when requesting early access or registering an account.
  • Outreach & Evidence Data: Public digital footprint data and business signals gathered strictly on behalf of customers for verifiable outbound engagement.
  • Technical Telemetry: Anonymized browser metadata, IP addresses, session timestamps, and device headers used exclusively for rate limiting, bot protection, and security auditing.

3. AI Processing & Foundation Models

Omni SDR is engineered with a strict Zero-Training Enterprise Guarantee:

  • Customer data, prospect information, and message drafts processed through our AI gateway are never used to train, retrain, or improve foundational commercial AI models (Google Vertex AI / Gemini).
  • All generative tasks run within private, enterprise-tier Google Cloud boundaries governed by SOC 2, ISO 27001, and HIPAA-compliant data agreements.

4. Data Storage & Multi-Tenant Isolation

We deploy modern defense-in-depth data architecture:

  • Storage: Assets and records are encrypted at rest with AES-256 via Google Cloud Storage and private Cloud SQL PostgreSQL instances.
  • Tenant Isolation: Data boundaries are cryptographically enforced at the database level using Postgres Row-Level Security (RLS). Cross-tenant queries are structurally refused by database triggers.
  • Edge Shielding: All internet traffic terminates via Cloudflare edge networks with strict TLS 1.3 encryption and automated DDoS mitigation.

5. Sharing & Disclosures

We never sell, rent, or monetize your personal information. Data is shared strictly with essential infrastructure sub-processors under confidentiality obligations:

  • Cloud Infrastructure: Google Cloud Platform (Compute, Storage, Database)
  • Security & Network: Cloudflare (Edge DNS, WAF, Workers)
  • Billing: Stripe (PCI-DSS Level 1 payment processing)

6. Your Rights (GDPR & CCPA/CPRA)

You maintain the right to access, rectify, port, or request permanent deletion of your personal data at any time. To exercise your rights or request removal from our waitlist or databases, email us at privacy@omnisdr.com. We respond to all verified requests within 30 days.

7. Contact Information

For inquiries regarding this policy or data practices, contact:

Omni SDR Legal & Privacy Operations
Website: https://omnisdr.com
Email: privacy@omnisdr.com