How data is handled, protected, and deleted — clearly and responsibly.

How Omnito handles personal data responsibly as both a controller and a processor, in line with recognized privacy standards and applicable international privacy laws.

Data you enter into our software

When you and your customers enter data into Omnito, you act as the data controller. You decide what data is collected, who it is collected from, and how it is used. You are responsible for complying with the privacy laws that apply to you and your customers in relation to this data.

Omnito acts as a data processor for this information. We process the data on your behalf and only under your instructions, as defined in our Master Services Agreement. That agreement contractually requires us to protect your data, limit processing to approved purposes, and apply security and privacy safeguards aligned with recognized privacy standards and applicable international regulations.

We comply with all relevant privacy laws in our role as a processor, including requirements that apply to customers in the United States, Canada, Europe, and Australia.

Data we collect from you

Omnito acts as a data controller for certain information we collect for our own business purposes. This data is collected when:

Our products undergo regular automated and manual vulnerability testing before and after release to maintain a strong security posture.

  • You create or sign in to an Omnito account, or purchase our services
  • You visit our website, interact with a chatbot, register for an Omnito event, or request information
  • You communicate with our Sales or Customer Success teams
  • We obtain information from publicly available sources

We collect only the data necessary to operate our business and support our relationship with you. How this data is processed, the purposes for which it is used, and the rights you have in relation to it are described in our Privacy Notice.

All such data is handled in accordance with U.S.-based privacy standards, with additional protections applied where required by applicable international laws, including those in Canada, Europe, and Australia.

How long do we keep your data?

We retain and delete data based on clear, documented schedules designed to meet operational needs, legal obligations, and privacy requirements. Retention periods vary by account type and data category, and deletions are applied to both production and backup systems.

Basic account (free account) data deletion

Event or Data TypeDate of deletion from our servers
You delete your accountData is deleted from production servers after 31 days. Data is deleted from backup systems after a further 14 days.
After 180 days of inactivityData is deleted from production servers after 195 days of inactivity. Data is deleted from backup systems after a further 14 days.
Meeting dataMeeting data in a Basic (free) account is deleted from production databases 42 days after the meeting date, and deleted from backup systems after a further 14 days.
You actively delete Application DataData is immediately deleted from production servers. Data is deleted from backup systems after a further 14 days.

Trial account data deletion

Retention and deletion for trial accounts follow a defined timeline to give you time to convert, downgrade, or delete your account.

EventLog in allowed forDeletion timeframe
No account selection made at the end of a 14-day trial periodFor the next 30 days, you have a restricted login that allows you to purchase a paid account, downgrade to a Basic (free) account, or delete your account.After this 30-day grace period, data is deleted from production servers after 15 days. Data is deleted from backup systems after a further 14 days.
You delete your trial accountYou are no longer able to log in to your account.Data is deleted from production servers after 31 days. Data is deleted from backup systems after a further 14 days.

Paid account data deletion

Retention and deletion for paid accounts are designed to give customers flexibility to reactivate service while ensuring data is removed in a predictable and secure manner.

Event or Data TypeLog in allowed forDeletion timeframe
You cancel your subscriptionYou may use your account until the end of your current subscription period. A 30-day grace period follows with restricted login that allows subscription reactivation.After the 30-day grace period, data is deleted from production servers after 15 days. Data is deleted from backup systems after a further 14 days.
You delete payment card details on an active accountN/APayment card data is deleted immediately from production databases. Data is deleted from backup systems after a further 14 days.
Payment failure0–7 days: Full access. 8–30 days: Restricted login for payment updates only. Guest-facing interfaces are disabled.After the 30-day grace period, data is deleted from production servers after 15 days. Data is deleted from backup systems after a further 14 days.
You delete Application Data in your active accountN/AData is immediately deleted from production servers. Data is deleted from backup systems after a further 14 days.

Deletion of other data types held by Omnito

Certain data types are retained only for as long as necessary to meet legal, operational, or support-related requirements.

Data TypeDeletion timeframe
Communications with Omnito Sales, Customer Support, and Privacy teams (including live chat transcripts, emails, and support tickets)Retained only for the period necessary to fulfill support, quality assurance, training, and service improvement purposes. Access is restricted to authorized personnel on a strict need-to-know basis. For additional details, refer to our Privacy Notice.
Sales and billing recordsRetained as required for accounting, tax, and audit purposes, in accordance with applicable laws and regulations.
Marketing contact informationDeleted from our marketing systems when you unsubscribe or opt out of marketing communications.
Cookies and tracking technologiesRetention depends on the specific cookie or tracking technology and your preferences. Full details are available in our Cookie Notice.