Privacy Policy

This Privacy Policy explains how Omni Systems (“Omni”, “we”, “us”) collects, uses, and protects information in connection with our website at omni-systems.ai and our software product Loki, an operating system for video and social-content agencies (the “Service”).

Who this applies to

Loki is used by agencies and the clients those agencies invite. An agency administers its own workspace and the data within it. Where an agency uses Loki to process information about its own clients and end users, the agency is the controller of that data and Omni acts as its processor.

Information we collect

• Account information you provide, such as your name, email address, and agency details.
• Content you enter into the Service, such as clients, videos, reports, messages, settings, and performance metrics.
• Usage and device data, such as log data and cookies strictly necessary to keep you signed in and to operate the Service securely.

Google user data

Loki offers optional Google integrations. If you choose to connect your Google account, we ask only for the narrowest scopes needed for the features you enable:

• Google Drive (drive.file): to create and manage only the folders and files that Loki itself creates on your behalf, such as a per-client folder structure for your videos and assets. Loki cannot see or access other files in your Drive.
• Google Calendar (calendar.events): to create and manage calendar events Loki schedules on your behalf, such as shoot days and posting dates for assigned work.

We use this access solely to provide those features inside Loki, at your direction. The tokens that authorize this access are stored securely and are accessible only to the server components that perform the action; they are never exposed to other agencies or to your clients. You can disconnect Google at any time from your settings, which revokes Loki’s access, and you can also revoke access from your Google Account’s security settings.

Limited Use of Google user data

Loki’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where required for security, to comply with applicable law, or with your explicit consent.

How we use information

We use information to provide, secure, and improve the Service, to authenticate you, to perform the actions you initiate (including the Google integrations above), to send transactional messages, and to provide support. We do not sell personal information.

Service providers

We rely on a small number of infrastructure providers to run the Service, including Supabase (database and authentication), Vercel (hosting), Google (the integrations above), and Resend (transactional email). These providers process data only to provide their service to us and under their own terms and security commitments.

Data retention and your choices

We retain information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can request access to, correction of, or deletion of your information, and you can disconnect the Google integration at any time. To make a request, contact us at the address below.

Security

We protect data with industry-standard measures, including encryption in transit, row-level access controls that isolate each agency’s data, and storing sensitive credentials in server-only locations that are never reachable by the browser or by other tenants.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data can be sent to [email protected].