Privacy Policy

Last updated: April 13, 2026

1. Introduction

Receipt Roller Inc. ("we", "us", "our") operates OmniCon ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you register
• Profile Information: Company name, phone number, and other details you choose to provide
• Content: Articles, pages, media files, and other content you create or upload
• Contact Inquiries: Name, email, company, phone, and message when you submit our contact form
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service
• Device Information: Browser type, operating system, and device identifiers
• IP Address: Used for analytics, security, and approximate geolocation
• Cookies: We use cookies and similar technologies to maintain sessions and improve the Service

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your account
• Respond to your inquiries and provide customer support
• Send service-related notifications and updates
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Sharing of Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist in operating the Service (e.g., hosting, email delivery, payment processing)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Third-Party Services

The Service integrates with third-party services including:

• Microsoft Azure: Cloud hosting and data storage
• Stripe: Payment processing
• SendGrid: Email delivery
• Google Analytics: Usage analytics
• Google reCAPTCHA: Bot protection

Each third-party service has its own privacy policy governing the use of your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We apply the following retention schedules:

6.1 Account Data

• Unconfirmed accounts (email not verified) are deleted after 7 days
• Inactive accounts (no login for 12 months, or 6 months on the free tier) are first suspended, then deleted after an additional 90-day grace period
• Upon account deletion, personal data is removed and audit references are anonymized

6.2 Content Data

• Active content is retained for the lifetime of your account
• Archived content is retained for up to 365 days (paid plans) or 90 days (free plans), after which it may be permanently deleted
• Content in shared channels created by a deleted user is reassigned to a system account, not deleted

6.3 Analytics and Logs

• Raw page impression records are deleted after 90 days
• Aggregated hourly analytics are deleted after 1 year
• Administrative audit logs are deleted after 3 years

If retention is required by law or for legitimate business purposes (such as fraud prevention), data may be retained beyond these periods.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS/SSL) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Access the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information (GDPR "right to erasure"). Upon request, we will delete your account and associated personal data without delay.
• Restriction: Object to or restrict processing of your information
• Portability: Request a portable export of your data. We provide a downloadable ZIP archive containing your profile, content, media metadata, and organization data.
• Withdrawal: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us.

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will take steps to delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Japan where our servers are located. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us.