Privacy Policy

1. Information We Collect

We collect information that you provide directly, information that is generated automatically when you use the service, and information obtained from third parties that you authorize.

• Account and profile data: name, email address, avatar, and tenant membership details stored in Supabase.
• Operational data: WhatsApp Business templates, message logs, automation flows, and usage metrics necessary to deliver core functionality.
• Integration tokens: OAuth tokens, access keys, and webhook secrets required to connect external services such as Meta, Supabase, or billing partners.
• Device & analytics data: anonymized diagnostics, browser metadata, and performance logs used to secure and improve the platform.

2. How We Use Information

We process collected data to:

• Authenticate users, manage tenants, and enforce role-based access control.
• Deliver WhatsApp Business messaging, workflows, and analytics features.
• Monitor reliability, detect abuse, and secure integrations via auditing and alerts.
• Provide customer support, onboarding assistance, and product updates.
• Comply with contractual, legal, and regulatory obligations.

3. Data Sharing and Transfers

We do not sell personal data. We may share information with vetted subprocessors who perform services on our behalf, such as hosting (Vercel), database and authentication (Supabase), analytics, billing, or Meta Business integrations. These providers are contractually obligated to protect your information and only use it for the purposes we specify.

Data may be transferred outside of your jurisdiction and stored in regions where our infrastructure providers operate. We rely on appropriate safeguards, including contractual clauses, to protect your rights.

4. Data Retention

We retain personal information for as long as needed to provide the service, satisfy compliance requirements, and resolve disputes. Tenant administrators may request data export or deletion at any time. Logs and backups are purged on a scheduled basis according to our retention policies.

5. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. You can manage most account data directly within the app. For other requests, contact us using the details below. We will respond within the timelines required by applicable law.

6. Security

We implement technical and organizational measures including encrypted transport (HTTPS), row level security in Supabase, scoped service keys, role-based permissions, and continuous monitoring. However, no system is fully secure, so please notify us immediately if you suspect unauthorized access.

7. Children's Privacy

Omberu Admin is not directed to individuals under 18 years of age and we do not knowingly collect information from children. If you believe a minor has provided personal data, contact us so we can delete the information.

8. Changes to This Policy

We may update this policy to reflect product improvements or regulatory changes. When we make material updates we will notify tenant administrators via email or in-app messaging. The revised policy will become effective on the date it is posted.

9. Contact Us

For privacy questions or data subject requests, reach out to our support team:

• Email: privacy@omberu.com
• Support portal: https://support.omberu.com
• Postal: Omberu Admin Privacy, 123 Innovation Way, Istanbul, TR