Privacy Policy

Most Omni Impact products operate entirely on your device and transmit nothing to us. The exceptions are clearly noted below. The full detail follows in Sections 1 through 14.

Omni Impact LLC is a New York limited liability company. For the purposes of EU and UK data protection law, Omni Impact LLC is the data controller for the information described in this Policy. You can reach our privacy contact at [email protected].

This Policy applies to:

• Our website, omniimpact.net
• The Omni Impact AEO platform and any other hosted products we operate
• Software products we distribute (OmniVox, OmniCue, Kernelmon, vault.oi, Personify, co-review, and others) — but only with respect to information we receive, not information that stays on your device

This Policy does not apply to data that never leaves your device. For local-only and self-hosted products, we are not a data controller because we do not receive your data. The product's source code and architecture demonstrate this.

We use the information described above for the following purposes:

• Provide the services: Operating Omni Impact AEO; analyzing URLs you submit; generating reports; processing payments; managing accounts
• Improve and develop products: Diagnosing technical issues; understanding usage patterns; building new features
• Communicate with you: Service-related messages; responses to support inquiries; transactional emails
• Marketing and updates: Newsletter and product announcements — only with your consent and only where permitted by law. You can opt out at any time.
• Security: Detecting and preventing fraud, abuse, and security threats; protecting our infrastructure
• Legal compliance: Complying with applicable laws, responding to lawful requests, enforcing our terms
• Business operations: Accounting, audit, planning, and similar internal purposes

We do not:

• Sell your personal information to third parties
• Use your content to train general-purpose AI models without explicit consent
• Share your data with advertising networks for targeted advertising on third-party sites

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide you with the services you've requested
• Legitimate interests: Improving our products, ensuring security, conducting normal business operations, and direct marketing of similar products to existing customers — provided your interests do not override ours
• Consent: Where you have explicitly opted in, such as for marketing emails or non-essential cookies
• Legal obligation: Compliance with applicable law

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect from unauthorized access, disclosure, alteration, or destruction. These safeguards include encryption in transit, access controls, secure infrastructure providers, and operational security practices.

No security measure is perfect. We cannot guarantee absolute security. Please use a strong, unique password for your account and notify us promptly if you suspect unauthorized access.

For vault.oi specifically: because vault.oi is self-hosted, security is your responsibility once you install and operate it. We have no access to your data and cannot recover it for you. We strongly recommend reviewing the source code and security architecture before storing real secrets.

We retain personal information only as long as necessary for the purposes described in this Policy, including:

• Account information: until you delete your account, plus any period for which we must keep records for legal, tax, audit, or dispute-resolution purposes
• Content and results in Omni Impact AEO: the URLs, prompts, and settings you submit, and the results we produce from them (such as AI answers, source URLs, analyses, and crawl results), until you delete them or your account. The full text of the AI answers listed under Runs for each prompt is set to be removed once a run and its analysis are more than 90 days old, unless the answer is kept as evidence in a saved measurement result; the scores, brand-mention counts and source URLs measured from an answer are kept with your other content until you delete them or your account. Content created in a shared organization workspace stays with that workspace for its other members
• Share of Voice data: raw measurement records are set to expire after 120 days and raw brand-mention records after 90 days; summary figures calculated from them are kept with your other content
• Stored reports: PDF reports we store for you are set to expire 180 days after they are generated
• Google Analytics data: synced data until you disconnect Google Analytics or delete your account; figures already copied into reports or saved measurement results stay with them (see Section 3.5)
• Readiness Check: if you give us your email address to download a Readiness Check report, we keep it until you ask us to delete it
• Communications: for as long as needed to address your inquiries and maintain a record
• Billing records: as required by applicable tax and accounting law

Deleted information may remain for a limited time in backups and logs kept by our infrastructure providers. After the retention period ends, we will delete or anonymize the information, unless required to retain it longer by law.

We use cookies and similar technologies on our websites and hosted products. Cookie types include:

• Strictly necessary cookies: Required for the service to function (e.g., authentication tokens, security)
• Functional cookies: Remember your preferences (language, display settings)
• Analytics cookies: Set by Google Analytics on omniimpact.net to help us understand how visitors use the site
• No advertising cookies: We do not run third-party ad networks on our properties

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent core features from working. You can also opt out of Google Analytics with Google’s opt-out browser add-on.

Our products are not directed to children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact [email protected] and we will delete it.

Omni Impact LLC is based in the United States. If you access our services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate (see our Sub-processors page). These jurisdictions may have data protection laws different from those in your country.

If you have questions about the international transfer of your personal data, contact [email protected].

We may update this Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Provide a more prominent notice (such as an email or in-product banner) for material changes affecting your rights

Your continued use of our products after the changes take effect constitutes your acceptance of the updated Policy.

If you have questions about this Privacy Policy or our data practices, contact us:

For EEA/UK residents, you also have the right to lodge a complaint with your local data protection supervisory authority.