GDPR Compliance

Omnimix is committed to protecting the privacy rights of users in the European Union and European Economic Area under the General Data Protection Regulation (GDPR).

Last updated: December 24, 2025

🇪🇺 Your Rights Under GDPR

Right to access your personal data

Right to rectify inaccurate data

Right to erasure ('right to be forgotten')

Right to data portability

Right to object to processing

Right to withdraw consent at any time

Data Controller

Omnimix acts as the data controller for personal data collected through our service. This means we determine why and how your personal data is processed. For any GDPR-related inquiries, you can contact our Data Protection team through our Contact page.

Legal Basis for Processing

Contract Performance

We process your email and account data to provide the Omnimix service as agreed in our Terms of Service.

Legitimate Interests

We process usage data for service improvement, security, and fraud prevention.

Consent

We only use analytics cookies if you provide consent through our cookie banner.

Exercising Your Rights

Right to Access

Request a copy of all personal data we hold about you. We will respond within 30 days.

Right to Rectification

Update or correct inaccurate personal data. You can update your email from account settings.

Right to Erasure

Request deletion of your account and all associated data. Contact us to initiate account deletion.

Right to Data Portability

Receive your data in a machine-readable format (JSON) to transfer to another service.

International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA, including the United States, where our service providers (Vercel, Supabase, AI providers) are located. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Retention

We retain your personal data only as long as necessary:

Account data: Until you delete your account
Usage logs: 30 days
Billing records: 7 years (legal requirement)
Prompts/outputs: Not permanently stored

📧 Contact Our Data Protection Team

To exercise any of your GDPR rights or for questions about how we handle your data, please contact us. We aim to respond to all requests within 30 days.

Contact Data Protection Team