OmniOcto
Privacy Policy
Last updated: July 20, 2026
This Privacy Policy explains how Seasalt AI, Inc. ("Seasalt AI", "we", "us") collects, uses, and shares information in connection with OmniOcto (the "Service"). It applies to visitors of this website and to users of the Service.
Controller vs. processor. For account and website data, we act as the data controller. For the data our customers process through the Service about their own contacts and end users ("Customer Content"), the customer is the controller and we act as a processor on their behalf, subject to our Data Processing Addendum (DPA).
1. Information we collect
- Account data — name, email, organization, and authentication identifiers (we support sign-in via Google, Microsoft, and email).
- Billing data — plan, usage, and payment metadata processed by our payment provider (we do not store full card numbers).
- Usage and device data — log data, IP address, browser and device information, and product analytics.
- Customer Content — the agents, prompts, knowledge-base files, messages, contacts, call recordings, transcripts, and other data you submit or that your end users provide when interacting with your agents.
2. How we use information
- to provide, operate, secure, and improve the Service;
- to process AI requests and generate agent responses and actions;
- to bill for usage and prevent fraud and abuse;
- to communicate with you about the Service;
- to comply with law and enforce our terms.
We do not sell personal information, and we do not use Customer Content to train foundation models. Our AI sub-processors are contractually restricted from using data sent through their APIs to train their models.
3. AI processing and sub-processors
To deliver the Service we share the minimum necessary data with the following categories of sub-processors. This list may change; we will keep it current.
| Provider | Purpose |
|---|---|
| OpenAI; Anthropic; Google (Gemini) | AI language models for agent responses and reasoning |
| Deepgram; ElevenLabs | Speech-to-text and text-to-speech for voice agents |
| Twilio; LiveKit | Telephony, SIP, and real-time voice transport |
| Google (Gmail/Workspace); Microsoft (Graph) | Email channel integration, at your direction |
| Meta Platforms | Messenger, Instagram, and WhatsApp messaging channels, at your direction |
| Resend; SendGrid | Transactional and outbound email delivery |
| Stripe | Payment processing and billing |
| Supabase | Database, authentication, and file storage |
| Hetzner | Cloud infrastructure hosting |
| Sentry; Axiom | Error monitoring and operational logging |
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain cookies), and compliance with legal obligations.
5. Sharing
We share information with sub-processors as described above, with professional advisors, in connection with a corporate transaction, and where required by law or to protect rights and safety. We do not sell your personal information.
6. Retention
We retain account data for as long as your account is active and as needed for legitimate business and legal purposes. Customer Content is retained per your configuration and our data-retention settings (for example, call recordings are subject to a limited retention window). You can request deletion as described below.
7. Security
We use technical and organizational measures including encryption in transit, encryption of sensitive credentials at rest, access controls, and tenant isolation. No method of transmission or storage is completely secure, but we work to protect your information.
8. International transfers
We and our sub-processors may process data in the United States and other countries. Where required, we use appropriate safeguards such as the Standard Contractual Clauses for cross-border transfers.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Account holders can export or delete workspace data, or request it from us. Where we act as a processor, we will refer end-user requests to the relevant customer (controller). To exercise your rights, contact agent@omniocto.com.
10. Cookies and analytics
This website uses cookies and similar technologies (including Google Tag Manager) for functionality and analytics. You can control cookies through your browser settings.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
12. Changes
We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.
13. Contact
Seasalt AI, Inc. — questions about this Policy or your data: agent@omniocto.com. Our Data Processing Addendum is available on request.