This page is a technical draft based on the app's actual data flows. It has not been reviewed by legal counsel and should not be published as-is — company details, retention periods, and international-transfer language still need to be filled in and confirmed with a lawyer.
This Privacy Policy explains what personal data OMD Manager collects, why, and what rights you have over it.
[Company legal name], [registered address], NIP [ ], contact: [email]. OMD Manager is a project, employee, and materials management SaaS product.
Account data (name, email, username, profile picture), authentication data, the business data you create in the app (firms, projects, employees, materials, cost entries), technical/session data (IP address, browser and device information), and billing data (handled by our payment processor — we never store your card details).
To provide and maintain the service, authenticate you, process subscription payments, respond to support requests, and comply with our legal obligations.
Performance of a contract (Art. 6(1)(b) GDPR) for your account and the service itself; your consent (Art. 6(1)(a)) for optional cookies; and our legitimate interest (Art. 6(1)(f)) in keeping the service secure.
Google (if you sign in with Google), our payment processor Polar.sh (subscription billing), our transactional email provider, and a VAT-verification API (to validate business VAT numbers you enter). [List of signed Data Processing Agreements to be added.]
[To be confirmed: some of the providers above may process data outside the EEA. Safeguards such as Standard Contractual Clauses will be listed here once confirmed.]
[Retention periods per data type to be defined — see the internal data-retention policy once written.]
You can access, correct, delete, restrict, or export your data, object to processing, and withdraw consent at any time from Account Settings or by contacting us. You may also lodge a complaint with the Polish data protection authority (Prezes UODO).
See our Cookie Policy for details on the cookies we use.
[Description of technical and organizational security measures to be added.]
We will update this page if how we process your data changes.
[Company contact details / Data Protection Officer, if applicable, to be added here.]