Who processes the data?
OMO is the trading name of the platform. In a specific service, the data processor and data controller are determined by the order, the service agreement and the configuration of the user organization. The legal entity specified in the settlement document is the service provider.
What data can be processed
- Account data: first name, last name, e-mail, phone number and technical records of authorization
- Organization data: name, identification number, address and billing information
- Phone data: numbers, call time, duration, status and technical metadata
- Voice data: audio, transcript, details of what the user said and the result of the conversation process — only within the scope of the enabled functions and the agreed process
- Service usage data: configuration changes, security events, diagnostics and support correspondence
What we use the data for
- Create and secure an account and workspace
- Accept or make a call and perform the selected conversation process
- Create a booking, callback, survey result or call route
- Billing, invoicing and OMO credit accounting
- Troubleshooting, security, support and service improvement
- Fulfillment of obligations imposed by law or contract
Legal basis for processing
The basis for processing may be the performance of a contract, a statutory obligation, express consent or a relevant legitimate interest. The user organization is responsible for properly informing the participants of the call and determining the legal basis on which it processes data in its telephone process.
To whom the data may be transferred
Data may be processed with trusted providers of infrastructure, telephony, voice recognition and synthesis, email, payment and monitoring only to the extent necessary to provide the service. The workspace administrator also decides which CRM, calendar or webhook to send a particular result to.
save and delete
Data is stored in accordance with the purpose of the service, the configuration of the workspace, the agreement and the applicable legal requirements. The storage period of audio and transcript can be determined separately by the organization. After the expiration date, the data is destroyed or anonymized, except for the part that is necessary to keep for the defense of a legal claim or dispute.
your rights
- Request information and access to your data
- Request correction of inaccurate data
- In cases provided by law, request deletion, restriction or termination of processing
- Withdraw consent to processing based on consent
- Contact the appropriate supervisory authority
Security and contact
We use separation of workspaces, role-based access, encrypted connection, separate storage of secrets, audit events and the principle of least access. Send us a privacy request using the secure contact form. We may need to verify your identity and connection to the request before responding.