Privacy Policy

• Email address — for account creation and communication.
• Name — for identification on the platform.
• Phone number — optional, for account recovery and alerts.
• IP address — for security, fraud detection, and analytics.
• Device & browser info — user agent, OS, screen resolution.
• Usage data — requests, endpoints called, tokens consumed, timestamps.
• Payment data — billing records processed via third-party providers; we do not store full card numbers.

• Service delivery — operating your account and fulfilling API requests.
• Billing — invoicing, subscription management, and payment processing.
• Support — resolving tickets and responding to inquiries.
• Analytics — understanding usage patterns to improve the platform.

We process your personal data on the basis of clear, informed consent obtained at the time of account creation and reaffirmed through the consent agreement shown on first login.

You may withdraw consent at any time by emailing support@omegaplusapi.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal. Withdrawing consent for essential service data may result in account closure.

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention duties.
• Grievance — file a grievance with our Grievance Officer.
• Nominate — nominate another individual to exercise your rights in case of death or incapacity.

• Encryption — data encrypted in transit (TLS) and at rest.
• Access control — role-based access with least-privilege principles.
• Audit trails — logged access to sensitive systems, reviewed periodically.

We retain personal data only as long as necessary to fulfill the purposes outlined, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained while your account is active and for a defined period post-closure for legal and audit purposes, after which it is deleted or anonymized.

In the event of a personal data breach, we will notify the Data Protection Board and affected Data Principals within 72 hours of becoming aware of the breach, as required under the DPDP Act 2023. Notification will include the nature of the breach, likely consequences, and remedial measures taken.

We do not knowingly process the personal data of children under 18 years of age. Where processing is undertaken with verifiable parental consent, we process only such data as is necessary for the identified purpose and apply enhanced safeguards.

Grievances may be submitted to our Grievance Officer at support@omegaplusapi.com. We will acknowledge receipt and respond within 90 days of receipt, in accordance with the DPDP Act 2023.

• Essential cookies — authentication and session management.
• Analytics cookies — aggregated usage statistics.
• Preference cookies — remembering your settings.

We may update this Privacy Policy from time to time. Material changes will be notified via email and through an in-platform notice. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

For any questions, requests, or grievances regarding this Privacy Policy, contact us at support@omegaplusapi.com.