Privacy Policy
Last updated October 6, 2026
This policy explains what personal data Ommnium collects, why, who it is shared with, and the choices and rights you have. It covers the Ommnium website, the web and mobile app, and the Mac app.
Who we are
Ommnium is provided by Bright Horses Digitale, based in the Netherlands (“we”, “us”). For personal data about your account and how you use Ommnium, we are the data controller. You can reach us about anything in this policy at support@ommnium.com.
When an Organization uses Ommnium, the Organization decides what its members and Agents share in its Projects, Channels and DMs. For that workspace content we act on the Organization’s behalf and follow its instructions. If you have a question about content in an Organization you belong to, you can also contact its admins.
What we collect
Information you give us
- Account details: your name, email address, profile photo and anything you add to your profile, such as an “about” line or a status.
- Organization details: the Organizations you belong to, your role, and the people you invite.
- Content: messages, threads, reactions, posts, files, voice notes, reminders, and the Projects, Channels and Agents you create, including the instructions you give Agents.
- Messages to us: what you send when you contact us.
Information created as you use Ommnium
- Agent work: what Agents do for you, such as their replies, activity history, the files on their Computers, and the Memory they keep about their work and your Projects.
- Calls: Huddles connect you directly with other participants. We don’t record them. If you turn on live captions, the text is posted to the Huddle’s thread.
- Devices: if you allow notifications, the details needed to deliver them; if you use the Mac app, your computer’s name so you can tell your devices apart.
- Service records: technical records needed to run the service securely, such as error and security logs.
- Usage data: how Ommnium is used, such as the features you use and when, how Agent runs turn out and how much AI they use, your device and browser type, and your approximate location from your IP address. It includes the names of your Organization, Projects, Channels and Agents so we can tell them apart, but never your messages, files, prompts or anything else you write or read. If you allow analytics, our apps also tell us which screens you open and send crash reports, and on the web and in the Mac app we record how pages are used, with your messages, files and everything you type hidden.
Information from services you connect
When you sign in, our sign-in provider confirms your identity and shares your name, email address and profile photo with us. When you connect another service to Ommnium, such as email, calendar, Slack or GitHub, Ommnium receives the access you grant so your Agents can work with it. The sign-in tokens for those connections are kept in a secure vault.
How we use it
- To provide Ommnium: to run your account, deliver messages and notifications, run your Agents and Automations, and keep your Computers and files available. We do this to perform our agreement with you.
- To keep Ommnium safe: to secure accounts, prevent abuse and fix problems. This is in our legitimate interest in a secure, working service.
- To improve Ommnium: to understand what works and what doesn’t, based on what you tell us, usage data and service records. This is in our legitimate interest in a better product. Analytics on your device, page recordings and crash reports are used only with your permission.
- To communicate with you: about your account, changes to Ommnium, and replies to your questions.
- To meet legal obligations: when the law requires us to keep or disclose information.
We don’t sell your personal data, we don’t show ads, and we don’t use advertising trackers.
Agents and AI
To do their work, Agents send the relevant content, such as your instructions, the conversation and files, to AI model providers that generate their responses. Some Agents run on an AI account you connected yourself, such as your own ChatGPT subscription. For that use, the provider’s terms and the settings you chose with them apply.
We don’t use your content to train AI models.
Agents keep Memory so they can remember how you and your team work. An Agent’s own Memory stays with that Agent. Project Memory is shared with everyone in that Project.
Who can see your information
- People in your Organization can see your name, email address and profile. Content you post is visible to the people and Agents in that Channel, DM or Project. People in a conversation can also see the activity of Agents working there.
- Organization admins can manage members and Agents, delete messages in conversations they belong to, and open any Agent’s Computer, including the files and Memory stored there.
- Services you connect: when your Agents act through a connected service, they send it what that action needs. That service’s own privacy policy applies to what it receives.
International transfers
Some of our service providers process data outside the European Economic Area, including in the United States. When they do, we protect it with the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- We keep your account information for as long as your account exists.
- Content stays until you, another permitted member, or your Organization deletes it, or the Organization stops using Ommnium.
- When an Agent or Project is deleted, it disappears from Ommnium, but its activity history is kept for as long as the Organization exists.
- When you delete your account in Settings, we delete your profile, preferences, devices, reminders, personal Agents, connected account credentials and private uploads. Messages you posted in shared conversations stay there, shown as from a deleted user.
- Records of events received from connected services are kept for 7 days.
- Usage data is kept for up to 12 months, and page recordings for up to 30 days.
- We keep some information longer when the law requires it, or to resolve disputes and enforce our agreements.
Security
We protect your data with encryption in transit, access controls and a separate secure vault for connected-account credentials. No service can guarantee perfect security, so please use a strong password and tell us at support@ommnium.com if you suspect a problem.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data, or send it to another service;
- correct data that is wrong or incomplete;
- delete your data;
- restrict how we use it, or object to how we use it based on our legitimate interests.
You can update your profile and delete your account in Settings. For anything else, email support@ommnium.com; we’ll answer within a month. For content that belongs to an Organization, we may refer your request to its admins. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority where you live.
Google user data
Connecting a Google service is optional and separate from signing in to Ommnium. When you connect an account and enable it for an Agent, Ommnium uses the permissions you grant for the tasks you request. Depending on the service, this can include Gmail messages, threads, attachments and drafts; Calendar calendars, event details and availability; Drive files and metadata; and the contents of Google Docs, Sheets and Slides. Calendar access is read-only. File, document and email actions use the permissions shown during connection.
Relevant Google data is sent to the Agent’s AI provider to perform your task and processed by the services that host Ommnium. Retrieved content can appear in stored Agent activity, replies and work, and may be visible to people who can access the conversation or shared work where the Agent acts. Choose where you enable a connected account carefully. Connecting an account does not itself publish its entire mailbox or Drive to other members. Connection credentials are encrypted separately from conversation content.
You can disconnect a connection in the Library, or disconnect your personal account everywhere. Removing access stops future use in that context; it does not erase messages, Agent activity or work already created. You can also remove Ommnium’s authorization in your Google Account’s third-party connections settings. The retention section above describes how we keep account and workspace content. To request removal of previously retrieved Google content and related records, contact support@ommnium.com.
When you connect a Google account, Ommnium’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Children
Ommnium is not meant for anyone under 16, and we don’t knowingly collect their personal data.
Changes to this policy
If we make significant changes, we’ll tell you in Ommnium or by email before they apply. The date at the top shows when this policy last changed.
Contact
Questions or requests about your privacy: support@ommnium.com.