OMMO Group Privacy Policy

OMMO Group is a product of OMMO Group Company, a Delaware C Corporation (file 10600609) with operating headquarters at Anas ibn Malik, Al Malqa, Riyadh 12311, Saudi Arabia. We comply with the Saudi PDPL and align with GDPR principles where applicable.

Account information (name, email, role), workspace metadata (tenant slug, integrations connected), and the data your connected sources expose to our APIs. We do not sell, rent, or share customer data with third parties for marketing purposes.

When you connect a source, OMMO accesses only the data needed to build your analytics, on a READ-ONLY basis, and never modifies your store, products, orders, campaigns, or content. By platform: Salla, Zid, Shopify and other stores — orders and customers (for revenue, AOV, ROAS, and customer/city insights); Google (Analytics, Ads, YouTube) — Analytics reports, Google Ads campaign performance, and YouTube channel metrics; Meta, Snapchat, TikTok — ad spend and performance; Aramex, SMSA and other carriers — shipment status. We request the minimum scope each platform offers, and where a platform exposes only a broader (write-capable) scope, OMMO still uses it strictly read-only.

OMMO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to display your own analytics inside OMMO; it is never sold, transferred to third parties, or used for advertising, and is not used to train generalized AI/ML models.

To run OMMO Group, present your dashboards and reports, send operational alerts, support your account, and protect every account from unauthorized access. Cookies are used for authentication and the locale/theme toggles only.

Data is stored in tenant-isolated Postgres with row-level security, encrypted at rest. Each tenant has its own data encryption key wrapped under our master KMS key. We host on managed infrastructure in regions matching the customer's compliance needs.

Access, correction, deletion, export, and objection — exercised by emailing privacy@ommoco.com from the email associated with your account. We respond within 30 days. Customers can also self-export from /settings.

Privacy questions: privacy@ommoco.com. Data Protection Officer: dpo@ommoco.com. We respond to every email within five business days.