Privacy Policy

1. About this Privacy Policy

Ommly is a product owned and operated by Omfinite X LLP. Omfinite X LLP (“we”, “us” or “our”) is the legal entity that operates Ommly and processes user and business data as described in this Policy.

• Product: Ommly
• Owner / operator: Omfinite X LLP
• LLPIN: ACZ-7308
• Canonical URL: https://ommly.in/privacy-policy/
• Website: https://ommly.in
• Application: https://app.ommly.in
• Last updated: 25 August 2026

This Policy applies to visitors of ommly.in, people who create or use an Ommly account, authorised users of a customer workspace, and other individuals whose personal data we process when providing Ommly. It should be read together with the Ommly Terms of Service, Cookie & Tracking Policy, Data Rights, Deletion & Integration Disconnect Policy, Data Deletion instructions, Google Business Profile Integration & Data Use Disclosure, and other notices we publish.

If you do not agree with this Policy, you should not use the website or the Ommly services.

2. Our role — processing on behalf of business customers

Depending on the activity, Omfinite X LLP may act as a data fiduciary / data controller, a data processor / service provider, or both.

Ommly data. We act as data fiduciary / controller for personal data we collect about website visitors, prospective customers, account holders and authorised users in order to operate Ommly as a business — for example account registration, billing of Ommly software, support, security, website analytics (where enabled) and our own communications.

Customer data. Customers use Ommly to store and process their own business records. For that Customer data we generally act as a data processor / service provider on the customer’s instructions, except where we must process it to comply with law, protect the service, or enforce our terms.

Ommly is multi-tenant WhatsApp business messaging software. Customers connect their own WhatsApp Business Account (BYO WABA). Customers retain ownership and control of their Meta Business Portfolio, WhatsApp Business Account and WhatsApp business number. Ommly processes authorised access to those assets solely to provide the Ommly software functionality.

Example: if a customer stores their own customer’s phone number in Ommly in order to send a WhatsApp message, that end-customer’s data is Customer data processed for the customer. The business user’s work email used to log in to Ommly is Ommly account data that we control.

Customers are responsible for providing any notices and obtaining any consents required for Customer data they submit to Ommly, including WhatsApp opt-in and other channel consent.

3. Customer-authorised Meta / WhatsApp data

When a customer authorises Ommly to connect to the Meta WhatsApp Business Platform, we process Meta/WhatsApp data on behalf of that business solely to provide the Ommly service. That data may include:

• contacts and phone identifiers the customer stores or syncs for messaging;
• WhatsApp message content and related conversation history stored by Ommly;
• message and delivery status events;
• WABA IDs, phone-number IDs and related account identifiers;
• templates and business configuration needed for inbox, campaigns and automation;
• authorised integration tokens or credentials needed to operate the connection.

We do not sell Meta Platform Data. We do not use Meta Platform Data to build unrelated advertising profiles. Access is limited to personnel and systems that need it to operate, secure and support the service.

4. Personal data we may collect or receive

The personal data we collect depends on how you use Ommly. It may include:

Account and identity data

Name, work email, phone number, login credentials, role, and similar identifiers used to create and administer an Ommly account.

Business and onboarding data

Business name, workspace details, WhatsApp Business Account or phone-number information provided during onboarding, display-name information, and related setup records.

Customer and CRM data

Contacts, tags, custom fields, lead ownership, follow-up dates, conversation outcomes and other CRM records that a customer stores in Ommly.

Communications data

WhatsApp and other channel messages, templates, campaign content, attachments, delivery events and related metadata processed to provide messaging and inbox features.

Connected-platform data

Data received from connected services such as Google Business Profile, the Meta WhatsApp Business Platform and other integrations a customer authorises, including tokens, account identifiers and content the integration is configured to access.

AI feature data

Prompts, drafts, structured extraction results, configuration and knowledge a customer supplies for AI-assisted conversations or review replies, together with the outputs generated for that customer.

Billing and commercial data

Plan, subscription status, invoices, payment references and related commercial correspondence for Ommly software fees. We do not store full payment-card numbers on Ommly systems where a payment provider processes cards on our behalf. Meta WhatsApp Business Platform usage charges are not Ommly software fees.

Usage and technical data

Log data, IP address, device/browser information, timestamps, feature-usage events, error reports and security telemetry needed to operate, secure and improve the service.

Website analytics and advertising data

Cookie and similar identifiers, page views and conversion events, as described in the Cookie & Tracking Policy, where those technologies are enabled.

5. How we collect data

• Directly from you, when you complete forms, create an account, contact us, or use Ommly features.
• From authorised users acting for a customer workspace.
• Automatically, through the website, application logs, cookies and similar technologies.
• From connected platforms a customer authorises, including the Meta WhatsApp Business Platform and, where enabled, Google.
• From service providers who support hosting, email, payments, analytics, security and AI processing under contract.
• From publicly available or customer-supplied business information used for onboarding and support.

6. How we use personal data

We process personal data to provide Ommly, including:

• messaging on a customer’s instructions;
• message templates;
• shared inbox;
• campaigns;
• automation;
• customer support;
• security, abuse prevention and service integrity;
• billing of Ommly software (not Meta message fees).

We also use data to create and administer accounts and workspaces, to maintain authorised integrations, to communicate about the service, to comply with law, and to improve Ommly using aggregated or de-identified information where reasonably possible.

7. Legal grounds and consent

Where Indian law or other applicable law requires a lawful basis, we process personal data as needed to perform a contract with you or the customer, to take steps at your request before a contract, to comply with a legal obligation, or for legitimate interests that are not overridden by the individual’s rights — such as securing the service, preventing fraud and understanding product usage.

Where consent is required (for example certain marketing messages or optional integrations), we will request it and you may withdraw it through the available controls or by contacting us. Withdrawal does not affect processing already carried out. Customers remain responsible for WhatsApp opt-in and other consents for their own Customer data.

8. Google Business Profile integration and Google User Data

This section describes Google User Data practices and operates consistently with the Google APIs Terms of Service.

If a customer connects Google Business Profile to Ommly, we access Google User Data only as authorised by that customer through Google’s OAuth consent flow and only for the scopes requested in production. Typical purposes are to list and manage authorised locations, retrieve reviews and related business-profile content, and publish review replies that the customer has approved.

Ommly does not use Google User Data to serve unrelated advertising, to sell personal data, or to train general-purpose AI models for unrelated purposes. Where AI-assisted review drafting is enabled, Google review content is processed only to generate a draft reply for that customer’s review-management workflow, subject to the Google Business Profile Integration & Data Use Disclosure, including the applicable cache limits described there.

Customers can disconnect Google from Ommly as described in the Data Rights, Deletion & Integration Disconnect Policy. Disconnecting does not delete Google’s own copies of the customer’s Google data.

See also Google Business Profile Integration & Data Use Disclosure.

9. Data sharing and third parties

We share personal data only as needed to operate Ommly, including with:

• the Meta WhatsApp Business Platform, to send and receive messages and related events the customer authorises;
• hosting and infrastructure subprocessors who process data on our instructions to run the Ommly platform;
• email, logging, security and payment providers who process data on our instructions;
• AI processors used solely to provide enabled AI features;
• Google, when a customer connects Google Business Profile;
• professional advisers, auditors and insurers under confidentiality obligations;
• authorities, where required by law or to protect rights and safety;
• a successor in a merger, acquisition or similar corporate transaction, subject to appropriate safeguards.

We do not sell personal data. We do not sell Meta Platform Data. Third-party platforms have their own terms and privacy practices. See the Third-Party Platform & Website Disclaimer.

10. Retention and deletion

Customers control their tenant data in Ommly. Workspace contacts, messages stored by Ommly, users and configuration remain until the customer deletes them or requests account/workspace deletion, subject to platform retention, backups and legal holds.

We retain personal data only for as long as needed for the purposes described in this Policy, unless a longer period is required by law.

• Account and billing data: for the life of the account and a reasonable period afterwards for tax, dispute and audit records.
• Customer workspace data: for the life of the workspace, then deleted or anonymised after account closure according to the Data Deletion instructions, subject to backups and legal holds.
• Google review raw content: cached only as needed for the connected feature and not longer than 30 days, except where a customer-approved published reply or other permitted record must be retained as an Ommly workspace record.
• Logs and security telemetry: for a limited operational period, then aggregated or deleted.
• Website analytics: according to the Cookie & Tracking Policy and provider settings.

Deleting data in Ommly does not delete Meta-side WABA, phone number, template or other Meta records. Those remain under the customer’s Meta Business Suite / WhatsApp Manager controls.

11. International transfers

Ommly and its processors may store or process personal data in India and in other countries where our service providers operate. Where data is transferred internationally, we take steps appropriate to the circumstances so that personal data continues to receive a standard of protection consistent with this Policy and applicable law.

12. Your rights and how to exercise them

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you, object to or restrict certain processing, and withdraw consent where processing is based on consent. You may also raise a complaint with a competent data-protection authority.

If your request concerns Customer data held in a customer’s Ommly workspace, we may redirect you to that customer, who is typically the controller of that data.

To exercise rights relating to Ommly account or website data, contact us at business@omfinitex.com or use the contact form. Further process is described at Data Rights, Deletion & Integration Disconnect and Data Deletion.

13. Privacy & Grievance Contact

Questions, privacy requests and grievances relating to Ommly or the processing of personal data may be submitted to Omfinite X LLP at business@omfinitex.com or through https://ommly.in/contact/. We may request reasonable information to verify the requester and request before acting.

Registered office: Flat 107, Block 3, Navayuga Estates, Navya Nagar, Chandanagar, Ameenpur, Tirumalagiri, Hyderabad, Telangana 500050, India

14. Children

Ommly accounts are intended for adults acting on behalf of businesses and organisations. We do not knowingly permit children to create Ommly business accounts. Business customers remain responsible for ensuring that Customer Data they process through Ommly, including data relating to minors where applicable, is collected and processed lawfully.

15. Security and access controls

We apply administrative, technical and organisational measures designed to protect personal data, including access controls, encryption in transit, logging and tenant separation as described in the Security & Data Protection Policy. Access to Customer data and Meta Platform Data is limited to what is needed to provide, secure and support the service. No method of transmission or storage is completely secure. Customers must also protect their own accounts, devices and authorised-user access.

Omfinite X LLP maintains reasonable incident-response processes and will make notifications where required by applicable law.

16. Changes to this policy

We may update this Privacy Policy from time to time. Where required by applicable law, we will provide appropriate notice and obtain consent where necessary. The “Last updated” date on this page will change when we do.

17. Contact and data requests

For privacy questions or data requests, contact Omfinite X LLP at business@omfinitex.com or via the contact page. Data-rights, deletion and integration-disconnect requests are handled under the Data Rights page at /data-rights/ and the Data Deletion page at /data-deletion/.

Omfinite X LLP
LLPIN: ACZ-7308
Registered Office: Flat 107, Block 3, Navayuga Estates, Navya Nagar, Chandanagar, Ameenpur, Tirumalagiri, Hyderabad, Telangana 500050, India
Business & Compliance Email: business@omfinitex.com
Company Website: https://omfinitex.com
Ommly Website: https://ommly.in
Contact: https://ommly.in/contact/

Last updated: 25 August 2026 · Omfinite X LLP