Legal
Privacy Policy
Last updated: May 20, 2026 · Effective: May 20, 2026
Omnicial ("we", "us", or "our") operates omnicial.phira.tech and the Omnicial multi-platform advertising analytics service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use.
1. Information We Collect
1.1 Information You Provide Directly
We collect information you voluntarily provide when you:
- Create an account (name, email address, password)
- Connect advertising platform accounts via OAuth
- Contact us for support or enquiries
1.2 Advertising Platform Data
When you connect an advertising platform account (such as Google Ads, Meta Ads, TikTok Ads, or others), we access campaign performance data on your behalf via each platform's official API. This data includes:
- Campaign names, budgets, spend, and status
- Performance metrics (impressions, clicks, conversions, ROAS, CPC, CTR)
- Ad creative thumbnails and asset metadata
- Audience, device, and geographic breakdowns
- Account and ad group identifiers
Google Ads API data is accessed solely to display your own advertising performance within your Omnicial dashboard. This data is:
- Used only to provide and improve the Omnicial service to you
- Not sold, shared, or transferred to any third party except as required to deliver the service
- Not used for independent analytics, advertising, or any purpose unrelated to your dashboard
- Subject to the Google API Services User Data Policy, including the Limited Use requirements
You may revoke any platform connection at any time from your account settings or directly through the respective platform's authorization management page.
1.3 Usage and Technical Data
We collect anonymised usage data to improve the Service, including:
- Pages and features visited, session duration
- Browser type, operating system, and device type
- IP address and approximate geographic location
We use Umami Analytics, a cookie-free, privacy-preserving analytics platform. No personally identifiable information is stored by our analytics system.
2. How We Use Your Information
We use collected information to:
- Authenticate your account and maintain your session
- Fetch and display advertising performance data from connected platforms
- Generate AI-powered campaign analysis and insights
- Send transactional emails (account alerts, connection status)
- Detect and prevent abuse, fraud, or unauthorised access
- Improve Service features and performance
- Comply with legal obligations
We do not sell your personal data or advertising data to third parties.
3. Legal Basis for Processing (GDPR)
Where GDPR applies, our legal bases for processing include:
- Contractual necessity — processing required to provide the Service
- Legitimate interests — security, analytics, and service improvement
- Consent — where you have explicitly connected a platform account or opted in to communications
- Legal obligation — where required by applicable law
4. Data Sharing and Disclosure
We may share your data with:
- Infrastructure providers — cloud hosting and database services that store and process data on our behalf under data processing agreements
- AI providers — where you request an AI analysis report, anonymised campaign data is sent to our AI inference provider solely to generate that report
- Legal authorities — where required by law, regulation, or court order
- Business transfers — in the event of a merger, acquisition, or asset sale
We do not share your advertising platform credentials or raw account data with any third party beyond what is described above.
5. Data Retention
Advertising performance data fetched from connected platforms is cached temporarily to improve dashboard load times and is not stored permanently beyond what is necessary to deliver the Service. Account data is retained for the duration of your account and up to 90 days after deletion. You may request immediate deletion at any time.
6. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage for credentials and tokens, and access controls limiting who can access your data. OAuth tokens are stored encrypted and used only to fulfill your requests. We do not store your advertising platform passwords.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Disconnect any advertising platform from your account at any time
- Request export of your data in a portable format
- Object to or restrict certain processing activities
- Lodge a complaint with a supervisory authority
To exercise these rights, email us at hello@phira.tech. We will respond within 30 days.
8. Cookies
Omnicial uses strictly necessary session cookies for authentication. We do not use third-party advertising cookies or tracking pixels. Our analytics (Umami) are cookie-free.
9. Children's Privacy
The Service is not directed to individuals under 16. We do not knowingly collect data from children. Contact us immediately if you believe we have done so.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will revise the "Last updated" date and notify registered users of material changes via email. Continued use of the Service constitutes acceptance.