Privacy

Effective date: April 21, 2026

Key Principle: You own your data. We are merely the processor, and you maintain full control.

Data Controller: Voxiven LLC, 1111B S Governors Ave # 44434, Dover, DE 19904, is the data controller responsible for processing your personal data through Omphalis. For data-related inquiries, contact us at hello@omphalis.ai.

1. Overview

Omphalis is a comprehension platform for reading, organizing, searching, and returning to the content you choose to keep. This policy explains how we collect, use, and protect your data in compliance with GDPR, CCPA, and other privacy regulations.

2. What Data We Collect

2.1 Account Information

  • Email address (via Auth0 authentication)
  • Authentication tokens (session management)
  • Login timestamps and IP addresses (security)

2.2 Content & Feeds

  • Feed Subscriptions: RSS/Atom URLs, newsletter subscriptions, podcast feeds, YouTube channel subscriptions
  • Feed Items: Article titles, URLs, publication dates, content (cached for reader mode)
  • Reading Status: Read/unread markers, starred items, bookmarks
  • Organization: Collections, tags
  • Saved Content: Articles, bookmarks, text snippets, images, voice notes, and PDFs saved via web, mobile, or browser extension
  • Search Index: Vector embeddings for semantic search and cross-content connections (derived from your content, not raw text)

2.3 Library Content

  • Text Content: Articles, notes, voice-note transcripts, meeting transcripts, and other text you save or capture
  • Personalization Settings: Listen voice selection, reader preferences, layout choices
  • Generated Audio: Audio files produced by the Listen action from text in your library
  • Metadata: Item titles, creation dates, modification dates, tags, collection assignments

2.4 Browser Extension Data

  • Page URLs and titles of pages you save
  • Selected text snippets you choose to save
  • Extension settings and collection choices

2.5 Technical Data

  • Browser type/version, operating system, screen resolution, device type
  • Access and error logs (anonymized)
  • Analytics: page views, click events, navigation patterns, and feature usage via PostHog and Google Analytics
  • Session recordings: anonymized replays of user interactions to improve usability (text inputs are masked; see Section 4 for details)

2.6 Mobile App Data

  • Device type, operating system version, app version
  • Screen views and navigation patterns
  • Push notification tokens (for delivery only, not shared with third parties)
  • App lifecycle events (open, background, foreground)

2.7 Understanding Profile

To pick better moments for you, Omphalis maintains a small, structured profile derived from how you use your own library:

  • Topics you return to, and, on higher plans, signals about how you read and what you appear to be working toward.
  • This profile holds abstract labels and weights, not the text of what you saved.
  • You can view every entry in this profile in Settings, and delete any of them. Deletion takes effect immediately.
  • This profile is used only to tailor your own experience. It is not sold, and it is not used to build a profile of you for advertising.

3. How We Use Your Data

Legal Basis (GDPR Article 6):

  • Contract Performance: Processing necessary to provide Omphalis's services
  • Legitimate Interest: Security, fraud prevention, service improvement
  • Consent: Optional features (analytics, support chat) and marketing

4. Third-Party Services

  • Auth0: Identity and access management. Data shared: email, auth tokens.
  • Speech synthesis providers: When you use the Listen action, the relevant text is sent temporarily to our synthesis providers for processing only — it is NOT retained by them after conversion.
  • Language-model providers: To structure content, suggest annotations, and produce the other comprehension layers, the relevant content is sent to language-model providers for processing only. It is sent solely to produce your result and is not used by them to train their models. When you connect Omphalis to an outside assistant (for example the ChatGPT app or another client over MCP), the data that flows to that assistant is governed by that assistant's own privacy terms.
  • Google Analytics: Anonymized page views on the marketing site (optional, controlled via cookie banner).
  • PostHog: Product analytics, session replay, and feature flags. Data shared: anonymized user identifier, page views, click events, navigation patterns, device information, and session recordings (with all text inputs masked). Session recordings capture mouse movements, clicks, and scrolls to help us improve usability — form inputs and sensitive fields are automatically masked. Data is routed through our own domain (reverse proxy) and stored on PostHog Cloud US. PostHog Privacy Policy.
  • Sentry: Error tracking and performance monitoring. Data shared: anonymized error reports, browser/device info, and performance traces. No user content is included. Sentry Privacy Policy.

5. Data Storage & Security

  • Application data encrypted at rest
  • Processing via EU-based data centers (GDPR-compliant)
  • HTTPS/TLS encryption in transit
  • Per-user data isolation with random UUIDs

6. Cookies & Local Storage

Omphalis uses cookies and browser local storage for the following purposes:

  • Authentication: Session cookies to keep you signed in (Auth0).
  • Preferences: Theme selection, last visited page, and UI settings stored in local storage.
  • Analytics: PostHog uses a combination of cookies and local storage to track anonymous session data and link it to identified users. Google Analytics uses cookies for page view tracking on the marketing site.

You can clear cookies and local storage at any time through your browser settings. Disabling cookies may affect authentication and personalization features.

7. Your Rights (GDPR & CCPA)

  • Right to Access, Rectification, Erasure, Data Portability
  • Right to Restrict Processing and Object
  • Right to opt out of analytics tracking and session recording
  • CCPA: Right to Know, Delete, Opt-Out of Sale (we do NOT sell data)

Exercise via the GDPR Rights Center in account settings or contact us at hello@omphalis.ai. To opt out of analytics, you can use a browser ad blocker or contact us to disable tracking on your account.

8. Data Retention

Library items, collections, and feed subscriptions are retained until you delete them. Logs are kept for 90 days. Account data is retained until deletion or 2 years of inactivity.

9. Children's Privacy

Omphalis is not intended for children under 13 (or 16 in the EU).

10. International Transfers

Data is primarily processed in the EU. Standard Contractual Clauses are used for any transfers outside the EU.

11. Changes to This Policy

We will notify you of material changes via email or in-app notice. Continued use constitutes acceptance.

12. Contact

For privacy questions: hello@omphalis.ai — please include "Privacy & Data Requests" in the subject. We respond within 30 days.