Privacy Policy

Last Updated: 13-10-2026

This Privacy Policy explains how OmniForge VOF ("we", "us", "our") handles personal data across:

our public website and company interactions
OmniForge Desktop, which is designed around local, on-device processing

This policy covers how we handle data in our desktop product and website interactions.

1. Who We Are

OmniForge VOF
Registered in the Netherlands
KvK Number: 98113747
Website: https://omniforge.online
Contact: contact@omniforge.online

2. Quick Guide

If you are...	Read this section...
Downloading, installing, or using OmniForge Desktop for local on-device workflows	Desktop Privacy
Browsing our website, submitting a contact form, subscribing to the newsletter, or reviewing our legal pages	Website & company interactions below

3. Website & Company Interactions

When you interact with our public website or with OmniForge as a company, we may process:

contact details you submit through forms or email
newsletter subscription details, where you opt in
cookie consent choices
website analytics data, where analytics cookies are enabled with consent
account identifiers, contact details, and authentication records for account access
subscription, billing, and invoice details for commercial communications or transactions
organization membership and SSO configuration where business customers use account administration
support and business correspondence

We use this data to operate the website, respond to requests, send newsletters you asked for, manage consent, provide account and subscription administration, process billing, and comply with legal obligations.

If you accept marketing cookies, we use Meta Pixel and Conversions API to measure website visits, installer requests, download-link emails, and account creation. For a download-link email, this may include advertising identifiers and a hashed version of your email address so that a later registration can be matched to the handoff. A hashed email address is still personal data.

We store a consent identifier in your browser to coordinate advertising consent across tabs. It contains no email address or meeting content. Withdrawn consent receipts expire after seven days.

We keep consented handoff attribution on our servers for up to seven days after your latest download-link request and remove event details after successful delivery. You can withdraw marketing-cookie consent through the Cookie Policy. Newsletter consent is a separate choice. This advertising measurement does not include your recordings, transcripts, documents, or anonymous desktop activation telemetry.

4. Website-Related Third Parties

Our website and general company operations may involve the following providers:

Amazon Web Services (AWS) - site and infrastructure hosting. Privacy Policy
Cloudflare - DNS, CDN, website security, and performance services. Privacy Policy
Stripe - payment processing and limited billing/customer data handling. Privacy Policy
Resend - transactional and notification email delivery. Privacy Policy
Google Workspace - business communications and support. Privacy Policy
Google Analytics - website analytics, only after consent where required. Privacy Policy
Meta - optional advertising measurement through Meta Pixel and Conversions API, after marketing-cookie consent. Privacy Policy
Cookiebot (Usercentrics A/S) - cookie consent management. Privacy Policy

For more details about these providers, see our Sub-Processor Policy.

5. Desktop Privacy

OmniForge Desktop is a local-first desktop application. Its core document, recording, transcription, search, and AI workspace functionality runs on your Mac or Windows computer.

For core local desktop use, we do not upload the contents of your files, recordings, transcripts, prompts, or outputs to OmniForge servers.

5.1 What Stays Local

For core desktop workflows, the following stays on your device:

documents, recordings, transcripts, prompts, outputs, and local indexes
local AI inference used by the desktop app
recordings and transcriptions created in the app

5.2 What Can Leave Your Device

Even though the desktop app is local-first, some limited desktop-related activity can still involve network requests or information reaching our systems or trusted providers:

downloading the installer
checking for or downloading application updates
downloading local AI model files
contacting support or sending us information yourself
processing billing or invoicing if you purchase paid desktop features or related services
sending optional, opt-in anonymized product telemetry, if that feature is enabled in the desktop app
using an optional cloud-connected feature, if you explicitly choose to use one

5.3 Desktop Data We Process

Data Type	Purpose	Typical Legal Basis
Installer/download request data, IP address, and basic device/network metadata	Delivering the installer, preventing abuse, and maintaining service security	Legitimate interest
Update and model-download request data	Delivering desktop updates, local AI model files, and securing distribution infrastructure	Contractual necessity / legitimate interest
Support and contact information (for example email address and message content)	Responding to support, troubleshooting, and customer communications	Contractual necessity / legitimate interest
Optional anonymized desktop telemetry, if enabled by you	Improving the desktop product, diagnosing issues, and understanding product usage at an aggregate level	Consent
Billing and invoice data, if you purchase paid desktop features or related services	Payment processing, invoicing, accounting, fraud prevention, and legal compliance	Contractual necessity / legal obligation

For clarity:

the contents of files, recordings, transcripts, prompts, and outputs used in core desktop workflows stay on your device
if desktop telemetry is enabled, it contains anonymized usage data only and does not include file contents, recording contents, prompts, or outputs
if you intentionally share information with us, such as in a support request or optional cloud-connected feature, that shared data is no longer purely local and will be processed accordingly

5.4 How We Use Desktop-Related Data

To let you download and install the desktop app
To check for and deliver updates and local AI model files
To secure our download and update infrastructure
To provide customer support
To improve the desktop product where you have enabled optional telemetry
To process billing and keep legally required accounting records, where relevant

5.5 Desktop-Related Third Parties

Depending on how you interact with the desktop product, we may use:

Amazon Web Services (AWS) - installer distribution, update and download infrastructure, hosting, storage, and related platform services. Privacy Policy
Cloudflare - DNS, CDN, website security, and performance services. Privacy Policy
Stripe - payment processing and limited billing/customer data handling if you purchase paid desktop features or related services. Privacy Policy
Resend - transactional and support-related email delivery. Privacy Policy
Google Workspace - business communications and customer support. Privacy Policy

Website-only technologies such as Cookiebot and Google Analytics are described in the website sections above and do not form part of the core desktop app processing.

5.6 Your Controls

Depending on the feature, you may be able to:

use the desktop app without using cloud-connected features
disable automatic update checks in the application settings
disable optional telemetry in the application settings, if telemetry is offered in your version of the app
choose whether to share files, screenshots, recordings, or other information with support

5.7 Desktop Retention & Security

We keep desktop-related personal data only for as long as needed for the purposes described in this policy or as required by law.

In particular:

support and contact records are retained only as long as reasonably necessary to respond, troubleshoot, and maintain a record of support interactions
operational logs for download, distribution, and security are retained only as long as needed for reliability, abuse prevention, troubleshooting, and legal compliance
optional telemetry data, where enabled, is retained only as long as needed for product improvement, diagnostics, and security
billing, invoice, VAT, and transaction records are retained for 7 years where required to comply with Dutch tax and accounting obligations and similar EU record-keeping requirements

For the desktop product, privacy protection depends heavily on local device security as well as our own systems. You remain responsible for securing your Mac, local user account, and local storage.

7. Your Rights

We do not sell personal data. Optional advertising measurement with Meta follows the marketing-cookie consent described above. Other disclosures support the service operations described in this policy.

Depending on applicable law, you may have rights of access, correction, deletion, portability, objection, and restriction regarding personal data we process about you.

To exercise your rights or ask a privacy question, email us at contact@omniforge.online. We will respond within 30 days of receiving your request.

8. Minors

Our services are not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data to us, please contact us and we will investigate and, if appropriate, delete that data.

9. Contact & Complaints

If you have concerns about your data, contact us at contact@omniforge.online.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).