Privacy Policy — Omadata

Omadata is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under GDPR.

Data we collect

Account information: email, username, name
Financial data: bank account details, transaction history (from connected providers)
Sport & health data (from connected devices/apps)
Authentication data: hashed passwords, session tokens, MFA status
Usage data: flow subscriptions, sync history, audit events

How we use your data

To provide the Omadata service (data aggregation, normalisation, display)
To process billing for flow refreshes
To maintain security (audit logs, session management)
Never sold or shared with third parties for advertising

Your rights (GDPR)

Right to access — export your full data at any time
Right to erasure — delete your account and all associated data
Right to portability — download your data in machine-readable format
Right to correction — update your profile information

Data retention

Your financial and personal data is retained indefinitely while your account is active. Data is deleted within 30 days of account deletion. Debug logs are retained for 60 days. Billing records are retained for 6 years as required by Finnish accounting law.

Contact

Growing Branches Oy
Data Protection enquiries: [email protected]