Privacy Policy
Last updated: June 4, 2026
1. Who we are
Omnythic AI Services ("Omnythic", "we", "us") provides an AI assistant, SMS/email outreach, inventory and CRM tooling to automotive dealerships ("Dealerships"). This policy explains how we handle personal information processed through our platform at omnythicai.com.
2. Information we collect
- Dealership account data: name, business name, email, phone, billing info.
- Customer data uploaded by Dealerships: names, phone numbers, emails, vehicle interest, conversation history, appointment details.
- Usage data: log-in events, feature interactions, IP address, browser, device.
- Communications: SMS and email content sent through Omnythic on behalf of a Dealership.
3. How we use information
- To provide and operate the Omnythic platform.
- To send transactional messages (booking confirmations, reminders, replies).
- To improve product quality, security, and fraud prevention.
- To comply with legal obligations (TCPA, CAN-SPAM, CCPA, GDPR).
We do not sell personal information. We do not train third-party AI models on Dealership customer data.
4. Service providers (sub-processors)
We share data with vetted providers only to operate the service:
- Supabase — database, authentication, file storage
- Twilio — SMS delivery (each Dealership uses their own Twilio account)
- Stripe — payment processing
- Google — Calendar integration, OAuth login
- OpenAI / Google AI — AI assistant responses (no training on your data)
- Cloudflare — hosting and DDoS protection
5. Data retention
Account data is retained while the Dealership account is active. Customer records, SMS logs, and bookings are retained for up to 24 months after the last interaction, unless a longer retention is legally required. You may request earlier deletion (see Section 7).
6. Security
- All traffic encrypted in transit with TLS 1.2+.
- Twilio credentials and other secrets encrypted at rest with AES-256-GCM.
- Row-Level Security in our database isolates each Dealership's data.
- Service-role keys never exposed to the browser.
- Webhook endpoints verify HMAC signatures before processing.
- Quarterly access reviews; principle of least privilege.
7. Your rights
Depending on your jurisdiction (CCPA, GDPR, UK GDPR), you may have the right to access, correct, port, or delete your personal information, and to object to or restrict processing. To exercise these rights, email privacy@omnythicai.com. We respond within 30 days.
8. SMS & communication consent
By providing a phone number to a Dealership, customers consent to receive SMS messages from that Dealership via Omnythic. Customers may reply STOP at any time to opt out, or HELP for help. Message and data rates may apply. See our SMS Terms.
9. Children
Omnythic is not directed to children under 16 and we do not knowingly collect their data.
10. International transfers
Data may be processed in the United States. Where required, we rely on Standard Contractual Clauses for international transfers.
11. Changes
We may update this policy. Material changes will be notified by email or in-app banner at least 14 days before taking effect.
12. Contact
Omnythic AI Services
Email: privacy@omnythicai.com