Privacy Policy

1. Who we are

Omako is a product of Shwez Studio LLP, a limited liability partnership registered in India (referred to in this policy as "we", "us", or "Omako"). Our registered address and contact details are available at omako.app.

This policy applies to the Omako website (omako.app), the web application, the client portal, and any related services (collectively, "the Service").

2. What we collect and why

2.1 Waitlist and early access

When you join the waitlist we collect your email address. We use it solely to notify you when your early access cohort opens and to send occasional product updates. No card details, no phone number, nothing else.

2.2 Account and profile

Once you create an account, we collect:

• Email address: your identity and how we send you magic-link logins.
• Display name and studio name: shown on proposals and client portals.
• GST registration number and state: needed to calculate the correct CGST/SGST/IGST split on invoices.
• UPI ID or bank details: included on invoices so your clients can pay you directly.
• Logo and brand colours: used to customise your client portal.

2.3 Project and client data

Everything you create inside Omako (proposals, milestones, approvals, invoices, feedback threads) is stored on your behalf. This includes personal data of your clients (names, email addresses, company names) that you enter when setting up a project. You are the data controller for your clients' data; we process it only as your data processor as described in our Data Processing Agreement.

2.4 Usage and device data

We collect standard technical data to keep the service running: IP address, browser type, pages visited, and feature interactions. We use this for debugging, security monitoring, and understanding how the product is used, not for advertising.

3. Legal basis for processing

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable privacy law, we process your personal data on the following bases:

• Consent: for waitlist sign-up and marketing communications.
• Contract: to provide the Service you've signed up for.
• Legitimate interests: for security, fraud prevention, and product improvement, where those interests are not overridden by your rights.
• Legal obligation: where Indian law requires us to retain records (e.g. GST filings).

4. Omi and your data

Omi, our AI assistant, processes your project context to generate suggestions, draft documents, and catch errors. Your data is used only for your own session. It is not used to train shared AI models, is not retained by the underlying model provider beyond the immediate inference call, and is not shared with other Omako users.

Omi is powered by a third-party large language model. Inference requests are made server-side and are covered by our sub-processor agreements. See Section 6 for details.

5. Data storage and transfers

Your data is stored on servers located in the India region (AWS Mumbai, ap-south-1). We do not transfer personal data outside India except where technically necessary for inference calls to our AI provider (which operates under equivalent protection commitments). Where such transfers occur, appropriate contractual safeguards are in place.

6. Third-party sub-processors

We maintain written agreements with all sub-processors requiring equivalent data protection standards. A full, current list is maintained in our DPA.

7. How long we keep your data

• Waitlist emails: until the product launches or you unsubscribe, whichever is sooner.
• Account data: for as long as your account is active, plus 90 days after deletion to allow recovery.
• Invoice and GST records: 8 years, as required under the GST Act, 2017.
• Support communications: 2 years.

8. Your rights

Under the DPDP Act, 2023, you have the right to:

• Access a summary of your personal data we process.
• Correct inaccurate or incomplete data.
• Erase your data (subject to legal retention requirements).
• Withdraw consent at any time without affecting prior lawful processing.
• Nominate another individual to exercise rights on your behalf in case of death or incapacity.
• Grieve: file a complaint with the Data Protection Board of India.

To exercise any of these rights, email privacy@omako.app. We will respond within 30 days.

9. Cookies

We use a small number of technically necessary cookies (session management, CSRF protection). We do not use advertising cookies, tracking pixels, or third-party analytics that share data with ad networks. You can disable cookies in your browser but some features of the Service may not work correctly.

10. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, contact us immediately.

11. Changes to this policy

We will notify you by email of any material changes to this policy at least 30 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after notice constitutes acceptance.