Confidentiality & Privacy Policy
Effective Date: October 26th, 2026
1. Who we are
Omni Media Consulting (OPC) Pvt. Ltd. operates the Omni Media Consulting website and provides marketing consulting, advertising, creative, development, analytics, and related services. It also owns and operates OmniCommand, a marketing intelligence software product available through omnicommand.ai and app.omnicommand.ai. In this policy, “we”, “us”, and “our” refer to this company.
Our registered company address is E-2/11, 2nd Floor, Malviya Nagar, New Delhi 110017, India, and our second mailing address is 4498 Main St, Suite 4 #1581, Buffalo, NY 14226. General privacy enquiries may be sent to hello@omnimediaconsulting.com. OmniCommand enquiries may be sent to support@omnicommand.ai.
2. Scope and related policies
This policy describes our handling of personal information through our company website, enquiries, professional relationships, and services. It also explains the company’s responsibility for OmniCommand and the principal purposes for which its connected-platform data is processed.
Detailed product disclosures are available in the OmniCommand Privacy Policy, Terms of Service, and Data Deletion Instructions. For processing specifically within OmniCommand, its product privacy policy supplies the more specific details. This company policy does not expand the product’s permitted uses of customer data or reduce its protections.
Written confidentiality agreements, data-processing agreements, and client contracts may impose additional obligations. Nothing in these documents limits rights or duties that applicable law makes mandatory.
3. Information we collect
Depending on your interaction with us, we may collect:
- Contact and inquiry information, such as your name, professional email address, telephone number, organization, role, website, and the information you submit in forms or correspondence.
- Engagement and administration records, including proposals, contracts, billing details, payment records, approvals, meeting records, and communications.
- Client materials and service data, including brand assets, marketing plans, campaign information, website and analytics records, customer information provided for an agreed service, and access permissions.
- Website and technical information, such as IP addresses, browser and device details, pages visited, referral information, security logs, and information collected through cookies or similar technologies.
- Recruitment information that you provide when applying to work with us, such as your CV, experience, and application correspondence.
- OmniCommand account, workspace, usage, support, imported lead, and connected-platform information, as described in Section 5 and the product privacy policy.
Some information comes directly from you. Other information comes from your authorized representatives, platforms you authorize, or technical interactions with our sites and services. Please provide only information relevant to the requested service.
4. Purposes and responsibilities
We use information to respond to inquiries, assess requirements, deliver agreed services, administer relationships and payments, recruit personnel, provide support, maintain security, comply with legal duties, and establish or defend legal claims. Where permitted, we also send relevant updates and marketing communications; you may unsubscribe from marketing emails or contact us to stop them.
Where a legal basis is required, we rely on the basis appropriate to the activity and jurisdiction, such as valid consent, contractual necessity, legal obligations, or legitimate interests where recognized and applicable. Visiting our website does not itself constitute consent to every processing activity.
We determine the purposes for which we process information for our own inquiries, administration, recruitment, and security. When handling a client’s customer or account data solely to deliver its instructed services, we act on that client’s behalf under the applicable agreement. The corresponding roles may be described as controller and processor, or by other terms under applicable law.
A client or agency connecting another organization’s accounts must have authority to do so and must provide any required notices and permissions. We remain responsible for our own handling of that information.
5. OmniCommand and connected-platform information
OmniCommand is operated by the same legal entity as Omni Media Consulting. Product access does not automatically include agency services, and an agency relationship does not authorize unrelated use of product data.
With authorization through the relevant platform, OmniCommand retrieves information from supported advertising and analytics services. Current integrations described in the product policy include Google Ads, Meta Ads, Google Analytics 4, and Google Search Console. Data may include account and campaign identifiers, campaign settings and performance, spend, impressions, clicks, conversions, analytics events and sessions, search queries and pages, and related reporting dimensions. Authorized connections use access credentials such as OAuth tokens; OmniCommand does not ask for your advertising-platform password.
OmniCommand currently reads and analyzes connected accounts. It does not create, edit, pause, publish, or delete campaigns, advertisements, budgets, or other account settings. Any future feature requiring additional access will need appropriate disclosures and authorization before using that access.
The product processes connected information to calculate metrics, identify changes and opportunities, prepare findings and recommendations, answer questions, and deliver reports to the relevant workspace. Google Ads change-history records can include the email address of the person who made a change. The product policy explains visibility within workspaces and states that those change-history email addresses are not sent to AI models.
Imported lead records are processed for attribution and lead-quality analysis. The product policy describes which fields are retained and states that we do not retain the original upload file, lead names, email addresses, telephone numbers, or notes from that file. Other retained fields, including click identifiers and combinations of attributes, can still be personal information. We apply this policy to them accordingly.
Some product features send relevant account data and user questions to AI infrastructure providers to generate explanations and other narrative content. Those providers process it for our service under contractual restrictions that prevent them from training their general-purpose models with customer data. The product policy explains these flows and processing regions. We do not use connected-platform information to train a general-purpose AI model or build a shared cross-customer benchmark dataset, including through aggregation or anonymization. Any other anonymized operational statistics must comply with applicable law, our customer commitments, and the relevant platform rules.
We do not sell connected-platform data or use it for unrelated prospecting, advertising targeting, or marketing another customer’s services. Access is restricted to authorized workspace users and personnel or service providers who require it for permitted purposes. Where platform rules further restrict human access, transfers, or derived information, those restrictions apply.
Information received through Google APIs is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements where applicable. This applies alongside any additional rules of the relevant Google service. Authorization to connect an account does not permit uses prohibited by those rules.
6. Confidential client information
We protect non-public client information, including strategy, budgets, account records, customer information, proposals, credentials, and unpublished materials. We use it to perform the engagement and related administration, or as otherwise authorized or required by law.
Access is limited to personnel and providers who need it for their responsibilities and are subject to appropriate confidentiality obligations. We may disclose information where legally required, while limiting disclosure and notifying the client where lawful and appropriate.
Confidentiality restrictions do not apply to information that lawfully becomes public without a breach, was already lawfully known to the recipient, is independently developed, or is lawfully received without a confidentiality restriction.
We use client names, logos, identifiable results, confidential metrics, and information that could identify a client in publicity or case studies only with appropriate written permission or an existing agreement authorizing that use. General examples must not disclose confidential information. API-derived data remains subject to platform restrictions even if anonymized.
7. When we share information
We share information where necessary with authorized personnel; contracted providers supporting hosting, communications, analytics, security, payments, AI processing, or service delivery; professional advisers; and authorities where legally required. Clients and workspace members receive information within their authorized access and service arrangements.
Providers must handle information under appropriate contractual obligations and only for authorized purposes. Independent advertising and analytics platforms may also process information under their own terms when you use their services.
If our company or relevant assets are reorganized or transferred, information may be transferred subject to applicable protections, notices, platform restrictions, and any required prior consent. A corporate transaction does not override restrictions on API data.
We do not sell personal information or disclose confidential client information for unrelated third-party advertising. Any website advertising-measurement activity is subject to the disclosures and controls in Section 10 and applicable law.
8. Storage, international processing, and security
We use organizational and technical safeguards appropriate to the information and risk, including restricted access, permission management, and protective measures for storage and transmission. Personnel and providers receive access appropriate to their responsibilities. No transmission or storage system can be guaranteed completely secure.
Our service providers may process information in India and other countries. Where applicable, we use the safeguards or transfer mechanisms required by law. We do not treat use of a website or acceptance of general terms as a substitute for a legally required transfer mechanism.
OmniCommand’s current product policy identifies Microsoft Azure hosting in Central India, supporting services in East US, and AI inference in the United States. Its specific infrastructure disclosures and product safeguards are described in the product privacy policy.
We assess suspected personal-data breaches and notify affected clients, individuals, regulators, or platform providers as required by applicable law, platform obligations, and our agreements. The relevant notification deadlines depend on the incident and the governing requirements.
9. Retention and deletion
We retain information for the purpose for which it was collected and for applicable contractual, security, accounting, or legal requirements. When no longer needed, we delete it or irreversibly anonymize it where that use is lawful and permitted.
For agency engagements, project records may be archived for up to 24 months after completion unless an agreement specifies another period or a documented legal need requires longer retention. Remove access credentials and live account permissions when no longer required. This archive period does not justify retaining all personal information or active credentials for that duration.
Review contact, inquiry, recruitment, and marketing records against their ongoing purpose. OmniCommand honors a request to stop marketing, although it may retain a limited suppression record to prevent further marketing to that address. Contract, invoice, dispute, and statutory records may have separate retention requirements.
OmniCommand follows its product retention and deletion procedures rather than the agency archive period. Disconnecting a source stops collection and removes its stored access token; previously synchronized information remains until you delete it separately. Product deletion can involve administrator confirmation and a 30-day recovery or cancellation period before permanent deletion. Residual backup copies may remain for up to 35 days after permanent deletion. Account deletion may leave records in workspaces still used by other people, as explained in the Data Deletion Instructions.
We may retain limited information where legally required or reasonably necessary to document compliance, protect security, or resolve claims, with access restricted and retention limited to that purpose. We will explain relevant exceptions when responding to a request. Applicable statutory deadlines and platform deletion obligations take precedence over ordinary recovery periods where they require earlier action.
10. Cookies and similar technologies
Our websites may use cookies and related technologies for essential operation, security, preferences, analytics, and advertising measurement. Optional analytics or advertising technologies are used only on the legal basis and with the controls required in the relevant jurisdiction. Where prior consent is required, they remain disabled until you consent.
Essential technologies are distinguished from optional analytics and advertising measurement. You can manage optional preferences through the cookie controls available on the relevant site and can also use browser controls. Blocking essential cookies may affect functionality. Website advertising-measurement data and connected customer-account data serve different purposes; permission for one does not authorize use of the other.
OmniCommand’s site and application use the technologies identified in its product privacy policy. Their cookie disclosures and controls should be consulted when using those properties.
11. Privacy requests and grievances
Depending on applicable law, you may be entitled to information about processing, access, correction, erasure, restriction, portability, objection, withdrawal of consent, grievance resolution, or other rights. Rights and exceptions vary by jurisdiction and by the provisions in force. Withdrawing consent does not affect processing that was lawful before withdrawal.
Send company and agency requests to hello@omnimediaconsulting.com. Send OmniCommand requests to support@omnicommand.ai or use the product controls described in its Data Deletion Instructions. Please identify your relationship with us, relevant account or engagement, and requested action. Do not send passwords or access tokens.
We may request proportionate information to verify identity or authority. Where we act solely on a client’s instructions, we may refer the request to that client and assist it as required. We respond within the period required by applicable law and explain any lawful restriction or extension.
Grievance contact: Saurav Chhabra. Email: hello@omnimediaconsulting.com; for OmniCommand: support@omnicommand.ai.
Where applicable, you may also complain to the competent supervisory or regulatory authority.
12. Children
Our professional services and software are intended for adults acting in a professional capacity. OmniCommand requires users to be at least 18. If you believe a child has provided personal information contrary to these requirements, contact us so we can assess and address it.
13. Policy changes
We update this policy when our practices or applicable requirements change and display the revised effective date. We will communicate material changes as appropriate. Where fresh consent is required, we obtain it before the relevant new processing begins. An update does not authorize retroactive use incompatible with earlier commitments.
