Your privacy matters.
Privacy is a fundamental right. Our commitment to protecting your data is built into everything we do — Canadian residency, bank-level encryption, and full control in your hands.
Last updated: December 2024
Our privacy principles
Canadian data residency
All data stored exclusively in Canadian data centers. Never transferred outside Canada without consent.
Bank-level encryption
AES-256 encryption at rest, TLS 1.3 in transit. Your data is always protected.
Minimal collection
We only collect what's essential. No unnecessary tracking, no selling data.
Strict access control
Role-based access with complete audit logging. Only authorized personnel.
What data we collect
Transparency about the information we gather — and nothing more.
- Account information. Name, email, company details, and billing information to create and manage your account.
- Usage data. Features accessed, performance metrics, and error logs to improve and optimize your experience.
- Business data. Documents, workflows, and integrations you configure to provide our automation platform services.
Your rights
Full control over your personal data. Always.
- Correction. Update or correct any inaccurate information.
- Deletion. Request complete deletion of your data.
- Portability. Export your data in a machine-readable format.
- Restriction. Limit how we process your information.
- Objection. Object to certain types of data processing at any time.
Exercise any of these by writing to privacy@omgsystems.ca. Our Data Protection Officer responds within 48 hours.
Retention & security
How long we keep data
Active accounts: retained while the account is active. After cancellation: deleted within 30 days. Legal compliance: some records kept up to 7 years where the law requires it.
How we protect it
Encryption in transit and at rest, continuous vulnerability scanning, 24/7 monitoring, multi-factor authentication, encrypted backups, and access logging. The full picture lives on our security page.
OMG Relay — Chrome extension
Additional privacy disclosures for the browser extension.
What the extension reads
- Selected or visible text on the active tab (only when you trigger an action)
- Email thread content in supported clients (Gmail, Outlook Web) to generate replies
- No keystrokes, passwords, or form data — ever
- No browsing history or cross-site tracking
How that data is used
- Sent over TLS to the OMG Relay backend for AI processing
- Never stored beyond the current session cache (TTL: 1 hour)
- Never used to train AI models
- Never shared with third parties outside the AI providers listed here
Browser permissions used
- activeTab — read content of the current tab on demand
- storage — save your auth session locally (never synced)
- sidePanel — open the OMG Relay side panel
- No “all URLs” host permission — only tabs you activate
AI providers (tier routing)
- DeepSeek / Groq — routine requests (Tier 1, ~95%)
- Anthropic Claude — complex or sensitive requests (Tier 2)
- OpenAI GPT — polishing and formatting (Tier 2)
- All providers are bound by data processing agreements prohibiting training use
OMG Relay complies with the Chrome Web Store Developer Program Policies and the Limited Use requirements for sensitive permissions.
Cookies
Cookies are small text files stored on your device. We use essential cookies for functionality; everything else waits for your consent. We never sell data.
Essential
Authentication, session management, security, fraud prevention, and your consent choices. The site cannot work without these.
Session to 1 year · No consent neededAnalytics
Page views, traffic sources, performance metrics, and error tracking so we can improve the site.
Up to 26 months · Requires your consentFunctional
Preferences, language and region, form assistance, and feature flags.
Up to 12 months · Requires your consentMarketing
Campaign performance and retargeting. We never use third-party advertising trackers beyond what you consent to.
Up to 12 months · Requires your consentManaging cookies. The consent banner on your first visit lets you choose which categories to accept, and your choice is stored in the omg_consent cookie for one year. You can also block or delete cookies in your browser settings (Chrome: Settings → Privacy and Security → Cookies; Firefox: Options → Privacy & Security; Safari: Preferences → Privacy). Disabling essential cookies may stop parts of the site from working.
Third-party services that may set their own cookies: Stripe (payments and fraud prevention), SendGrid (email), AWS Canada (hosting), Google Analytics (analytics, cookies _ga up to 2 years and _gid 24 hours), and privacy-focused analytics. Each has its own privacy policy worth reviewing.
Updates to this policy
We may update this policy to reflect changes in our practices or for operational, legal, or regulatory reasons. Material changes are announced by posting the updated policy on this page.
Questions about this?
A person answers, not a form. We respond within 48 hours.
privacy@omgsystems.caOMGsystems Inc. · Durham, Ontario, Canada