Data Processing Agreement

Last updated: July 20, 2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service between you ("Customer", the data controller) and Omni (the data processor) and applies wherever we process personal data on your behalf.

1. Roles of the Parties

The Customer is the controller and determines the purposes and means of processing. Omni acts as processor and processes personal data only on the Customer's documented instructions, including those set out in the Terms of Service and this DPA.

2. Scope and Purpose of Processing

We process personal data to provide the Services described in the Terms of Service — including message delivery, contact management, automation, and analytics — for the duration of the agreement and as instructed by the Customer.

3. Customer Obligations

The Customer is responsible for ensuring it has a lawful basis and any required consents to provide personal data to us for processing, and for the accuracy of that data.

4. Confidentiality

Personnel authorized to process personal data are bound by appropriate confidentiality obligations and are trained on their data-protection responsibilities.

5. Security Measures

We maintain technical and organizational measures designed to protect personal data against unauthorized access, loss, or disclosure, as described on our Security page.

6. Sub-Processors

The Customer authorizes us to engage sub-processors (such as cloud-hosting, messaging, and payment providers) to help deliver the Services. We impose data-protection obligations on each sub-processor and remain responsible for their performance.

7. Data Subject Requests

Taking into account the nature of the processing, we will assist the Customer with appropriate measures in responding to requests from data subjects seeking to exercise their rights.

8. Personal Data Breaches

We will notify the Customer without undue delay after becoming aware of a personal-data breach affecting Customer data, and will provide information reasonably needed to meet any notification obligations.

9. International Transfers

Where personal data is transferred outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Return and Deletion of Data

On termination of the Services, we will delete or return personal data in accordance with our Data Deletion Policy, unless retention is required by law.

11. Audits

We will make available information reasonably necessary to demonstrate compliance with this DPA and will allow for audits in line with the terms agreed between the parties.

12. Requesting a Signed DPA

To request a countersigned copy of this DPA, contact us through our contact page.

13. Contact Us

If you have questions about this Data Processing Agreement, we're here to help. Reach our team through our contact page and we will respond as soon as we can.