OmniBudgets — Privacy Policy

Effective date: October 16, 2025

Controller: JEDITOOLS DOO (see Section 13 for full details).

1. Scope

This Policy explains how we collect, use, share, and protect personal data when you use OmniBudgets and related websites.

2. Data We Collect

• Account data: email, password hash, display name (if provided).
• Billing data: handled by Paddle as Merchant of Record; we do not store full card details.
• Usage/technical data: IP address, device/OS/browser details, timestamps, event and error logs, cookies.
• Content data: budgets, transactions, categories, and collaborators you invite.
• Support data: messages and attachments you send to support.

3. Purposes & Legal Bases (GDPR)

• Provide the Service (Art. 6(1)(b)): account setup, authentication, core features.
• Billing & compliance (Art. 6(1)(c)/(f)): subscription management, fraud prevention, audit.
• Improve & secure (Art. 6(1)(f)): analytics, debugging, preventing abuse.
• Communications (Art. 6(1)(f) and/or consent): service notices and optional marketing (opt-out anytime).
• Legal & protection (Art. 6(1)(c)/(f)): enforcing Terms, defending legal claims.

4. Cookies & Similar Technologies

We use essential cookies for login/session and security. Analytics cookies (if enabled) operate with consent where required. You can manage preferences via your browser and our cookie banner/settings.

5. Sharing of Data

We share data only as needed to operate the Service:

• Paddle (independent merchant/payment controller): processes billing and tax calculation.
• Processors (acting on our instructions): Hetzner Online GmbH (hosting/compute & databases); Cloudflare, Inc. (CDN, WAF, DNS, DDoS); MailerSend (transactional email); Sentry (error/performance monitoring); GoDaddy (domain/DNS).
• Legal and safety: where required by law or to protect rights and security.
• Business transfers: in case of merger, acquisition, or asset sale (with notice where required).

6. International Transfers

Your data may be processed outside your country. Where required, we rely on safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms. Hosting locations and specific subprocessors are available on request.

7. Retention

• Account & content data: retained for the lifetime of the account and deleted within 90 days after deletion, subject to backups and legal holds.
• Logs/telemetry: typically 30–180 days.
• Billing records: retained as required by law.

8. Your Rights

You may have rights to access, rectify, erase, restrict, port, or object to processing, and to withdraw consent where processing is based on consent. To exercise rights, email us at jedi.tools@gmail.com. We respond within 30 days. You can also complain to your local supervisory authority.

9. Security

We use reasonable technical and organizational measures, including encryption in transit, access controls, and least-privilege practices. No system is 100% secure—use a strong, unique password and enable any additional security features we provide.

10. Children

The Service is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for deletion.

11. Third-Party Links

Our sites may link to third-party resources; their privacy practices are governed by their own policies.

12. Changes to this Policy

We may update this Policy. Material changes will be posted in-app or by email; your continued use after updates signifies acceptance.

13. Contact & Controller Details

Controller: JEDITOOLS DOO (Reg. No. 51026004)

Address: UL. 4. JULA BB, BLOK 35-36, Podgorica, Montenegro (Crna Gora)

Websites: https://omnibudgets.com • https://jedi.tools

Contact (privacy): jedi.tools@gmail.com

Document URL: https://omnibudgets.com/privacy-policy