Updated 30 September 2026
Privacy policy
This notice explains how Răzvan Todica, the operator of OmniCRM at crm.omniroids.com, handles personal data in the application. Contact: razvanstodica@gmail.com.
Data we process
Account data includes your email, name, user identifier and basic profile information supplied by Google, which may include a profile picture. We also process access requests, roles, client assignments, content suggestions, uploaded website materials, revision history and records of administrative actions. Hosting and authentication providers process technical information such as IP addresses, request details and security logs.
Google sign-in
Google is used to authenticate your identity. OmniCRM requests basic identity information (openid, email and profile), not access to Gmail, Drive, Calendar or your contacts. Creating an identity does not grant workspace access. You can remove the connection through your Google Account; this does not itself delete records already held by OmniCRM. Contact the operator to request deletion.
Why we use data
We use account and access data to provide the service and handle access requests; website materials to carry out the requested website-management work; and operational records to protect accounts, enforce permissions and investigate problems. Where applicable, the legal bases are performance of a contract or steps requested before entering one, legitimate interests in secure service administration, and compliance with legal obligations. Google consent authorizes sign-in; it is not permission for unrelated marketing.
Who receives data
Approved owners and managers can administer workspace accounts and content. Other users receive only their assigned access. Supabase provides authentication, database and file storage; Vercel provides application hosting and delivery; Google provides sign-in. Material deliberately published to a client website is public. Account details, private drafts and internal notes are not intended for public website publication. Google identity data is not sold or used for advertising.
Providers and international processing
Providers may process data in countries outside your own, including through their support and infrastructure services. Their applicable contractual terms and data-protection arrangements govern that processing. Contact the operator for information about the providers and safeguards relevant to your data. This notice does not promise that all processing takes place in one country.
Storage and retention
Records are kept while needed to administer access, deliver the website service, maintain recovery history and resolve security or legal issues. Retention depends on the record’s purpose and applicable obligations; there is no universal automatic deletion interval. Deleting or hiding website content does not immediately erase historical releases, backups or previously published asset URLs. Contact the operator for account closure or sensitive-content removal so live copies and retained versions can be reviewed.
Cookies and browser storage
The application uses authentication cookies and browser preferences for language and appearance. These support sign-in and the interface. The CRM does not currently embed advertising trackers or marketing analytics in its application code. Google and hosting providers operate their own services under their policies.
Your choices and rights
Contact razvanstodica@gmail.com to request access, correction, deletion, restriction or portability of your personal data, or to object to processing based on legitimate interests, where applicable. Identity verification may be necessary. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may complain to your competent data-protection supervisory authority. Access approval is a human decision; OmniCRM does not use automated decisions with legal or similarly significant effects.
Client content and updates
For personal data supplied in a client’s website materials, that client may determine the purposes of processing; the operator handles those materials for website administration. Do not upload sensitive personal records or content you are not authorized to share. Material changes to this notice will be reflected on this page with an updated date.