Privacy Policy
Effective July 13, 2026
OMII AI (“we,” “us,” or “our”) operates Omii, an AI-powered Instagram content automation platform. This Privacy Policy describes how we collect, use, and protect your information when you use our Service. By using the Service, you agree to the practices described here.
1. Information We Collect
We collect the following categories of information to operate the Service:
Account information: When you register, we collect your email address and a hashed password, managed through Supabase authentication.
Instagram account data: When you connect your Instagram Business account, we store your Instagram Page ID, username, and access tokens. Access tokens are encrypted at rest using AES-256-GCM encryption before being stored in our database.
Content you create: We store prompts, captions, AI-generated images, and post drafts that you create using the Service.
Usage data: We collect information about how you use the Service, including posts published, features accessed, and subscription status.
Billing information: Payment processing is handled entirely by Stripe. We do not store raw card numbers, CVV codes, or full payment card data. We receive and store transaction identifiers and subscription status from Stripe.
2. How We Use Your Information
We use the information we collect to operate and improve the Service, including to publish content to Instagram on your behalf using your connected account credentials, to process subscription payments and send billing-related communications, to send transactional emails about your account (such as password resets and billing receipts), and to improve the quality of AI-generated images and captions over time. We do not sell your personal information to third parties.
3. Third-Party Services
The Service relies on the following third-party providers to deliver its functionality. Each provider's own privacy policy governs their handling of data they receive:
Stripe processes subscription payments. Your billing data is governed by Stripe's Privacy Policy. We never receive or store your raw card details.
Meta / Instagram receives published content via the Graph API when you use the publishing features of the Service.
Supabase provides database hosting and authentication infrastructure. Your account data and content are stored on Supabase's managed Postgres infrastructure.
Anthropic provides Claude AI, which we use for caption and content generation. Prompts and associated inputs may be transmitted to Anthropic's API during this process.
Pollinations.ai provides image generation capabilities used to produce AI-generated images on your behalf.
Vercel hosts the Service and delivers it via its global edge network. Request data may be processed by Vercel's infrastructure.
4. Data Security
We take the security of your data seriously. Instagram access tokens are encrypted at rest using AES-256-GCM before storage and are never logged or exposed in API responses. All data transmitted between your browser and our Service is encrypted in transit using HTTPS. We restrict access to your personal data to personnel and systems that require it to deliver the Service. While we implement these safeguards, no system is completely immune to security risks, and we cannot guarantee absolute security.
5. Data Retention
We retain your account data and content for as long as your account is active. Usage and application logs are retained for 90 days. If you request deletion of your account, we will delete your personal data within 30 days of receiving your request, unless we are required to retain it for legal or compliance purposes. To request deletion, contact us at hello@omii.ai.
6. Your Rights
You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, contact us at hello@omii.ai. If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority. We will respond to all requests within the timeframes required by applicable law.
7. Instagram Permissions
When you connect your Instagram Business account, we request only the permissions necessary to publish content on your behalf: pages_manage_posts, instagram_basic, and instagram_content_publish. We do not request permissions to read your private messages, follower data, or any information beyond what is required for publishing. You can revoke Omii's access to your Instagram account at any time through your Instagram account's App Settings. Revoking access will prevent the Service from publishing future posts on your behalf.
8. Cookies
We use session cookies strictly necessary to maintain your authenticated session, managed through Supabase authentication. We do not use advertising cookies, cross-site tracking cookies, or any cookies that profile your browsing behavior across third-party sites. You can configure your browser to refuse cookies, but doing so will prevent you from using the authenticated portions of the Service.
9. Children's Privacy
The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child, contact us at hello@omii.ai.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify registered users by email and update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
11. Contact
For questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, contact us at hello@omii.ai. Effective July 13, 2026.