Privacy Policy

1. What we collect. (a) Email address — provided at checkout or when you contact us, used to deliver your Dossier and transactional receipts. (b) Payment information — your card details are entered directly with our payment processor (Stripe) and are never stored on our servers; we receive only a payment confirmation, the amount, currency, and a processor token/customer reference. (c) Transaction metadata — the SKU purchased, timestamp, and (for subscriptions) renewal status. (d) Server logs — standard web-server records (IP address, request time, user agent) retained briefly for security and abuse prevention.
2. How we use it. To process your payment, deliver the Dossier(s) you bought, send transactional email (receipts, delivery, subscription notices), provide support, prevent fraud and abuse, and meet legal/tax/accounting obligations. We do not use your information for behavioral advertising.
3. Legal bases (where applicable, e.g. GDPR/UK GDPR). Performance of our contract with you (delivering your purchase), our legitimate interests (security, fraud prevention, running the service), and compliance with legal obligations.
4. Service providers we share with. We share only what is necessary with processors acting on our behalf: Stripe (payment processing), our email/SMTP delivery provider (to send your Dossier), and our hosting provider. We may disclose information if required by law or to protect our rights. We do not otherwise share your data.
5. Hosting & international transfers. The Exchange is hosted on servers located in the European Union (Germany). Depending on the provider, your information may be processed in the EU and the United States. Where required, transfers rely on appropriate safeguards (e.g. standard contractual clauses).
6. Fonts & third-party requests. Our pages load the Inter typeface from Google Fonts, which may receive your IP address as part of serving the font. We do not embed analytics, advertising pixels, or social-media trackers.
7. Data retention. We keep transaction and billing records for as long as required for tax, accounting, and legal purposes (typically several years). Email and support correspondence are kept only as long as needed for the purpose collected. Server logs are rotated on a short cycle.
8. Security. Traffic is encrypted in transit (TLS). Payment data is handled by Stripe under PCI-DSS; we do not store card numbers. Access to systems is restricted. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.
9. Your rights. Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and may object to or restrict certain processing. To exercise these rights, email research@omnirayn.com from the address used at checkout. We will respond within the time required by law. Note we may need to retain certain records to meet legal obligations.
10. Children. The Exchange is intended for professional and adult users and is not directed to children. We do not knowingly collect information from anyone under 16.
11. Changes. We may update this Policy; material changes will be reflected by the “Last updated” date above. Continued use after an update constitutes acceptance.
12. Contact & governing law. Questions or requests: research@omnirayn.com. This Policy is governed by the laws of the State of Georgia, USA, consistent with our Terms of Sale.

OmniRayn Discovery · MightyCloud Collective. Computational research intelligence; see our Disclaimer for the scope of what Dossiers are and are not.