Privacy Policy

The data controller is Omega Bot, using the registered office and contact details shown at the bottom of this page. Privacy requests: support@botomega.com.

Depending on how you interact with us, we may process:

• Name and email address
• Account and email-verification status
• Purchase and subscription records
• Stripe customer, checkout, payment, invoice, refund and subscription identifiers (Stripe processes card payments - we do not store full card numbers)
• Product, billing interval, currency, amount and MT4/MT5 platform selection
• Licence-delivery status and order notes needed for fulfilment
• Support, cancellation and complaint communications
• Omega Management Service setup information (for example broker name, MetaTrader login, trading password, server and platform) when you submit them for configuration
• Technical, security and audit logs
• IP address, browser and device information
• Cookie and advertising attribution data, including Meta Pixel / Conversions API event data where marketing consent applies
• Website interaction records needed for security, fraud prevention and payment disputes

We do not ask for MetaTrader credentials for ordinary self-managed licence purchases. We do require setup credentials when you purchase and use Omega Management Service, because that service cannot be configured without them.

• Contract: processing payments, delivering licences/services, managing subscriptions and cancellations, providing support.
• Legitimate interests: security, fraud prevention, service improvement, defending legal claims and payment disputes (balanced against your rights).
• Legal obligation: tax, accounting and regulatory record-keeping where applicable.
• Consent: non-essential marketing cookies / Meta advertising measurement where consent is required. Consent can be withdrawn.

Marketing consent is separate from essential service processing required to fulfil your order.

We use service providers to operate Omega. Based on the current application, these include (as applicable):

• Stripe - payment processing and subscriptions (not Shopify)
• Supabase - database and application data storage
• Resend - transactional email
• Meta Platforms - Pixel and Conversions API for advertising measurement when marketing cookies are accepted
• AWS Amplify (or the then-current website host) - hosting
• TickTick - internal operational task tracking for fulfilment/support workflows
• Telegram / Zoom - support and booking communications where used
• PayPal - only for certain affiliate payout workflows, not customer card checkout

We retain information only as long as needed for the purposes above, including:

• Customer accounts - while active and for a reasonable period afterward
• Transaction, tax and subscription records - for legal/accounting periods
• Licence and delivery records - for fulfilment history and dispute handling
• Support and cancellation records - for service continuity and disputes
• Security logs - for a limited operational period
• Marketing data - until consent is withdrawn or no longer needed
• Management setup credentials - only while needed to provide or securely wind down the service; not longer than operationally necessary

Some records cannot be erased immediately on request where law requires retention or where we need them for legal claims, fraud prevention, accounting or dispute handling.

Under UK GDPR you may have rights to:

• access
• correction
• erasure
• restriction
• objection
• portability (where applicable)
• withdraw consent
• complain to the Information Commissioner's Office (ICO)

Contact support@botomega.com for privacy requests. You can also visit ico.org.uk.

Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards required by UK data protection law (for example standard contractual clauses or an adequacy decision), as applicable to that provider.

Privacy questions and requests: Contact Information.