Ominvo beta launches July 23, 2026 — only 10 spots remain Join the waitlist →

Who can see your data

A plain-language breakdown of who has access to what — from you and the Ominvo founder to Anthropic, Stripe, Supabase, and Vercel.

2 min readUpdated June 9, 2026

You

Full access to everything in your account: your dashboard, reviews, AI reply drafts, reply history, billing details, and account settings. No restrictions.

Ominvo (the founder)

Access to anonymised aggregate metrics — user counts, active subscription numbers, MRR — without ever needing to look at individual accounts.

For individual account access: this happens only when troubleshooting a specific support issue, and only when you've raised a support request. It is not routine. Any access to a specific account is logged at the infrastructure level (Supabase audit logs). The founder does not browse user data.

Anthropic

Receives review text, your business name, your industry, and any tone preferences or custom instructions you've configured — when you request an AI reply draft. Nothing else. Anthropic does not receive your email address, billing data, or account credentials.

Anthropic does not use API inputs to train their models. See Anthropic's privacy policy for the exact policy language.

Stripe

Handles all payment processing. Ominvo passes your billing email and selected plan to Stripe. Stripe stores your payment method (card number, expiry, billing address). Ominvo never sees or stores your raw card number — it only receives a token that represents the payment method and confirms whether a charge succeeded.

Supabase

Ominvo's database provider. Your data at rest — account details, business profile, review data, AI replies — lives in Supabase's managed Postgres infrastructure in the Mumbai (ap-south-1) region. Data is encrypted at rest and in transit. Supabase employees have administrative access to infrastructure but operate under strict data access policies.

Vercel

Ominvo's hosting provider. Vercel serves the application and processes incoming web requests. It does not have access to your Supabase database. Edge function logs (server-side request handling) may contain request metadata but not your stored data.

No one else

No data brokers. No ad networks. No third-party analytics tools that receive individual user data. No integrations that share your review content or business data with external services beyond those listed above.

The full details are in the Privacy Policy at /privacy. If anything on this page conflicts with the Privacy Policy, the Privacy Policy controls.

If you have a specific question about a data access scenario not covered here, contact support — the details are on /pricing.

Was this helpful?

Last updated: June 9, 2026