1. Principles of Privacy First
At Omnibio, we believe link-in-bio pages should empower creators without violating their visitors' privacy. We do not sell personal data, we do not deploy third-party cross-site behavioral tracking cookies, and we minimize data collection to what is strictly necessary to run the service.
2. Information We Collect
We collect the following categories of information:
- Account Credentials: Name, email address, password hash, and Google account identifier when using Google Sign-In.
- Profile Content: Handles, bio descriptions, avatars, links, theme selections, and custom domain preferences.
- Privacy-Preserving Analytics: Aggregated click counts and country-level referrers. We hash IP addresses to prevent persistent fingerprinting.
- BYOK API Keys: Any custom AI keys entered are retained strictly in your browser session and are never transmitted to our backend databases.
3. How Data Is Stored and Protected
Data is persisted in encrypted serverless databases (Neon PostgreSQL) with SSL transport encryption in transit and AES-256 encryption at rest. In browser sessions, profile state is cached in localStorage for instantaneous offline rendering.
4. Third-Party Integrations
When connecting custom domains, our resolvers query public DNS records to verify ownership. When signing in with Google, authentication tokens are validated following the Google Identity Services specification.
5. Your Data Rights (GDPR & CCPA)
You retain complete ownership of your personal data. At any time, you may request an export of your complete profile directory in CSV or JSON format, or request full deletion of your account and handle by contacting our support team via the Help Center.