VomniBack to home

Privacy Policy

Vomni (“we”, “us”, “our”) operates the platform at vomni.io. This policy explains what personal data we collect, why, and your rights over it.

We operate under both Israeli and UK privacy law.

1. Who we are

Vomni

Contact: hello@vomni.io

2. Who this policy covers

Business customers — the service businesses that subscribe to use Vomni. Vomni processes data on their behalf.

End customers — individuals who book appointments or receive communications through a business using Vomni.

3. What we collect and why

From business customers:

Name, email, and business details — to create and operate your account.

Payment information — handled entirely by Lemon Squeezy, our payment processor. We never store card details. Lemon Squeezy's privacy policy applies: lemonsqueezy.com/privacy.

Business configuration — to operate the platform as you have set it up.

Google Calendar data — if you choose to connect your Google Calendar, we use calendar.events to create booking events in your calendar and calendar.readonly to read your existing calendar solely to display your real-time availability and prevent double-bookings. We do not read, store, or use your calendar data for any other purpose. Google Calendar data is accessed in real time and is not retained after each request.

From end customers:

Name and phone number — provided at booking, used to send appointment confirmations and reminders on behalf of the business you booked with.

Email address — optional, used for email confirmations if provided.

Marketing consent — whether you opted in to receive re-engagement reminders. Optional and unchecked by default.

We do not collect payment information from end customers. We do not collect sensitive personal data.

4. How we use your data

To operate the booking system and display real-time availability to customers.

To send appointment confirmations and reminders.

To send follow-up communications after visits on behalf of the business.

To re-engage customers who have opted in to receive such messages.

To provide business owners with their management dashboard.

To process subscription payments.

To comply with legal obligations.

We do not sell data. We do not use end customer data for our own marketing.

5. How we share, transfer, or disclose your data

We do not sell your personal data to any third party.

We do not transfer or disclose your information to third parties for purposes other than the ones described in this policy.

Google Calendar data accessed through OAuth is used exclusively to display appointment availability to end customers booking through Vomni. It is not shared with, sold to, or disclosed to any third party. It is not used for advertising, profiling, or any purpose beyond operating the booking system.

We share data only in the following limited circumstances:

Lemon Squeezy — our payment processor. Handles subscription billing only. No Google user data is shared with Lemon Squeezy.

Supabase — our database infrastructure provider, used to securely store account information. Google Calendar data is not stored in our database.

Twilio — used to send SMS and WhatsApp messages to end customers on behalf of businesses. Only the end customer's phone number and message content are transmitted. No Google user data is shared with Twilio.

Legal requirements — we may disclose data if required by law or to protect the rights and safety of our users.

All third-party service providers are contractually bound to process data only as instructed and in accordance with applicable privacy law.

6. Data retention and deletion

Google Calendar data is accessed in real time to display availability and is not stored by Vomni. Disconnecting your Google Calendar from Vomni immediately revokes our access.

We retain business account data for as long as your subscription is active. Upon account deletion, your data is permanently removed within 30 days.

We retain end customer data only as long as necessary for the purpose it was collected. Business customers can delete end customer records directly from the platform at any time.

You can request deletion of any data we hold by contacting hello@vomni.io.

7. WhatsApp and SMS communications

Vomni sends WhatsApp and SMS messages to end customers on behalf of businesses using our platform.

We send two types of messages:

Transactional — booking confirmations, appointment reminders, and post-visit follow-ups. Sent on the basis of the booking relationship.

Re-engagement reminders — only sent to customers who explicitly opted in at the time of booking.

You can unsubscribe from all messages at any time by replying STOP. Your opt-out is recorded immediately and honoured permanently.

Messages to customers in Israel are sent via WhatsApp. Messages to customers in the United Kingdom are sent via SMS.

8. Data security

We apply industry-standard measures to protect all personal data. Contact information is stored in encrypted form and is never exposed in plain text. All data is transmitted over encrypted connections.

We will notify affected users promptly in the event of a data breach, in accordance with Israeli and UK law.

9. Your rights

Under Israeli Privacy Protection Law (Amendment 13) and UK GDPR you have the right to:

Access the personal data we hold about you.

Request correction of inaccurate data.

Request deletion of your data.

Object to your data being used for marketing — reply STOP to any message at any time.

Receive a portable copy of your data. Business customers can export their data directly from the platform.

Contact us at hello@vomni.io. We will respond within 30 days.

If you are in Israel: Privacy Protection Authority — gov.il

If you are in the United Kingdom: Information Commissioner's Office — ico.org.uk

10. Cookies

We use only the cookies necessary to operate the platform. No advertising or tracking cookies.

11. Changes

We may update this policy from time to time. We will notify business customers of material changes by email.

Contact: hello@vomni.io