Effective September 27, 2026
This Privacy Policy explains what information OmbraHQ LLC ("Ombra," "we," "us") collects through ombrahq.com and the Ombra HQ app, how we use it, and the choices you have.
| Type | Examples | Where it comes from |
|---|---|---|
| Account information | Name, email, business name, locations, login credentials | You, when you sign up or are invited |
| Business data | Sales, menu items, costs, invoices, inventory, and staff hours from your POS | You and the POS or other integrations you connect |
| Employee information | Staff names, roles, hours and pay rates contained in your POS data | Your connected systems |
| Uploaded files | Invoice photos and documents you snap or import | You |
| AI Agent conversations | Questions you ask and the answers generated | You, while using the app |
| Billing information | Plan, billing contact, payment status | You and Stripe; we do not store full card numbers |
| Usage and device data | Pages viewed, features used, browser, device type, IP address, error logs | Automatically, when you use the site or app |
| Messages | Emails you send us, e.g. to info@ombrahq.com | You |
We use information to: provide and operate Ombra; sync and analyze your business data; generate reports and AI Agent answers; process payments; provide support; secure the service and prevent abuse; improve features; and send service and account messages. With your consent, we may send occasional product updates, which you can opt out of anytime.
When you use the AI Agent, the relevant business data and your questions are sent to our AI provider, Google (Gemini), to generate a response. We use our provider under terms that restrict it from using your data to train its models.
We do not sell your personal information or your business data. We share it only with:
We use cookies and similar browser storage to keep you signed in, remember preferences, and let the app work offline and update. You can block cookies in your browser, but parts of Ombra may not work.
We keep account and business data while your subscription is active. After cancellation, you can request an export within 30 days, after which we delete or anonymize your data within a reasonable time, unless we must keep some records for legal, tax or security reasons.
We use industry-standard safeguards, including encrypted connections and access controls, and rely on Google Firebase's secured infrastructure. No system is perfectly secure, so we cannot guarantee absolute security. See our Security page for more detail.
You can access, correct, export or delete your information by contacting info@ombrahq.com. Depending on where you live, including California and the European Economic Area, you may have additional rights, such as knowing what we collect and objecting to certain processing. We will not discriminate against you for exercising these rights.
When a business uses Ombra, it controls the employee information in its workspace, and we process it on the business's behalf. Employees with privacy requests should contact their employer first; we will assist our customers in responding.
Ombra is a business service and is not directed to children under 16. We do not knowingly collect their personal information.
Ombra is operated in the United States. If you use it from elsewhere, your information will be transferred to and processed in the US and other countries where our providers operate.
We may update this policy. For material changes, we will notify you by email or in the app before they take effect, and update the effective date above.
OmbraHQ LLC · info@ombrahq.com