Omella Privacy Policy

Last Updated: June 23, 2026Effective Date: July 17, 2026

Introduction

Omella, Inc., a Delaware corporation (“Omella,” “we,” “us,” or “our”), respects your privacy and is committed to protecting it through our compliance with this Privacy Policy (this “Policy”). This Policy describes the types of information we collect when you access or use our website at omella.com (the “Site”), our mobile application (the “Mobile App”), or any other product or service offered by Omella (collectively, the “Service”), how we use that information, and the rights and choices you have regarding it.

By accessing or using the Service, or by providing information to us, you acknowledge that you have read this Policy. If you do not agree with this Policy, please do not use the Service.

We neither rent nor sell your Personal Information to anyone. Omella does not sell Personal Information — including information collected from children or teens under eighteen (18) years of age, or from any of our users. Further, Omella does not sell, rent, or share student data for advertising purposes, and does not use student data for targeted advertising. We do not "share" your Personal Information for cross-context behavioral advertising, as those terms are used under U.S. state privacy laws, and we do not use your Personal Information for behavioral advertising, do not disclose it to third parties for their own independent marketing, and do not allow advertisers to target the visitors to our customers' Omella pages. This is true whether or not your browser sends an opt-out signal. For information about Omella’s product, see the Omella Terms of Service at omella.com/terms. Capitalized terms not defined in this Policy have the meanings given in the Terms of Service.

1. Scope of This Policy

This Policy applies to information we collect:

  • on the Site;
  • in the Mobile App;
  • through any other website, application, page, or service operated by Omella (including pages hosted by Omella on behalf of Members);
  • in email, text, and other electronic communications between you and Omella; and
  • through any product, service, or feature offered by Omella.

1.1 Three Categories of Individuals Whose Information We Process

To make this Policy easier to follow, we describe how we process information about three categories of individuals:

  • Visitors and Payers. People who interact with omella.com or with payment, signature, or form pages hosted by Omella on behalf of a Member, including people who make a payment or sign a document.
  • Members and Organizers. People who register for an Omella account, and people who access an Omella account as Organizers of an Organization (such as employees, staff, parent volunteers, board members, or coaches).
  • Students and Parents in the K–12 Context. People who interact with the Service because their school, school district, or another educational institution has invited them or required them to use it.

The handling of information about K–12 students is also governed by any Negotiated School Agreement between Omella and the relevant educational institution. That agreement controls over this Policy to the extent of any conflict. See Section 8 below for more on K–12 data.

1.2 What This Policy Does Not Cover

This Policy does not apply to:

  • information that we collect offline or through means not described in this Policy;
  • information you provide to third parties — including Omella’s payment processor partners, banks, and other service providers — that is collected by them directly (rather than by us);
  • information you provide on any website operated by a third party, even if you reach it through the Service;
  • information held by an Education Member about its students, where the Education Member is the controller of that information; or
  • information that has been aggregated or de-identified so that it does not identify a specific individual.

The privacy practices of our payment processor partners are governed by their own policies, available at https://stripe.com/privacy (Stripe), https://finix.com/terms-and-policies/privacy-policy (Finix), https://plaid.com/legal/#end-user-privacy-policy (Plaid), and https://checkbook.io/privacy (Checkbook).

2. Information We Collect

We collect the following categories of information. The specific information we collect about you depends on how you interact with the Service.

2.1 Information You Provide Directly

  • Contact and Account Information. Name, email address, postal address, phone number, password, date of birth, organization name, role within the organization, and similar information.
  • Identity Verification Information. Where applicable law requires verification of the identity of an Organization and its representatives (“KYC”), information such as a government-issued identifier, Employer Identification Number, date of birth, or identification document may be collected — generally only during onboarding and generally only from an Organization’s representatives. This information is collected and verified by our payment processor partners; Omella itself generally receives only limited related information, such as confirmation of verification status.
  • Financial Information. Omella does not collect or store your bank login credentials, full payment card numbers, or bank account numbers. When you make a payment or link a bank account, that information is provided to and handled by our payment processor partners or bank-linking providers — not Omella. This is a core part of how Omella maintains PCI compliance. Omella receives only limited information needed to operate the Service, such as transaction records and payment status.
  • Communications. Records of your correspondence with us, including support tickets, emails, chat messages, and survey responses.
  • Content You Submit. The content of pages, forms, and Electronic Documents you create or sign through the Service, including any personal information of your Organizers, Payers, signers, or other end users that you submit to or collect through the Service.
  • Marketing and Survey Information. Information you provide if you enter a contest, respond to a survey, or otherwise interact with our marketing activities.

2.2 Information We Collect Automatically

  • Device and Connection Information. Internet Protocol (IP) address, device identifier, device type, operating system, browser type, language settings, time zone, and similar technical information.
  • Usage Information. Information about how you interact with the Service, including the pages or screens you visit, the features you use, the time, frequency, and duration of your activities, and the referring URL.
  • Cookies and Similar Technologies. See Section 5 (Cookies and Tracking Technologies) below.
  • Geolocation Information. Approximate location information derived from your IP address. We do not collect precise GPS location unless you explicitly enable it on your mobile device.

2.3 Information We Collect from Other Sources

  • Payment Processor Partners and Banks. Information needed to process payments and verify identity, including the results of identity verification checks performed by Stripe, Finix, Plaid, or the banks they use.
  • Other Members of the Service. Information that Organizations provide about Payers, signers, students, and other end users; and information that Payers or signers provide that Organizations may receive.
  • Third-Party Data Sources. Identity verification, fraud detection, and risk-management providers that compare the information you provide against third-party databases or public records.
  • Schools and Districts. Where you are a student or parent of a student of an Education Member, information that the Education Member provides to Omella under a Negotiated School Agreement. Where a school or district uses Omella to collect assessed fees or to fund and manage student meal or other prepaid accounts, this may include information about students and families, the fees assessed, and account or meal balances, received from the Education Member and the systems it uses.

2.4 Sensitive Personal Information

In the course of providing the Service, we collect categories of information that are considered “sensitive” under one or more state privacy laws. This includes:

  • Social Security Number, driver’s license number, state identification card number, and passport number;
  • account log-in information, financial account number, and debit or credit card information together with any access code or password required to access the account;
  • precise geolocation, only where you explicitly enable it on a mobile device; and
  • the contents of certain communications, forms, and Electronic Documents to which Omella is not a party, where the Member has not directed otherwise.

We use sensitive personal information only as necessary to provide the Service to you, to verify your identity, to comply with our legal obligations, to detect and prevent fraud or security incidents, and as otherwise expressly permitted by applicable law. See Section 11 (Your Privacy Rights) for information about your right to limit the use of sensitive personal information.

3. How We Use Information

We use the information we collect for the following purposes:

  • to provide, operate, and maintain the Service, including processing payments, generating receipts, sending notifications, providing customer support, and providing reporting and reconciliation;
  • to verify your identity, your Organization’s identity, and your eligibility to use the Service, including for “know your customer” and anti-money-laundering compliance;
  • to detect, investigate, and prevent fraud, security incidents, abuse of the Service, and other harmful or illegal activity, and to enforce our Terms of Service;
  • to develop, test, troubleshoot, and improve the Service;
  • to send transactional, operational, and security-related communications;
  • to send marketing communications (only where you have not opted out), including newsletters, product updates, and promotional offers;
  • to respond to your inquiries and to administer surveys, sweepstakes, and contests;
  • to comply with applicable law, lawful requests by government or judicial authorities, and our legal obligations;
  • to establish, exercise, or defend legal claims;
  • in the event of a corporate transaction (such as a merger, acquisition, financing, or sale of assets), to facilitate that transaction; and
  • with your consent, for any other purpose disclosed at the time of collection.

We do not use your personal information for cross-context behavioral advertising, to amass a profile of you for advertising or marketing purposes, or to train artificial intelligence or machine learning systems on a basis other than to operate, secure, or improve the Service for you.

3.1 Use of Information About K–12 Students

Where we receive personal information about a K–12 student of an Education Member, we use that information only to provide the Service to the Education Member and the student, and as otherwise permitted by FERPA, SOPPA, and any applicable Negotiated School Agreement. We do not (a) use student information to market or advertise to students or their parents or guardians, (b) sell, rent, lease, or trade student information, (c) create a profile of a student except as needed for the Service, or (d) use student information to train artificial intelligence systems other than as expressly authorized in a Negotiated School Agreement.

4. How We Share Information

We share information only as described in this Section. We do not sell personal information for monetary or other valuable consideration.

4.1 With Payment Processor Partners and Their Banks

To facilitate payments and disbursements, we share necessary information with our payment processor partners (Stripe, Finix, Plaid, and Checkbook) and their respective acquiring banks, financial institutions, and service providers, in accordance with their own privacy policies and applicable law.

4.2 With Other Members of the Service

Information you submit to the Service may be shared with the Organizations or Payers with whom you transact. For example:

  • if you are a Payer paying an Organization, the Organization will receive your name, contact information, and information about your payment;
  • if you are an Organization, you will receive information about the Payers and signers who interact with your Omella pages and Electronic Documents;
  • where an Organization uses a form or Electronic Document that is completed by or routed among more than one person, information you submit may be shared with the Organization and with the other participants in that form, as configured by the Organization;
  • if you connect your account to a third-party service (such as a social media account), information will be exchanged with that third-party service.

4.3 With Service Providers

We share information with third-party service providers that perform functions on our behalf and under our instructions, including hosting, customer support, email and SMS communications, analytics, fraud prevention, identity verification, and similar services. These service providers are contractually obligated to use the information only as needed to provide their services to us and to protect it consistent with this Policy. We also use Cloudflare Turnstile for bot detection and fraud prevention. Turnstile processes limited technical signals (such as IP address, browser and device characteristics, and TLS characteristics) to distinguish human users from automated traffic; Cloudflare's processing is described in the Cloudflare Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/.

A list of subprocessors that may process student data is publicly available at omella.com/subprocessors. A complete list of significant subprocessors is available on request by emailing contact@omella.com.

4.4 With Schools and Districts

In the K–12 context, we share information with the Education Member that has invited the relevant individual to use the Service, in accordance with FERPA, SOPPA, and any applicable Negotiated School Agreement.

4.5 With Authorities and in Legal Proceedings

We may disclose information to law enforcement, government officials, regulators, courts, or other parties where we believe in good faith that disclosure is necessary to (a) comply with a subpoena, court order, or other legal process; (b) protect the rights, property, or safety of Omella, our users, or others; (c) investigate or respond to suspected fraud, security incidents, or violations of our Terms of Service; or (d) comply with applicable law or regulatory requirements.

4.6 In Corporate Transactions

In the event of a proposed or actual merger, acquisition, financing, reorganization, sale of all or substantially all of our assets, bankruptcy, insolvency, or similar transaction, we may share information with the counterparty and their advisors, subject to confidentiality protections. If our business is acquired by or merged with another entity, your information will continue to be subject to a privacy policy substantively similar to this one, unless you consent otherwise.

4.7 With Your Consent or at Your Direction

We share information with any other party where you have given us your consent or directed us to do so.

4.8 Information You Choose to Make Public

Some features let you make information visible to others:

  • Supporter feeds. An Organization may add a supporter feed to a Page. If you make a payment or submission on such a Page, you may choose to leave your name and a message. If you do, they are displayed on that Page to anyone who views it. Leaving a name or message is optional.
  • Fundraiser participant pages. In a team fundraiser, a participant has a public participant page that displays the participant’s name and picture.

The Service also provides links you can use to share a Page on social media or elsewhere. Omella does not track likes, follows, or other social engagement through these links. Information you choose to make public may be seen by anyone who views the relevant Page.

4.9 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful purpose. We commit not to attempt to re-identify de-identified information except as needed to test that the de-identification was effective.

5. Cookies and Tracking Technologies

When you visit the Site, the Mobile App, or pages hosted by Omella on behalf of a Member, we and our service providers use cookies and similar tracking technologies (collectively, “Cookies”) to recognize you, remember your preferences, secure the Service, perform analytics, and detect fraud.

We use the following categories of Cookies:

  • Strictly Necessary Cookies that are required for the Service to function, including for authentication, session management, security, fraud prevention, and load balancing. These cannot be disabled while you use the Service. This category includes Cloudflare Turnstile, which we use to detect and block automated traffic and prevent payment fraud, and which may set a strictly necessary cookie during checkout. See the Cloudflare Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/.
  • Functional Cookies that remember your preferences, language, and device.
  • Analytics Cookies used to understand how visitors use the Service, including Google Analytics 4. We have configured Google Analytics in privacy-protective mode, with IP anonymization enabled, Google Signals disabled, ad personalization disabled, and limited data retention.

We do not use Cookies for cross-context behavioral advertising, retargeting, or third-party advertising on the Service. We do not run an advertising program on our Site or in our Mobile App.

You can manage Cookies through your browser settings. Most browsers allow you to refuse new Cookies, delete existing Cookies, or be notified when a Cookie is being set. If you refuse strictly necessary Cookies, certain features of the Service will not function.

5.1 Universal Opt-Out Signals and Global Privacy Control

As stated above, Omella does not sell or share your personal information for cross-context behavioral advertising, so there is nothing for you to opt out of in that respect. Some web browsers and devices can send a “universal opt-out signal” — such as the Global Privacy Control (“GPC”) — that automatically communicates a privacy preference to the websites you visit. Where we receive such a signal, we honor it as required by applicable state privacy laws, including by treating it as a request to limit our use of sensitive personal information where applicable. Honoring these signals does not change the fact that we do not sell or share your personal information either way.

5.2 Do Not Track

Some browsers send a “Do Not Track” signal. There is no industry consensus on how Do Not Track signals should be interpreted, and we do not respond to Do Not Track signals. We do honor GPC.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from accidental loss and unauthorized access, use, alteration, or disclosure. These safeguards include encryption of data in transit using TLS 1.2 or higher; encryption of sensitive data at rest; access controls that limit access to personal information to authorized personnel with a need to know; logging and monitoring of administrative access; routine security testing; and a written incident response plan.

We store and process personal information using servers located in data centers in the continental United States.

Despite these protections, no method of transmission over the Internet or method of electronic storage is fully secure, and we cannot guarantee absolute security. You play an important role in security by safeguarding your password, restricting access to your devices, and notifying us immediately of any suspected unauthorized use of your account.

If we become aware of a breach of the security of personal information for which notice to you is required by applicable law, we will provide notice as required by that law. By using the Service, you consent to receive that notice electronically where permitted.

7. Data Retention

We retain personal information for as long as it is needed for the purposes described in this Policy, and longer where required to comply with applicable law, the Operating Rules, PCI-DSS, tax law, anti-money-laundering law, or other legal or regulatory obligations, or to establish, exercise, or defend legal claims.

In general:

  • account, transaction, and Electronic Document records are retained for the duration of your account and for the period required by tax and anti-money-laundering law thereafter (typically not less than seven (7) years);
  • identity verification records are retained for the duration of your account and for the period required by anti-money-laundering law thereafter (typically not less than five (5) years);
  • audit and security logs are retained in accordance with our internal security policies, generally for not less than twelve (12) months;
  • marketing preferences are retained until you withdraw your consent;
  • support and correspondence records are retained for as long as needed to operate the Service and address related claims.

We generally retain your personal information rather than deleting it automatically. You may request deletion of your personal information at any time (see Section 11), and we will delete it except where we are required to retain it under the legal and regulatory obligations described above. If, for technical reasons, we are unable to fully delete certain information from our systems, we will isolate it and protect it from further use. We periodically review accounts that have been inactive for twelve (12) months and delete personal information that we are not required to retain.

7.1 Retention of K–12 Student Information

We retain K–12 student information only for the period authorized by the applicable Education Member, FERPA, SOPPA, and any Negotiated School Agreement. We will delete student information on instruction from the Education Member, and in any event no later than the time specified in the applicable Negotiated School Agreement (which, for some Education Members, is within seven (7) calendar days of a deletion request, and otherwise within thirty (30) calendar days of termination of the relationship).

8. Children’s Privacy

8.1 General Posture

The Service is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from any child under thirteen (13) years of age. If we learn that we have collected personal information from a child under thirteen (13) without verifiable parental consent (or, in the K–12 context, without the consent of the child’s school acting in loco parentis under FERPA and COPPA’s School Authorization), we will promptly delete that information. If you believe we have collected information from a child under thirteen (13), please contact us at contact@omella.com.

Use of the Service by users between the ages of thirteen (13) and seventeen (17) is permitted only in the limited circumstances described in our Terms of Service. We do not knowingly send marketing communications to anyone under the age of eighteen (18).

8.2 Children’s Information

We maintain the administrative, technical, and physical safeguards described in Section 6 to protect children’s personal information, including encryption in transit and at rest, access controls, logging and monitoring, routine security testing, and a written incident response plan. Where we receive children’s personal information under an Education Member’s school authorization, we use it only for the purposes authorized by the Education Member and as permitted by FERPA and COPPA’s school authorization exception, and we do not use it to market to children or to build a profile of a child except as needed to provide the Service.

8.3 Children’s Data Retention Policy

We retain children’s personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide the Service to the relevant school or family and to comply with applicable law. We delete children’s personal information when it is no longer needed for those purposes, subject only to legal or regulatory retention obligations. Specifically:

  • where a parent or guardian, or an Education Member acting on the school’s authorization, requests deletion, we will delete the child’s personal information promptly and in any event within the timeframes described in Section 7.1; and
  • audit logs and de-identified information may be retained for security and integrity purposes.

8.4 Parental Access and Controls

At any time, a parent or legal guardian may refuse to permit us to collect further personal information from their child, may request that we delete the personal information we have collected, and may request to review what personal information we have collected about the child. Please contact us at contact@omella.com or (510) 560-6766. Where a child’s information has been provided to us by an Education Member acting under FERPA and COPPA’s School Authorization, we may direct your request to the Education Member, which is the entity in the best position to respond to it.

We will respond to verified parental requests within thirty (30) calendar days. To verify a request, we may ask for information sufficient to confirm that you are the parent or legal guardian of the child whose information is at issue.

8.5 Separate Consent for Third-Party Disclosures

Consistent with the amended COPPA Rule, we obtain (or have the relevant Education Member obtain) separate verifiable parental consent before disclosing a child’s personal information to any third party for any purpose that is not integral to the provision of the Service. Where we share children’s information with payment processor partners and the other service providers described in Section 4, that sharing is integral to the provision of the Service.

9. Educational Institutions: FERPA, SOPPA, and State Student-Data Laws

Where an Education Member uses the Service in connection with its K–12 students:

  • Omella acts as a “school official” with a “legitimate educational interest” under FERPA;
  • Omella acts as an “operator” under the Illinois Student Online Personal Protection Act (105 ILCS 85, “SOPPA”) and analogous state student-data laws;
  • Omella uses student personal information only for the purposes authorized by the Education Member, only as needed to provide the Service, and only in accordance with FERPA, SOPPA, and any Negotiated School Agreement;
  • Omella does not sell, rent, lease, or trade student personal information;
  • Omella does not use student personal information to market or advertise to students or their parents or guardians;
  • Omella does not use student personal information to build a profile of a student except as needed to provide the Service;
  • Omella does not mine student personal information for any purpose other than to provide the Service;
  • Omella protects student personal information using administrative, technical, and physical safeguards consistent with SOPPA, the National Institute of Standards and Technology’s Cybersecurity Framework, and any Negotiated School Agreement; and
  • Omella will provide breach notifications as required by SOPPA and applicable state law.

10. Automated Decision-Making

Omella itself does not use automated decision-making technology to make decisions that produce legal or similarly significant effects about users (such as decisions about credit, employment, housing, education, or essential services), and Omella does not use such technology in a manner that requires a “significant decision” disclosure under the California Consumer Privacy Act as amended.

Omella may use rule-based or automated tools for security, fraud prevention, and account integrity monitoring. These tools do not make legally significant decisions about users. If any aspect of Omella’s fraud-detection or account-management processes were to constitute automated decision-making affecting a user’s access to the Service in a manner that applicable law treats as legally significant, Omella will provide such disclosures and honor such rights as that law requires.

For fraud prevention and risk management, our payment processor partners (Stripe and Finix) operate automated transaction-monitoring and fraud-detection systems that may automatically flag, decline, hold, or reverse a transaction based on risk signals. Those systems are operated by the relevant payment processor in accordance with its own privacy policy and risk policies. If a transaction in which you are involved is affected by such a system, you may contact us at contact@omella.com and we will pass your request to the relevant processor and assist you in reaching it.

11. Your Privacy Rights

Depending on where you reside, you may have the following rights regarding the personal information we hold about you. Note that some rights are subject to exceptions and verification requirements, and that the substance of each right depends on the law that grants it.

  • Right to Know / Access. Request information about the categories and specific pieces of personal information we have collected, the sources, the purposes for collection, the categories of third parties with whom we have shared the information, and a copy of the information in a portable format.
  • Right to Correct. Request correction of inaccurate personal information.
  • Right to Delete. Request deletion of personal information we hold about you, subject to exceptions for information we are required to retain.
  • Right to Opt Out of Sale or Sharing. Direct us not to sell or “share” your personal information for cross-context behavioral advertising. We do not sell or share personal information; this right is effectively built in.
  • Right to Limit Use of Sensitive Personal Information. Direct us to limit our use of sensitive personal information to that needed to provide the Service.
  • Right to Opt Out of Profiling for Significant Decisions. Direct us not to subject you to profiling in furtherance of decisions that produce legal or similarly significant effects. As described in Section 10, Omella does not engage in such profiling.
  • Right to Withdraw Consent. Where we rely on your consent, withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before withdrawal.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

11.1 How to Exercise Your Rights

To exercise any of these rights, email us at contact@omella.com, write to us at the address in Section 15, or call us at (510) 560-6766. We may need to verify your identity before fulfilling your request. We will respond within the timeframe required by the applicable law, which is generally forty-five (45) days, subject to one extension where reasonably necessary.

You may use an authorized agent to make a request on your behalf. Where required by law, we will request information sufficient to verify the agent’s authority.

If we deny a request, we will explain why and inform you of any appeal rights. Where you have a right to appeal a denial, you may do so by responding to our denial email with the subject line “Privacy Appeal.”

11.2 California-Specific Disclosures

This Section provides additional information for California residents under the California Consumer Privacy Act, as amended (“CCPA”).

In the preceding twelve (12) months, we collected the following categories of personal information from California residents: identifiers; customer records information; commercial information; internet or other electronic network activity information; geolocation data (approximate, derived from IP); audio, electronic, visual, or similar information (limited to call recordings where applicable); professional or employment-related information; education information (in the K–12 context); inferences drawn from the foregoing; and sensitive personal information as described in Section 2.4. We collected this information from the sources, and used it for the purposes, described in Sections 2 and 3. We disclosed it to the categories of recipients described in Section 4.

We have not sold personal information of California residents in the preceding twelve (12) months, and we do not sell personal information of California residents. We have not “shared” personal information of California residents for cross-context behavioral advertising in the preceding twelve (12) months. We have not sold personal information of any California resident known to us to be under sixteen (16) years of age.

You may also have rights under California Civil Code Section 1798.83 (“Shine the Light”) regarding our disclosure of personal information to third parties for those third parties’ direct marketing purposes. We do not currently make such disclosures and are therefore not required to maintain a Shine the Light response.

The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

11.3 Texas-Specific Disclosures

For Texas residents, the Texas Data Privacy and Security Act applies. The categories of personal information we process, the purposes of processing, the categories of recipients, and the categories of personal information we share with third parties are described in Sections 2, 3, and 4. We do not engage in the “sale” of personal data as defined under Texas law. We do not process personal information for targeted advertising. To exercise your rights under Texas law, contact us using the methods in Section 11.1. If we deny your request, you may appeal to us using the method described in Section 11.1; if your appeal is denied, you may submit a complaint to the Texas Attorney General at https://www.texasattorneygeneral.gov.

11.4 Colorado, Connecticut, Virginia, Utah, and Similar State Disclosures

For residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia, and other states with comprehensive consumer privacy statutes, the rights described in Section 11 apply as provided by your state’s law. Exercise your rights as described in Section 11.1. If we deny your request and you have a right to appeal under your state’s law, you may appeal as described in Section 11.1.

11.5 Nevada Sale Opt-Out

Nevada residents may submit a request to opt out of any future sale of “covered information” (as defined under Nevada Revised Statutes Chapter 603A) by emailing contact@omella.com with the subject line “Nevada Opt-Out.” We do not currently sell covered information. Nevada residents may also contact the Nevada Attorney General’s Bureau of Consumer Protection at 555 E. Washington Ave., Ste 3900, Las Vegas, NV 89101; telephone (702) 486-3132; email aginfo@ag.nv.gov.

12. Marketing Communications

We send marketing communications only to recipients who have not opted out. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email, by updating your account preferences, or by emailing contact@omella.com. We will continue to send transactional, operational, and security-related communications to you while you have an account, even if you have opted out of marketing.

We do not send marketing communications to children or to anyone known to us to be under the age of eighteen (18).

13. International Users

The Service is hosted in the United States and is intended only for users located in the United States and its territories. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to that transfer, storage, and processing.

14. Changes to This Policy

We may amend this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of this Policy. If we make material changes to how we use personal information, we will provide notice by email, by an in-product notification, or by posting a notice on the Site. Your continued use of the Service after the effective date of any change constitutes your acceptance of the change. Changes that are less restrictive of your privacy will apply only to information collected after the change.

15. Contact Us

If you have any questions, comments, or concerns about this Policy or our privacy practices, please contact us:

Omella, Inc.
1090 S Wadsworth Blvd, Unit C, PMB 5025
Lakewood, CO 80226
Email: contact@omella.com
Phone: (510) 560-6766

You may also have the right to lodge a complaint with the state attorney general or applicable privacy regulator in your jurisdiction.