Privacy Policy

This Privacy Policy explains how Product Specialists Ltd ("OmniYou," "we," "us," or "our"), the operator of omniyou.io and the OmniYou platform, collects, uses, shares, and protects personal information.

OmniYou provides an AI "twin" platform — including OmniSelf™ (a visual and voice AI twin that generates content) and OmniVoice™ (AI voice replies delivered across messaging channels) — for experts, founders, consultants, coaches, and creators.

Entity disambiguation. OmniYou is an AI twin platform operated by Product Specialists Ltd at omniyou.io. We are not affiliated with, related to, or connected to any company offering DNA, genetic, or ancestry testing under a similar name. This policy applies solely to the omniyou.io platform and its associated services.

1. Who we are

Contact / Data Protection Lead: [email protected]
Postal address: c/o Afe Accountants Limited, Building 4, North London Business Park, Oakleigh Road South, London, N11 1GN, United Kingdom

2. Scope of this policy

This policy applies to:

• Visitors to omniyou.io and our marketing pages;
• Applicants who submit a fit-call application;
• Customers who subscribe to and use the platform ("Customers"); and
• Individuals whose information is processed through the platform on a Customer's behalf (for example, the leads, clients, or community members a Customer communicates with via OmniVoice).

Important — roles. For most platform activity, the Customer is the data controller of the information they upload or that flows through their twin (including their own voice and likeness, their methodology content, and the messages of the people they communicate with). In those cases OmniYou acts as a processor / service provider and processes that information under our agreement with the Customer and our Data Processing Addendum. Where OmniYou determines the purposes of processing — for example, our own analytics, marketing, and account administration — OmniYou is the controller. This policy describes both roles.

3. Information we collect

3.1 Information you provide

• Account & application data: name, email, phone number, business name, role, website, social handles, and the responses you give in a fit-call application.
• Billing data: processed by our payment processor; we receive limited transaction confirmation data and do not store full card numbers.
• Twin training materials: content you supply so we can build and train your twin — including documents, methodology, frameworks, written content, transcripts, and other materials.
• Voice recordings & voice data: audio samples you provide so we can create a synthetic voice for your twin (see Section 5).
• Images, video & likeness data: photos or video you provide for a visual twin (see Section 5).
• Communications: messages you send us, support requests, and survey responses.

3.2 Information we collect automatically

• Device & usage data: IP address, browser type, device identifiers, pages viewed, referring URLs, and interactions with the site and product.
• Cookies & similar technologies: see Section 7.

3.3 Information from connected platforms and third parties

When you connect third-party channels and APIs to deliver OmniVoice or OmniSelf, we receive data from those services as permitted by you and by their terms, including:

• Meta Platforms (Facebook, Instagram, WhatsApp Business): account/profile identifiers, message threads, and message content routed through the connected accounts;
• Other messaging channels you connect (e.g., Telegram, Slack): account identifiers and message content;
• Advertising and analytics partners: aggregated and event-level data relating to ads and site activity.

3.4 Information about the people Customers communicate with

When a Customer uses OmniVoice to reply to leads, clients, or community members, we process those individuals' names, contact identifiers, and message content on the Customer's behalf so the twin can respond. The Customer is responsible for having a lawful basis and appropriate notice/consent for those communications.

4. Sensitive and special-category data

Voice recordings and likeness used to create a synthetic identity may, in some jurisdictions, be treated as biometric or special-category data (for example under the EU/UK GDPR, the Illinois Biometric Information Privacy Act (BIPA), or the Texas CUBI Act). We handle this data only with explicit consent, only for the purposes described in Section 5, and subject to the retention and deletion rules in Section 11.

5. Voice and likeness data — how we create your twin

This section describes how we handle the most sensitive data we process.

• Purpose. We use the voice samples, images, and video you provide solely to create and operate your AI twin — the synthetic voice and visual likeness that represents you across the channels you choose.
• Synthetic voice generation. We use ElevenLabs as a sub-processor to generate and host the synthetic voice model derived from your samples. Your voice model is created for your account and is not made available to other Customers.
• Consent. We create a voice or visual twin only with your explicit, informed consent, which you give during onboarding. You confirm that you are the person in the recordings/images, or that you have the lawful right and all necessary permissions to submit them.
• No unauthorized cloning. You may not submit the voice, image, or likeness of any other person without their verifiable, documented consent. We may require proof of consent and may refuse or remove any twin we believe infringes a third party's rights.
• No use to train general models. We do not use your voice, likeness, or training materials to train general-purpose AI models for other Customers or third parties. They are used to build and operate your twin only.
• Deletion. On termination or on a valid deletion request, we delete your voice model and likeness data and instruct our sub-processors to do the same, subject to Section 11.

6. AI processing and sub-processors

OmniYou is built on third-party AI infrastructure. To deliver the Services we share the minimum necessary data with:

• OpenAI — to generate text, reasoning, and conversational responses for your twin. We use OpenAI's API; data sent via the API is not used by OpenAI to train its models under their standard API terms, and is retained by OpenAI only for limited periods for abuse-monitoring as described in their policies.
• ElevenLabs — to generate and host synthetic voice (see Section 5).
• Meta Platforms — to deliver messages through the Instagram API and WhatsApp Business API.

We share data with these providers strictly to perform the Services. A current list of sub-processors is available on request. We require each sub-processor to provide appropriate confidentiality and security protections.

Accuracy disclaimer. Twin outputs are AI-generated and may be inaccurate, incomplete, or unsuitable for a given purpose. They are not professional, legal, medical, financial, or therapeutic advice. See the Terms & Conditions for the full disclaimer.

7. Cookies, analytics, and advertising technologies

We and our partners use cookies, pixels, SDKs, and similar technologies for analytics, performance, and advertising.

Analytics & product behaviour

• Google Analytics (Google LLC) — site traffic and usage analytics.
• Microsoft Clarity (Microsoft Corporation) — session behaviour, heatmaps, and session-replay analytics. Clarity may record interactions with our pages; we configure it to mask sensitive input fields.

Advertising & conversion pixels (used to measure campaigns and build/retarget audiences)

• Meta (Facebook) Pixel — Meta Platforms, Inc.
• LinkedIn Insight Tag — LinkedIn Corporation.
• X (Twitter) Pixel — X Corp.
• Reddit Pixel — Reddit, Inc.
• TikTok Pixel — TikTok / ByteDance.

These technologies may set cookies and transmit identifiers (such as hashed email, IP address, and event data) to the relevant providers, who act as independent controllers or joint controllers for their own purposes. We use them only where permitted by your consent settings.

Your choices. Where required by law (e.g., in the EEA/UK), we request consent through our cookie banner before setting non-essential cookies. You can change preferences at any time via your browser controls and the partners' own opt-outs (including the Google Analytics opt-out add-on and each ad platform's preference center). We honour Global Privacy Control (GPC) signals where applicable.

8. How we use information

We use personal information to:

• provide, operate, train, and improve your twin and the Services;
• deliver OmniVoice and OmniSelf across your connected channels;
• create and host your synthetic voice and visual likeness (with consent);
• process applications, manage accounts, and take payment;
• communicate with you about your account, support, and service updates;
• conduct analytics and measure and serve marketing (per your consent);
• maintain security, prevent abuse, and detect fraud; and
• comply with legal obligations and enforce our terms.

Legal bases (EEA/UK): performance of a contract; legitimate interests (security, analytics, service improvement, B2B marketing); consent (cookies, marketing, biometric/voice data); and legal obligation.

9. How we share information

We share personal information with:

• Sub-processors and service providers (Section 6): OpenAI, ElevenLabs, Meta, hosting, payment, email, and support providers, under contract and only to perform the Services.
• Analytics and advertising partners (Section 7), per your consent.
• Connected platforms you authorize.
• Professional advisers, auditors, and authorities where required by law or to protect rights, safety, and the integrity of the Services.
• Successors in a merger, acquisition, financing, or asset sale, subject to this policy.

We do not sell personal information for money. Some sharing for cross-context behavioural advertising via the pixels in Section 7 may be considered a "sale" or "sharing" under certain U.S. state laws; you can opt out via GPC.

10. International data transfers

We and our providers may process data in the United States and other countries. Where we transfer personal data out of the EEA, UK, or other restricted regions, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK Addendum, and (where applicable) the EU–US / UK–US Data Privacy Framework. Details are available on request.

11. Data retention and deletion

We keep personal information only as long as necessary for the purposes described, then delete or anonymize it. In general:

• Account and billing records: for the life of the account plus the period required by law (e.g., tax/accounting).
• Twin training materials, voice models, and likeness data: for the life of the account; deleted within 30 days of account termination or a valid deletion request, and we instruct sub-processors (including ElevenLabs) to do the same.
• End-user message data processed for Customers: per the Customer's instructions and our Data Processing Addendum.
• Analytics/advertising identifiers: per each provider's retention settings.

Backups are deleted on our standard rolling cycle.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing, and to withdraw consent (including consent to voice/biometric processing) at any time.

• EEA/UK (GDPR): the rights above, plus the right to lodge a complaint with your supervisory authority.
• California (CCPA/CPRA): rights to know, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information; we will not discriminate against you for exercising them.
• Other U.S. states and jurisdictions: comparable rights where applicable.

To exercise rights, contact [email protected]. We will verify your identity before responding. If your request concerns data we process on a Customer's behalf (e.g., you are a lead or client a Customer messaged), we will refer you to that Customer as the controller and assist them as required.

13. Security

We use technical and organizational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children

The Services are intended for business users and are not directed to children under 18 (or the higher age of majority where you live). We do not knowingly collect personal information from children. The OmniYou platform must not be used to create a twin of, or to process the data of, a minor.

15. Third-party links and platforms

Our site and the Services may link to or integrate with third-party services governed by their own privacy policies (including Google, Microsoft, Meta, OpenAI, ElevenLabs, LinkedIn, X, Reddit, and TikTok). We are not responsible for their practices; review their policies.

16. Messaging, WhatsApp, and SMS consent

When you communicate with a twin through WhatsApp, Instagram, SMS, or another channel, your messages are processed to generate and deliver replies. Customers using OmniVoice are responsible for obtaining the consents required by applicable telecom and messaging laws (including the WhatsApp Business Messaging Policy, TCPA, and equivalent rules) before messaging end users, and for honouring opt-out requests ("STOP"). OmniYou provides tooling to support compliance but does not assume the Customer's legal obligations.

17. Changes to this policy

We may update this policy from time to time. We will post the new version with a revised "Last updated" date and, for material changes, provide additional notice. Continued use after changes take effect constitutes acceptance.

18. Contact us

Product Specialists Ltd
c/o Afe Accountants Limited, Building 4, North London Business Park, Oakleigh Road South, London, N11 1GN, United Kingdom
Email: [email protected]
Website: omniyou.io