1. Our commitment
Protecting accounts and handling personal information responsibly are central to how OmniRecall is operated. This page distinguishes commitments from verified implementation. It is not a certification, audit report or contractual security warranty.
2. Account protection
Use a strong, unique password and the account-security options available in the application. Keep recovery information current and never share credentials or tokens. Report suspected account misuse promptly to support@omnirecall.app.
3. Responsible data handling
Information is processed only for justified purposes and with appropriate safeguards. Consult the Privacy Policy for disclosure boundaries. No encryption standard, storage region, backup control or retention schedule is claimed as verified beyond what the Privacy Policy states.
4. Access controls
Access to operating systems and support channels is limited to the operator and to providers that need it to deliver the service. A principle of restricted access should not be read as evidence of a specific implemented control.
5. Monitoring and resilience
This website does not claim a security operations centre, independent penetration test, audit or uptime guarantee. Where monitoring or recovery measures are introduced, they will be described here honestly and without certification language.
6. Reporting a vulnerability
Write to support@omnirecall.app with a concise description, the affected page or function, the time observed and minimal non-destructive reproduction steps. Do not send passwords, complete payment details, access tokens or other users’ data. Do not conduct disruptive tests without written permission. No bug-bounty programme or safe-harbour promise is asserted.
7. Incident communication
Where a confirmed incident requires notice, affected people and regulators are informed as required by applicable law, with meaningful information about its impact and protective steps. No unsupported notification timeline is promised.
8. Certifications and transparent claims
No SOC 2, ISO 27001, GDPR certification, encryption standard, independent audit or penetration-testing certification is claimed. Any future verified assurance will identify its scope and relevant evidence. Paddle’s security practices do not establish certification of OmniRecall.
9. Contact information
OmniRecall is operated by Umair Bin Hassan. Written enquiries reach the operator at support@omnirecall.app. No business address is published; the operator can be reached in writing at that address.
For Paddle-billed payment enquiries, refunds and subscription management, use https://paddle.net or the support and management links in your receipt. Do not send passwords, complete payment-card details or access tokens in a support enquiry.