Privacy Policy
Last updated: 31 August 2026
OMSNex is an order-management and CRM platform for e-commerce merchants. We collect the information needed to operate your account and your business data securely. This policy explains what we store and how we use it.
Information we collect
When you create an account we store your name, business name, email address and a secure password hash. If you use the contact form, the contact details and message you provide may be stored. If you connect a messaging channel or a business integration, the configuration and data required to run that feature are stored.
How we use information
- To operate your OMSNex account and workspace;
- To provide authentication, security and service access;
- To respond to your support and contact requests;
- To improve service reliability and product experience.
Data separation
OMSNex uses a multi-tenant architecture. Each business account's data is held under its own separate tenant / workspace and is not mixed with any other account's data.
Password security
Plain-text passwords are never stored. Passwords are kept using cryptographic hashing.
Other third parties
If an external platform integration is used, that platform's own privacy policy and terms may also apply. OMSNex aims to use only the access required to run the service.
Cookies
OMSNex uses only strictly necessary cookies — to keep your login session and for CSRF security checks. No advertising or cross-site tracking cookies are used. Small settings such as the theme (light / dark) preference are kept in the browser's local storage and are not sent to the server.
Third-party integration (Meta / WhatsApp)
If you choose to connect Facebook Messenger, WhatsApp or Instagram (Meta Platforms, Inc.), the information required to run that channel is stored — Page / account identifier, access token (encrypted), and the messages exchanged with your customers together with their metadata. This data is used only to run your own workspace's inbox, reply and automation features; it is not used for sale or for advertising. Meta's own Privacy Policy and Platform Terms apply in these cases. When a channel is disconnected the related token is deactivated.
Third-party integration (TikTok Ads)
If you choose to connect TikTok Ads (TikTok for Business — ByteDance), OMSNex uses the TikTok Marketing API to store, for your own authorized advertiser account only, the advertiser ID, an access token (encrypted), and ad performance data at the campaign and ad-group level (spend, impressions, clicks, conversions, purchases, ROAS). This information is used only to show ad reports inside your own workspace and to run the campaign enable / pause and budget-change features. Workspace data is never combined across merchants, sold, or used for advertising. TikTok's own Privacy Policy and Business Products (Data) Terms apply. When TikTok is disconnected the related token is deactivated and the stored ad data is deleted.
Data retention
Account and workspace data is kept while your account is active. After a deletion request is verified, eligible data is removed; a limited set of records may be kept for the period required for legal, security, fraud-prevention or accounting purposes.
Data deletion
For an account or data deletion request, follow the Data Deletion page or use the Contact form.
Changes to this policy
This policy may be updated as the product and applicable requirements change. The updated date above will change for significant updates.