Last updated: 9 June 2026
This Privacy Policy explains how OMG QA ("OMG QA", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website, create an account, or use the OMG QA quality platform (the "Service").
Controller and processor. For information about the people who administer and use an account (such as names, emails, and login activity), OMG QA acts as a controller. For the quality data a customer puts into the Service — projects, findings, evidence, comments, test runs — OMG QA acts as a processor on the customer's behalf, and that data is governed by the customer's instructions and our Data Processing Agreement.
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain communications), and legal obligation.
We do not sell personal information and we do not use your customer content to train third-party models. We share information only with:
Each organization can pin its data to a residency region (United States or European Union). Where processing crosses borders, transfers rely on the Standard Contractual Clauses incorporated into our DPA. See the Trust Center for details.
We protect data with per-organization database isolation, encryption of secrets at rest and TLS in transit, short-lived signed URLs for evidence, passwordless authentication, and a tamper-evident, hash-chained audit log. No method of transmission or storage is perfectly secure, but we work to protect your information and to disclose incidents as required. Report security concerns to [email protected].
We retain account and customer content for as long as your account is active. On offboarding, an organization's data is exported and then erased within a defined retention window. You can also request export or deletion at any time as described below and in the DPA.
Subject to applicable law, you may access, correct, delete, export (port), restrict, or object to the processing of your personal information, and withdraw consent where processing is based on it. To exercise these rights, contact [email protected]. If we process data as a processor on a customer's behalf, we will refer your request to that customer. You may also lodge a complaint with your local supervisory authority.
We use a single first-party, HttpOnly authentication cookie to keep you signed in, and privacy-friendly aggregate analytics. We do not use third-party advertising cookies or cross-site ad tracking.
The Service is for business use and is not directed to children under 16. We do not knowingly collect their personal information.
We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date and, where appropriate, notified by email.
Questions or requests: [email protected]. Security matters: [email protected].
OMG QA — Capture Every Finding. Fix Faster.