1. Scope and operator
Omni Ad AI operates the Verso product and related websites, applications, APIs, agent tools, and services (together, the “Service”). In this policy, “Omni Ad AI,” “we,” “us,” and “our” refer to the operator of the Service. This policy applies when you visit omniadai.co, create an account, connect an advertising or commerce platform, or otherwise use the Service.
If your organization has a separate written agreement with us, that agreement may contain additional privacy terms and will control if it conflicts with this policy.
2. Information we process
Account and organization information
We may process your name, work email, organization name, role, authentication identifiers, preferences, and communications with our team.
Connected advertising-platform data
When you authorize a connection, we may process platform user or business identifiers, Business Portfolio or manager-account information, advertiser and customer IDs, accessible account names, campaigns, ad groups or ad sets, ads, audiences, creative assets, budgets, delivery status, conversion configuration, attribution settings, and performance metrics. This may include data received from Meta, TikTok for Business, and Google Ads.
Authorization credentials
We process OAuth access tokens, refresh tokens, granted scopes, token expiration information, and connection status. Credentials are used only to operate the connection you authorized and are stored server-side with access controls; they are never intentionally exposed to advertising agents or client-side code.
Creative and agent inputs
We process prompts, briefs, brand guidance, product information, uploaded or connected assets, generated images and videos, revisions, approvals, policy findings, and related metadata needed to create and evaluate advertising content.
Operational and security data
We may process device and browser information, IP address, timestamps, request and error logs, agent actions, approval records, provider receipts, and security events. We use this information to protect the Service, maintain an audit trail, diagnose problems, and prevent misuse.
3. Where information comes from
Information comes directly from you and your organization; from platforms you choose to connect; from service providers working for us; and from the use of the Service. We do not collect advertising-account data from a platform until an authorized person initiates or approves the connection.
4. How we use information
- Authenticate users and maintain authorized platform connections.
- Discover and display the advertising accounts a user is permitted to access.
- Ingest, normalize, and graph campaign, creative, audience, and performance information.
- Generate platform-specific creative and evaluate it against brand and policy requirements.
- Recommend, prepare, and—only when authorized—execute advertising actions.
- Measure outcomes, detect creative fatigue, and improve future recommendations.
- Provide support, maintain reliability, enforce security, and satisfy legal obligations.
We do not use connected-platform data to determine eligibility for employment, housing, credit, insurance, education, or other high-impact decisions.
5. AI-assisted processing and human control
Verso uses software and AI models to organize information, generate advertising content, identify patterns, and recommend actions. Material advertising changes are subject to configured policies, account permissions, budget limits, and approval controls. Users remain responsible for reviewing proposed campaigns, claims, targeting, budgets, and compliance before activation.
7. Platform-specific commitments
Google user data
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Ads data is used to provide user-visible account connection, campaign management, reporting, creative, and optimization features. We do not use Google user data for unrelated advertising, sell it, or allow humans to read it except with the user’s affirmative agreement, for security or support, to comply with law, or when the data has been aggregated and de-identified.
Meta Platform data
Meta Platform data is used only to provide and improve the advertising features a user authorizes, maintain security, and comply with applicable terms. We honor valid user requests to delete data received from Meta unless retention is required by law or a separate written agreement.
TikTok for Business data
TikTok advertiser data is used only for authorized account connection, creative upload, campaign operation, reporting, and optimization. We request only permissions relevant to implemented features and respect revocation or disconnection.
8. Retention and deletion
We retain information only as long as reasonably necessary for the purposes described here. OAuth credentials are revoked or deleted after disconnection where supported. Following a verified deletion request, we aim to delete account content and connected-platform data within 30 days. Residual copies may remain in protected backups for up to 90 days before aging out.
We may retain limited security, fraud-prevention, billing, authorization, and audit records when required by law or reasonably necessary to establish that an action was authorized. We minimize personal identifiers in those records. Aggregated or de-identified information that cannot reasonably identify a person or organization may be retained.
See our Data Deletion Instructions for request steps and provider-specific revocation guidance.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information, including least-privilege access, separation of user and agent credentials, encryption in transit, protected secret storage, approval gates, audit records, and monitoring. No system is completely secure, so we cannot guarantee absolute security.
10. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete certain information. You may also withdraw consent and lodge a complaint with a data-protection authority. To make a request, follow the steps on our Data Deletion page or email support@omniadai.co. We may need to verify your identity and authority over the relevant organization before completing a request.
11. International processing
We and our providers may process information in countries other than where you live. Where required, we use appropriate contractual and organizational measures for international transfers.
12. Children
The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children.
13. Changes to this policy
We may update this policy as the Service evolves. We will update the effective date and provide additional notice when required. Materially different uses of connected-platform data will not be applied retroactively without appropriate notice or consent.
14. Contact
Questions, privacy requests, and complaints can be sent to support@omniadai.co. Please use the subject line “Privacy Request” for privacy matters.