Last updated: May 22, 2026

Privacy Policy

Bluegrass Digital Advantage LLC ("Company," "we," "us," or "our") operates the Omnovo platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use the Service.

Information You Provide

• Account information: name, email address, phone number, and business details.
• Billing information: payment method details processed securely by Stripe.
• Business content: website text, images, logos, and brand materials you submit.
• Communications: messages you send to us through contact forms, email, or support.
• Third-party account credentials: social media and review platform access tokens.

Information Collected Automatically

• Usage data: pages visited, features used, and actions taken within the platform.
• Device and browser information: IP address, browser type, operating system.
• Analytics data: aggregated site performance and visitor statistics.
• Log data: server logs, error reports, and diagnostic information.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Generate AI-powered website content, social media posts, and review replies for your business.
• Process payments and manage your subscription.
• Send transactional communications (account confirmations, billing receipts, lead notifications).
• Analyze usage patterns to improve the Service.
• Provide customer support and respond to inquiries.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

3. Information Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We share information with third-party providers that help us operate the Service (see Section 6).
• Legal requirements: We may disclose information if required by law, subpoena, or legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.
• With your consent: We may share information when you give us explicit permission.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Row-level security policies on our database to enforce tenant isolation.
• Regular security audits and monitoring.
• Access controls limiting employee access to personal data.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Cookies and Tracking

We use minimal cookies necessary for the operation of the Service:

• Essential cookies: Required for authentication, session management, and security.
• Analytics cookies: Used to understand how visitors interact with our website (via privacy-respecting analytics).

We do not use advertising cookies or tracking pixels. You can configure your browser to refuse cookies, though this may limit some functionality of the Service.

6. Third-Party Services

We use the following third-party services to operate the platform. Each service has its own privacy policy governing their handling of your data:

• Supabase: Authentication and database services.
• Stripe: Payment processing and subscription management.
• Umami: Self-hosted, cookieless, privacy-respecting website analytics. No data is shared with third parties.
• Resend: Transactional email delivery (lead notifications, account emails).
• Cloudflare: Website hosting, CDN, DNS, and security services.
• Zernio: Social media publishing and review management across connected platforms.
• Twilio: SMS delivery for lead notifications and alerts.
• OpenRouter: LLM gateway for AI content generation (brand voice, website copy, social posts, review replies).
• Anthropic (via OpenRouter): Underlying large language model provider routed through OpenRouter for AI inference.
• Spider.cloud: Website scanning and content extraction during getting started.
• Sentry: Error tracking and application performance monitoring.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at privacy@bluegrassdigitaladvantage.com or legal@omnovo.com. We will respond to your request within 30 days.

7a. California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) to: know what personal information we collect, request deletion, request correction, and opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell or share personal information for these purposes. To exercise these rights, contact us at legal@omnovo.com.

7b. European Economic Area and United Kingdom Residents

If you are in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR) and UK GDPR to access, rectify, delete, restrict processing, port, and object to the processing of your personal data. Our legal basis for processing is performance of contract (for service delivery) and legitimate interest (for service improvement and security). You also have the right to lodge a complaint with your local supervisory authority. Where we transfer personal data outside the EEA or UK (for example, to our US-based service providers such as Stripe, Supabase, and Cloudflare), we rely on Standard Contractual Clauses or the UK International Data Transfer Addendum as further described in our Data Processing Agreement. To exercise your rights, contact legal@omnovo.com.

7c. Data Breach Notification

In the event of a personal data breach affecting your information, we will notify affected users without undue delay where required by applicable law. For business customers, breach notification timelines and procedures are further specified in our Data Processing Agreement.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination:

• Content data is retained for 30 days to allow for account reactivation or data export, after which it is permanently deleted in accordance with our Data Processing Agreement Section 11.
• Billing records are retained as required by applicable tax and accounting laws.
• Anonymized and aggregated data may be retained indefinitely for analytics and product improvement.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@bluegrassdigitaladvantage.com
• Company: Bluegrass Digital Advantage LLC
• Location: Lexington, Kentucky