Privacy Policy

At Omega Marketplace, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

1. Information We Collect

Information You Provide

Account Information: First and last name, email address, and phone number when you register. You may add a profile photo at any time
Social Sign-In: If you sign in with Google or Facebook, we receive your name, email address, and the account identifier from that provider. We never receive your password
Billing Information: Billing address and company details (company name, CIF, trade register number) for invoicing purposes
Payment Information: Payment details are processed securely by Stripe — we do not store your card numbers
Seller Information: Business details, bank account information (via Stripe Connect), and product descriptions
Communications: Messages sent through our contact form, and messages you type into our AI assistant

Information Collected Automatically

Usage Data: Pages visited, products viewed, and search queries
Log Data: IP address, access times, and browser information
Cookies: Session cookies for authentication, cookies that remember your cart, your wishlist and your cookie choice, and — only if you accept them — Meta Pixel, TikTok Pixel and Google Analytics advertising and analytics cookies

2. How We Use Your Information

We use your personal information to:

Provide, maintain, and improve our platform
Process purchases and deliver digital products
Manage your account and provide customer support
Process seller payouts via Stripe Connect
Send transactional email (order confirmations, download links, license keys, password resets)
Send marketing email: our newsletter, and reminders about items you left in your cart or wishlist
Prevent fraud and ensure platform security
Comply with legal obligations

We do not sell your personal information to third parties.

Marketing Email and How to Stop It

Marketing email is separate from the email you receive because of a purchase. We send two kinds:

Newsletter: only to addresses that subscribed to it
Cart and wishlist reminders: to registered users who left items behind, on the basis of our legitimate interest in an existing customer relationship

Every marketing email carries a one-click unsubscribe link, and it never expires. Unsubscribing stops both kinds at once, whether or not you ever joined the newsletter. Transactional email about a purchase you made continues, because it is part of that purchase.

We may share your information with:

Stripe: For payment processing and seller payouts. Stripe's privacy policy applies to payment data
OpenAI: Messages you send to our AI assistant are processed by OpenAI to generate a reply. Do not put sensitive personal information into that chat
Meta Platforms: Only if you accept advertising cookies. The Meta Pixel and our server tell Meta when you start a checkout and complete a purchase, together with your IP address, browser details and a hashed (unreadable) copy of your email address, phone number and name, so we can measure which ads bring customers
TikTok: Only if you accept advertising cookies. The TikTok Pixel and our server tell TikTok when you view a page, start a checkout and complete a purchase, together with your IP address, browser details and a hashed (unreadable) copy of your email address and phone number, so we can measure which ads bring customers
Google: Only if you accept advertising cookies. Google Analytics and our server tell Google when you view a page, start a checkout and complete a purchase, together with an identifier for your browser, so we can measure how the site is used and which Google Ads bring customers
Service Providers: Hosting, email delivery, search indexing, and error monitoring services that help us operate the platform
Legal Requirements: When required by law, court order, or to protect our legal rights

The tracking context of an order (the advertising and analytics cookie identifiers and the page address you were on) is stored with that order only if you accepted cookies. Purchase events are sent from our servers to Meta, TikTok and Google only if you accepted cookies.

We do not share buyer names, email addresses, or contact details with sellers. Products are delivered by the platform, so sellers see what sold and what they earned — never who bought it.

4. Data Security

We implement industry-standard security measures to protect your data:

All data is transmitted over HTTPS with TLS encryption
Passwords are hashed using bcrypt
Optional two-factor authentication on your account
Payment processing is handled by Stripe (PCI DSS compliant)
Uploaded files are scanned for malware before they are published
Access controls and authentication for administrative functions

5. Cookies

We use cookies for:

Essential Cookies: Session management, authentication, and CSRF protection
Cart and Wishlist Cookies: So that a cart or wishlist you started before signing in is still there when you come back
Cookie Choice: A cookie that remembers whether you accepted or rejected optional cookies
Advertising Cookies (optional): The Meta Pixel, the TikTok Pixel and Google Analytics, loaded only after you click Accept in the cookie banner, to measure our advertising on Facebook, Instagram, TikTok and Google and how the site is used

Advertising cookies are only used with your consent. You can change your choice at any time from "Cookie settings" in the footer of the site, and you can also manage cookies through your browser settings. Disabling essential cookies may affect platform functionality.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate personal data
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Portability: Request your data in a portable format
Objection: Object to certain processing of your personal data, including direct marketing
Withdrawal: Withdraw consent for data processing at any time

To exercise these rights, contact us through our Contact page.

7. Data Retention

We retain your personal data for as long as:

Your account is active
Necessary to provide our services
Required by applicable laws (e.g., tax and accounting records)
Needed to resolve disputes or enforce agreements

When you close your account, we erase your personal data within 30 days: your name, email address, phone number, profile photo, billing addresses, login credentials and any linked social accounts are removed permanently and cannot be restored.

What remains is the financial record of orders already placed — invoices, amounts and dates — which tax and accounting law requires us to keep. Those records no longer carry your identity.

8. Children's Privacy

Omega Marketplace is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 16, we will delete it promptly.

9. International Data Transfers

Your data may be processed in countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through our Contact page.