1. Company Identity & Contact Details
This Privacy Policy applies to the website (oomphlabs.tech) and software products provided by Oomph Labs ("we", "us", or "our").
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact our privacy contact directly at:
Email: [email protected]
Note: Formal registered corporate entity details and legal jurisdiction are subject to final statutory filing and will be updated accordingly upon completion.
2. Client-Side Processing Architecture
Our core software applications—including CleanSheet and future client tools—are engineered with a privacy-first, local-processing model:
- Local Browser Memory: When you import a file (e.g., CSV, spreadsheet, or document) into CleanSheet, parsing and schema validation occur entirely within your device's browser memory (via client-side JavaScript / WebAssembly).
- Zero Server Uploads: Your raw file contents are never transmitted to, uploaded to, or stored on Oomph Labs servers during standard operations.
- Local Storage Quotas: Usage counters for freemium row limits are stored locally on your device using HTML5
localStorage(keys:cleansheet_rows_today,cleansheet_last_date). We do not synchronize your row content to remote databases.
3. Information We Collect and Process
We collect only the minimal data necessary to maintain system security and respond to user communications:
A. Voluntary Inquiries
When you email us at [email protected], we receive the email address, sender name, and message contents you provide. We use this information solely to answer your questions, resolve technical issues, or handle billing requests.
B. Server & Network Logs
When you access our static website, our hosting platform (GitHub Pages or edge CDN) automatically records standard HTTP access logs for security, routing, and denial-of-service prevention. These logs may include:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Referring URL and requested page paths
- Date and time stamps of requests
4. Webhook Dispatches & Third-Party Integrations
In applications offering webhook integrations (such as CleanSheet), you may choose to send sanitized JSON data to an external URL (e.g. an API endpoint, Zapier, or internal webhook listener):
- The HTTP POST request is executed directly from your browser client using the standard
fetch()API. - The data does not pass through, get inspected by, or get cached on any intermediate Oomph Labs proxy servers.
- You are solely responsible for ensuring that any destination endpoint you configure complies with your organization's security and privacy policies.
5. Payment & Billing Information
We do not collect, process, or store payment card numbers, bank account numbers, or CVVs on our servers.
All paid tier transactions are conducted through Stripe, Inc. When you initiate a purchase, you are redirected to a secure Stripe-hosted payment interface. Stripe processes your payment details according to their independent privacy policy, available at stripe.com/privacy. Stripe provides us only with transaction confirmation tokens, subscription status, and billing email addresses needed for fulfillment and support.
7. Service Providers & Data Sharing
We do not sell, rent, or trade your personal information. We share minimal necessary data only with trusted technical service providers who support our infrastructure:
- Hosting & CDN: GitHub, Inc. (GitHub Pages) for hosting static website files.
- Payment Processing: Stripe, Inc. for transaction handling and billing.
- Email Communications: Standard email infrastructure providers for managing support correspondence.
8. Data Retention
We retain support correspondence and billing confirmation records only as long as necessary to fulfill the support inquiry, satisfy legal and accounting requirements, and resolve disputes. Temporary hosting access logs are rotated and deleted in accordance with the hosting provider's standard retention cycles.
9. User Privacy Rights
Depending on your location (including the European Economic Area under GDPR, the United Kingdom, or California under CCPA/CPRA), you may have statutory rights regarding your personal information:
- Right of Access: Request confirmation of whether we process personal data relating to you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data where grounds apply.
- Right to Restriction or Objection: Object to or restrict certain processing activities.
To exercise any of these rights, contact us at [email protected]. We will respond in accordance with applicable legal timeframes.
10. Security Measures
We apply modern engineering security controls, including HTTPS encryption in transit, strict repository hygiene, dependency vulnerability audits, and static content serving. However, no internet transmission or electronic storage method can guarantee absolute security. We encourage users to practice safe credential handling and exercise care when entering third-party webhook URLs.
11. Children's Privacy
Our website and software products are intended for developers, technical teams, and general business operators. They are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect product updates, legal requirements, or operational changes. Any modifications will be posted to this page with an updated "Last updated" date. Continued use of our site or software after updates constitutes acknowledgement of the revised policy.
For any questions regarding this policy, contact: [email protected].