Privacy Policy

Effective date: September 30, 2026

Who we are

OmniBurrow ("OmniBurrow", "we", "us") is rabbitry management software available at omniburrow.com, the web application, and the OmniBurrow mobile app. This policy describes what information we collect, how we use it, and the choices you have. It applies to the website, web application, mobile app, and public marketplace.

Information we collect

• Account information. When you create an account, our authentication provider collects your email address, name, and sign-in credentials (or your third-party sign-in identity). We never see or store your password.
• Rabbitry records you enter. The content you create in OmniBurrow: rabbit and litter records, pedigrees, weights, health notes, tasks, photos, contacts, financial entries, show records, and similar data. This is your data. We store and process it only to provide the service.
• Payment information. Subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only your subscription status and Stripe customer reference.
• Marketplace content. Listings, breeder profile details, and photos you choose to publish on the public marketplace are, by design, publicly visible.
• Technical information. Standard server logs (IP address, browser or device type, timestamps), sync and error diagnostics, and device push-notification tokens if you enable notifications.

How we use your information

• Provide, operate, and improve the service, including syncing your records across your devices.
• Process subscription billing and manage your trial.
• Send transactional email (receipts, account notices, security messages) and, with your consent, optional product email, where every marketing category has its own preference toggle and unsubscribe link.
• Respond to support requests.
• Protect the service against abuse, fraud, and security incidents.

We do not sell your personal information. Ever.

AI features

Some optional features send data to Google's Gemini API, and each one asks for your permission before it sends anything:

• The Willow assistant: your questions, the earlier messages in the conversation, and the herd records needed to answer them.
• Pedigree import: the PDF or photo you upload and the text printed on it.
• Column matching for spreadsheet imports: your file's column headings and a summary of what each column holds. The rows themselves are never sent.

Google processes this data to return a result to you. Under Google's terms for the paid Gemini API, which OmniBurrow uses, Google does not use it to improve its products and keeps it for a limited period only to detect abuse. We do not use your data to train AI models. You can withdraw permission for any of these features at any time in Settings, and the rest of OmniBurrow works without them.

Marketplace safety

Before a listing, listing photo, breeder profile, or review becomes public, it is checked automatically against the Marketplace rules, using Google Gemini for photos and text. You agree to this check when you accept the Marketplace rules. Anything that cannot be approved automatically is reviewed by a person before it is shown.

When you report content or a person, we keep your report and a copy of what you reported so we can investigate it, and delete both one year after the report is resolved. We never tell the other person who reported them, and we do not tell someone when you block them.

Service providers

We use a small set of infrastructure providers to run OmniBurrow, each processing data only as needed to provide their function: Clerk (authentication), Stripe (payments), Resend (email delivery), Cloudflare (content delivery and file storage for photos and documents), Google (Gemini AI processing and Marketplace screening, as described above), and our server hosting provider. We share only what each provider needs to do its job.

Data storage and security

Your data is stored on our servers and encrypted in transit. Access is scoped to your account. Your rabbitry records are never visible to other users unless you explicitly share them (a public marketplace listing, or a pedigree transfer you initiate to another account). The mobile app keeps an offline copy of your records on your device so the app works without signal; that copy is removed when you sign out or delete your account from the device.

OmniBurrow is run from the United States. Our servers are in Virginia, and our service providers process information in the United States. If you live elsewhere, including Canada, your information is transferred to, stored in, and processed in the United States, where courts and government authorities may be able to access it under US law.

Data retention and deletion

We keep your data for as long as your account is active. You can, at any time and without contacting support:

• Export your full data (CSV and photo archives) from the account page.
• Delete all of your rabbitry data while keeping your account.
• Delete your account entirely. Account deletion starts a 30-day grace window during which you can sign back in and restore it; after the window ends, your account and data are permanently purged from our systems, including stored photos and documents.

Encrypted server backups age out on a rolling schedule after deletion.

Your rights

Depending on where you live, you may have legal rights to access, correct, export, or delete your personal information, or to object to certain processing. OmniBurrow's self-serve tools cover the common cases (export, correction by editing your records, and deletion); for anything else, contact us and we will respond to verified requests as required by applicable law, including the GDPR and CCPA where they apply.

Children and age checks

OmniBurrow accounts are for adults 18 and over. The service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

Where the law requires an age check, the mobile app asks Apple (Declared Age Range) or Google (Play Age Signals) whether you are 18 or older. We never receive or keep your birthdate or exact age. If the answer is 18 or older, we keep nothing. If it is under 18, or no age is available where a check is required, we keep only that result, which of the two gave it, and when, and use them only to keep the account paused. A paused account can still export its data or be deleted. The result is removed when a later check shows you are 18 or older, or when the account is deleted.

Changes to this policy

We may update this policy as the service evolves. If a change is material, we will notify you by email or an in-app notice before it takes effect. The effective date at the top always reflects the current version.

Contact

Questions about privacy or this policy: support@omniburrow.com. See also our Terms of Service.

The person responsible for protecting personal information at OmniBurrow is its owner, who can be reached at the same address.