Privacy Policy & Data Governance

1. Overview & Data Controller

OmniScale Data Labs ("OmniScale", "we", "our", or "us"), founded by Marios Anthopoulos, provides first-party server-side tracking infrastructure, multi-platform Conversions API (CAPI) synchronization, automated Google & Meta Ads scripts, and Generative Engine Optimization (AEO/GEO) services for high-growth international e-commerce and lead generation brands.

This Privacy Policy describes our practices regarding data collected and processed through our primary website (https://omniscaledatalabs.com), our client reporting portals, and our proprietary API integration tools and applications (including OmniScale Data Labs, OmniScale GSC Tool, and OmniScale Ads API Automation Engine).

Data Controller Contact:
OmniScale Data Labs
Attn: Privacy & Data Protection Officer
Email: [email protected]
Website: https://omniscaledatalabs.com

2. Google API Services User Data Policy Compliance (Limited Use)

When you integrate or grant OmniScale Data Labs access to Google APIs (including the Google Ads API, Google Analytics Admin & Data API, Google Merchant Center Content API, and Google Search Console API), we adhere strictly to the following protections:

• Strict Purpose Limitation: Data accessed via Google APIs is used strictly to provide, execute, and monitor agreed-upon client services — including real-time campaign performance reporting, automated negative keyword pruning, 404 URL alerting, value-based margin bidding calibration, and product feed title optimization.
• Prohibition on Selling: We do NOT sell, rent, or trade Google user or account data under any circumstance.
• Prohibition on Advertising Re-transfer: We do NOT transfer Google API data to third-party data brokers, ad networks, or data exchanges.
• Prohibition on AI/ML General Model Training: We do NOT use Google API data to train or fine-tune generalized machine learning or foundational AI models.
• Human Access Safeguards: Humans (including OmniScale engineers) do not read your Google account or user data unless: (a) you have provided explicit permission for troubleshooting; (b) it is necessary for security purposes (such as investigating system anomalies); or (c) required by applicable law.

3. 100% Client Asset Sovereignty & Zero Rented Middleware

OmniScale Data Labs adheres to a foundational architectural principle: 100% Client Asset Sovereignty.

• All Google Cloud Run containers, Google Tag Manager (GTM) containers, Meta Pixels, Google Ads scripts, and data feeds are deployed inside or delegated directly to your corporate accounts.
• We never force your traffic through proprietary, black-box rented proxy middleware or third-party servers that create vendor lock-in.
• You retain sole ownership, master administrative rights, and full data control at all times.

4. Information We Collect

We collect information in the following ways:

A. Information You Provide Directly

• Inquiry & Audit Forms: Full name, professional work email address, company store URL, and estimated monthly advertising budget submitted through our free technical audit form.
• Client Onboarding & B2B Billing: Corporate billing address, tax ID (VAT number for EU VIES validation), authorized contact details, and contract specifications.

B. Information Collected Automatically

• Telemetry & Web Diagnostics: When you navigate omniscaledatalabs.com, our edge network (Cloudflare) records IP address, browser type, operating system, referral URLs, and access timestamps to defend against DDoS attacks and verify edge cache health.
• Google Consent Mode v2 & Cookies: We employ Google Consent Mode v2. Cookies for analytics (analytics_storage) and marketing attribution (ad_storage, ad_user_data) are deployed ONLY after you grant explicit consent via our interactive consent banner. You may revoke or modify these settings at any time via the "Cookie Settings" badge.

5. How We Use Information

We process collected data exclusively to:

• Conduct requested 15-point tracking and signal-loss audits.
• Deploy, configure, and maintain first-party tracking gateways on apex subdomains (e.g. data.brand.com).
• Synchronize deterministic Conversions API (CAPI) payloads with SHA-256 hashed customer parameters for ad platform match quality.
• Deliver automated daily and weekly ad spend and contribution margin reports.
• Comply with applicable legal, accounting, and tax obligations (Article 44 Non-EU export and EU VIES reverse charge).

6. Data Security & Storage Invariants

OmniScale Data Labs applies defense-in-depth security invariants across all workflows:

• Encryption in Transit: 100% of data transmissions are encrypted using modern TLS 1.3 encryption.
• Deterministic Hashing: All sensitive customer telemetry parameters (such as email or phone numbers dispatched to Meta CAPI or Google Ads Enhanced Conversions) are normalized and SHA-256 cryptographically hashed on the server prior to platform ingestion.
• Zero Local Snapshot Retention: Production client credentials, ad account tokens, and order streams are isolated in Cloudflare Workers environment variables or Google Secret Manager and are never committed to version control.

7. Your Rights Under GDPR & CCPA

Regardless of your geographic location, OmniScale Data Labs extends universal data privacy rights:

• Right to Access: You may request a copy of any personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your contact information and audit logs.
• Right to Withdraw Consent: You may toggle cookie and tracking preferences dynamically using the persistent "Cookie Settings" tool on our website.

To exercise any of these rights, email us at [email protected]. We respond to all verified requests within thirty (30) business days without fee.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect evolving regulatory standards (e.g. Google Consent Mode updates or platform API specifications). The updated version will be indicated by the "Last Updated" date at the top of this page.

9. Contact Us

For inquiries, data protection questions, or verification auditing, reach out directly:

OmniScale Data Labs
Attention: Marios Anthopoulos, Managing Partner
Email: [email protected]
Web: https://omniscaledatalabs.com