Privacy Policy

1. Who we are

Omantu is a product of Black Habit Limited, a company registered in the United Kingdom. You can contact us at contact@blackhabit.co.uk.

2. Information we collect

• Account information — name, email address, role (founder or investor), and authentication identifiers.
• Profile content — bio, social links, profile photo, and startup details you publish.
• Uploaded media — logos, cover images, pitch decks, and demo links.
• Communications — messages exchanged through the platform after a connection is accepted.
• Payment data — handled by Stripe; we receive subscription status, not full card details.
• Usage data — pages viewed, actions taken, device and browser information, IP address.

3. How we use your information

• Provide, operate, and maintain the platform and your account.
• Enable discovery and connection between founders and investors.
• Process subscriptions and manage access to paid features.
• Generate AI-assisted insights (such as startup scores) on profiles you submit.
• Improve, secure, and personalise the platform.
• Comply with our legal obligations.

4. Legal bases

We rely on contract performance, your consent, our legitimate interests in operating and improving Omantu, and compliance with legal obligations as applicable under UK GDPR.

5. Sharing

We do not sell your personal data. We share information with:

• Other users — your public profile and startup listings are visible to platform members.
• Service providers — Stripe (payments), Supabase (hosting and database), and AI providers used to generate analyses.
• Authorities — where required by law.

6. Data retention

We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal and operational requirements. You may request deletion at any time.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise any of these rights, email contact@blackhabit.co.uk.

8. Security

We use industry-standard safeguards including encryption in transit, access controls, and row-level database security. No system is perfectly secure; please use a strong, unique password.

9. International transfers

Your data may be processed in countries outside the UK. Where this happens we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Changes

We may update this Policy. Material changes will be notified through the platform or by email.