Privacy policy
Version dated 27 October 2026
Security logs
Service protection uses sign-in, lockout and request-limiting events. Technical references are pseudonymised; application security logs do not store passwords, tokens, message contents or raw IP addresses. Events are purged after 90 days; authorised administrators can purge older events earlier. Hosting technical logs have a separate retention period to be specified by the operator.
Controller and contact
The operator identified in the legal notice is the platform’s data controller. To exercise rights or ask a question, contact hello@omy-time.com or choose Personal data on the Contact page.
Data and purposes
Account information, country and city manage access and territories. Skills, listings, optional photos and reviews support exchanges and trust. Messages are restricted to participants; private contact details are shared only according to chosen permissions. Exchange, credit and billing data support records and accounting duties.
Legal bases
Account and exchange operation implements the requested service; invoicing and legally required retention meet legal duties. Security, abuse prevention and contact handling rely on the operator’s legitimate interests, subject to individual rights. Optional notifications depend on recipient choices that can be withdrawn in settings.
Session cookie and internal metrics
The sole application cookie is omy_session, required for authentication, inaccessible to scripts and lasting no more than seven days. No advertising cookie, external audience analytics or cross-site tracking is added. The account stores its last successful sign-in timestamp. Restricted internal metrics retain at most one sign-in per account per day, with the country declared that day, for one year. Refreshing does not create a record. No browsing history or IP address is added to these metrics.
Contact
The form collects name, email, reason, language, subject and message to answer requests. Authorised team members can access them. A notification is sent to hello@omy-time.com through Amen email services. Replies are emailed. There is no advertising registration or automatic response to an unverified visitor address. Closed requests are deleted after one year; specific retention may be applied for a dispute or duty.
Recipients and third parties
Platform staff and organisation managers access only information required by their permissions. Amen processes email. Opening a map loads OpenStreetMap tiles and shares your IP address with that provider; markers do not reveal exact addresses. Data is hosted by OVHcloud in data centres located in the European Union.
Retention and erasure
Account data is used during the service relationship. Further detailed retention periods appear below once approved by the operator. Deletion requests immediately hide profiles and listings; handling considers balances, responsibilities, ongoing exchanges and disputes. Accounting records subject to retention duties are kept for the applicable period.
Your rights
Depending on the processing, you have rights of access, rectification, erasure, restriction, objection and portability, and may withdraw optional choices. Contact hello@omy-time.com. Requests are answered within one month, with a reasoned extension where permitted. You may complain to the CNIL at www.cnil.fr. Identity documents are not routinely requested; proportionate checks may be needed if there is doubt.
Detailed retention periods
Account and profile: retained during the service relationship, then reviewed for erasure or restricted archiving at closure. An account with no activity for two years is reviewed and contacted before possible closure; this is an administrative process and absence of a new sign-in alone does not establish inactivity. The last sign-in timestamp is updated. A minimal record per account per day (date and declared country) supports internal statistics; it is deleted after one year and on account deletion requests. No browsing history or IP address is retained for this purpose. Contact: closed requests and replies are deleted one year after their last update. Requests explicitly retained for a dispute are reviewed and closed when retention is no longer necessary. Contact abuse counters expire after 24 hours. Security: sessions last at most seven days, verification links 24 hours and recovery links 30 minutes. These validity periods do not extend retention of emails containing the links: their bodies are cleared after delivery or expiry. Invoices and accounting records: kept for the statutory ten years from the close of the relevant financial year, with access restricted to authorised people. Information needed for ongoing exchanges or legal claims is separated from routine use and retained according to applicable statutory periods. Account closure does not justify keeping all data indefinitely. Account erasure and archive reviews remain administrative processes; only the technical purges expressly described are automated.