Privacy Policy

Inceptix LLC, a Wyoming limited liability company doing business as OmniFlag (“the Company”), is the data controller for personal data processed through omniflag.app. Contact for anything in this policy: cyrus@inceptix.ai.

• Account data: your email address and authentication identifiers (password hash or Google account identifier). Passwords are handled by the authentication provider and never visible to the Company.
• Intake answers: what you provide in the planning wizard, such as citizenships, current tax residency, city, motivations, income and savings bands, family situation, constraints, and free-text context. Bands are used instead of exact figures by design.
• Technical data: standard server logs (IP address, user agent, timestamps) kept by the hosting providers for security and operations.

Intake answers are used for exactly one purpose: preparing and reviewing your relocation plan. Your account email receives the plan and messages about your submission. A notification with your submission summary goes to the founder so review can start. There is no newsletter, no advertising use, and no sale of personal data.

Plan preparation uses a large language model with two protections. First, personal identifiers and free-text fields are stripped before any model call: your email and open-ended notes are never sent to the model. Second, the model provider operates under a zero-data-retention agreement, meaning submitted content is not stored by the provider or used to train models.

The Company uses a small set of service providers to run the Service, each processing data only on the Company’s instructions:

• Supabase (database and authentication hosting, United States)
• Vercel (web hosting, United States)
• Resend (transactional email, United States)
• Anthropic (language model processing under zero retention, United States)
• Google (only if you choose Google sign-in)
• PostHog (product analytics, United States): page views and product events such as which step of the intake was completed. Analytics events never include your name, email, or intake answers.

If you are outside the United States, your data is transferred to and processed in the United States by the providers above.

Account data and intake answers are kept while your account exists. Email cyrus@inceptix.ai from your account address to request a copy of your data or deletion of your account and submissions; deletion is completed within 30 days, except records the Company must keep to meet legal obligations, including sanctions-screening records.

The site sets cookies for one purpose: keeping you signed in (authentication session). Wizard progress before you sign in is stored in your own browser’s local storage and never leaves your device until you submit. Analytics uses local storage as well, not cookies, and does not track you across other sites. There are no third-party advertising cookies.

Material changes to this policy are posted on this page with an updated date. If a change meaningfully affects how existing data is used, account holders are notified by email first.