Privacy Policy

1. Introduction

OmniWell, Inc. (“we,” “our,” or “us”) operates JustVentNow.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using JustVentNow, you agree to the collection and use of information in accordance with this policy.

Our Core Privacy Principle: We are built on anonymity. We collect the absolute minimum information necessary to provide our Service and never record or store the content of your conversations.

2. Information We Collect

2.1 Information You Provide

Payment Information: When you purchase a session, we collect payment information through our third-party payment processor, Stripe, Inc. We do not directly collect, store, or have access to your full credit card numbers. Stripe collects billing information including name, billing address, and payment card details in accordance with their Privacy Policy.

2.2 Information Automatically Collected

Session Metadata: We collect limited metadata about your sessions, including:

• Session type (e.g., “Quick Vent,” “Standard Vent”)
• Session duration (e.g., 5 minutes, 15 minutes)
• Date and time of session
• Temporary phone number identifiers (masked and not linked to your identity)
• Transaction ID for payment reconciliation

Technical Information: We may collect limited technical information including:

• Device type and operating system (for service optimization)
• Browser type and version
• IP address (used only for fraud prevention and immediately discarded)
• Pages visited on our website

2.3 Information We Do NOT Collect

We explicitly DO NOT collect:

• Your name or personal identity (no accounts required)
• Conversation recordings or transcripts (we do not record calls)
• Conversation content or summaries
• Persistent phone numbers (numbers are masked and temporary)
• Precise geolocation data
• Social media profiles or contact lists
• Health information or medical records

3. How We Use Your Information

We use the limited information we collect solely to:

• Provide the Service: Connect you with listeners and facilitate calls
• Process Payments: Complete transactions through Stripe
• Prevent Fraud: Detect and prevent fraudulent transactions and abuse
• Improve the Service: Analyze aggregate usage patterns (non-identifiable)
• Comply with Legal Obligations: Respond to lawful requests and prevent illegal activity
• Customer Support: Respond to inquiries and technical issues

We do NOT: Use your information for marketing, advertising, profiling, or selling to third parties.

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share limited information with trusted third-party service providers who assist in operating our Service:

Stripe, Inc. (Payment Processing):

• Purpose: Process credit card and payment transactions
• Information Shared: Billing information you provide during checkout
• Privacy Policy: https://stripe.com/privacy

Twilio, Inc. (Telephony Services):

• Purpose: Route and mask phone calls between callers and listeners
• Information Shared: Temporary phone number identifiers, session duration
• Privacy Policy: https://www.twilio.com/legal/privacy

Supabase (Database Infrastructure):

• Purpose: Store session metadata and listener availability
• Information Shared: Session metadata (no conversation content)
• Privacy Policy: https://supabase.com/privacy

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoena, court order, warrant)
• Government or regulatory requests
• Protection of our legal rights or safety of users
• Investigation of fraud or Terms of Service violations

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

4.4 What We Do NOT Share

We do NOT:

• Sell or rent your personal information to third parties
• Share conversation content (as we do not record conversations)
• Share your information for marketing or advertising purposes
• Provide listener contact information to callers, or vice versa

5. Data Retention

Session Metadata: We retain session metadata (transaction records, session type, duration, date/time) for up to seven (7) years for accounting, tax compliance, and fraud prevention purposes.

Conversation Content: We do not retain any conversation content as we do not record calls.

Payment Information: Payment card data is retained by Stripe in accordance with their retention policies and PCI-DSS compliance requirements. We do not store payment card details.

Technical Data: IP addresses and device information used for fraud detection are retained for a maximum of 30 days, then permanently deleted.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers uses TLS/SSL encryption
• Phone Masking: Phone numbers are masked through Twilio's proxy service
• Secure Storage: Session metadata is stored in encrypted databases
• Access Controls: Limited employee access to data on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing

No Guarantees: While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

7.1 All Users

You have the right to:

• Access: Request information about what data we have collected about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Object: Object to certain processing of your information

7.2 California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (Note: We do NOT sell personal information)
• Right to non-discrimination for exercising CCPA rights

7.3 European Users (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

7.4 Exercising Your Rights

To exercise any of these rights, contact us through our Contact Us page. We will respond to verifiable requests within 30 days (45 days under CCPA if extension is needed).

8. Children's Privacy

JustVentNow is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately through our Contact Us page and we will take steps to delete such information.

9. Cookies and Tracking Technologies

Essential Cookies: We use only essential cookies necessary for the Service to function (e.g., session cookies for payment processing).

No Tracking: We do NOT use advertising cookies, analytics cookies, or third-party tracking pixels. We do NOT track your browsing activity across other websites.

Browser Settings: You can control cookie settings through your browser. Disabling essential cookies may impair Service functionality.

10. Do Not Track Signals

Our Service does not respond to Do Not Track (DNT) signals because we do not track users across websites. We only collect the minimal information described in this policy.

11. International Data Transfers

Our Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.

For users in the EEA, we rely on Standard Contractual Clauses approved by the European Commission for data transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a new “Last Updated” date
• Providing notice on our website homepage for 30 days after material changes

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us:

14. Acknowledgment

By using JustVentNow, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.