Privacy-first website creation with clear data boundaries.

1. Who we are

Omega Web Pro is operated by Alpha & Omega Limited , a New Zealand company.

References in this Privacy Policy to “Omega”, “Omega Web Pro”, “we”, “us” or “our” mean Alpha & Omega Limited as applicable.

This Privacy Policy applies to:

• OmegaWebPro.com;
• the Omega Web Pro Builder;
• website-generation and preview functions;
• payment and licence fulfilment;
• customer accounts;
• licensed website ZIP downloads;
• licensed ZIP re-upload and re-editing;
• support and contact communications;
• related Omega Web Pro services.

2. What “personal information” means

Personal information means information about an identifiable individual.

Some project information may relate only to a company or organisation and may not itself identify a natural person. However, business project information can become personal information where it identifies or can reasonably be linked to an individual.

3. Personal information we may collect

Depending on how you use Omega Web Pro, we may collect the following categories of information.

4. How we collect personal information

We may collect information:

• directly from you when you use Builder, upload assets, make a purchase, set up or use My Account, update your profile, contact us, reset a password or request support;
• from payment providers, such as Stripe, when a checkout or payment is completed or otherwise processed;
• automatically through service operation, such as ordinary server requests, session information, security logs or technical information necessary to deliver the Site;
• from authorised third parties where they provide information on your behalf;
• where required or authorised by law.

If another person provides personal information about you, we expect that person to have lawful authority to provide it where required.

5. Why we collect, use and disclose personal information

We may use personal information where reasonably necessary:

• to provide Omega Web Pro and its website-generation functions;
• to create, process and restore website projects;
• to generate previews and website packages;
• to process and reconcile purchases;
• to create and administer lifetime licences;
• to create and maintain purchase-created customer accounts;
• to authenticate users and protect customer accounts;
• to provide licensed downloads and re-editing;
• to communicate about purchases, accounts, licences and support;
• to prevent fraud, abuse and security incidents;
• to investigate technical errors and improve service reliability;
• for accounting, record-keeping and legal compliance;
• to establish, exercise or defend legal rights;
• to comply with lawful requests from competent authorities;
• for another purpose permitted by applicable privacy law.

6. Builder and website-project information

Builder requires website specifications in order to create the requested website.

Project data may include the domain, business information, website purpose, selected page types, content, styling preferences, brand settings, project settings, uploaded media and selected output platform.

Project data may be stored in private working directories while Builder, preview, checkout or export functions are active.

The Builder workspace is not intended to operate as indefinite customer cloud storage. Customers should retain their licensed website ZIP and their own backups as the durable copy used for future restoration.

7. AI-assisted planning

Omega Web Pro may use local AI-assisted functionality and, where configured, external AI service providers to help interpret or structure website planning information.

Where an external AI provider is used, Omega may send a compact or normalized representation of the project brief needed for the planning task rather than treating the provider as the permanent repository or authority for the entire website project.

The information sent depends on the task, configuration and provider.

Do not submit highly sensitive or unnecessary confidential information in a website brief.

Third-party AI providers process information under their own privacy and contractual arrangements, subject to the safeguards and legal requirements applicable to Omega's use of those providers.

8. Uploaded files and media

Uploaded files may be temporarily stored and processed for website generation.

Omega may transform uploaded images into responsive variants or other suitable formats for inclusion in the generated website package.

Only upload content you are authorised to use.

Uploaded files should not contain unnecessary personal, confidential or sensitive information.

9. Payments and Stripe

Payment checkout may be processed by Stripe .

Stripe may collect payment-card details and other information required to process the payment under Stripe's own privacy terms.

Omega Web Pro does not store full payment-card numbers, card security codes or the customer's complete card credentials.

Omega may receive and retain information needed to reconcile and fulfil a purchase, including:

• Stripe checkout/session identifiers;
• payment-intent or transaction references;
• payment status;
• purchaser email;
• purchaser name where provided;
• order ID;
• product purchased;
• amount and currency;
• website domain;
• other limited payment metadata required for fulfilment, accounting, security or support.

10. Purchase-created customer accounts

Omega Web Pro has no open public registration for paid customer accounts. A customer account is created from a confirmed paid purchase or another authorised licence process.

Account information may include:

• customer Account ID;
• verified login email;
• name;
• company or organisation;
• phone;
• postal/contact address;
• account status;
• account creation and update timestamps;
• associated licences.

A single customer account may contain multiple separately purchased website licences.

10.1 Passwords

Omega Web Pro does not intentionally store account passwords in readable plaintext.

Passwords are stored using one-way password hashing designed for authentication.

10.2 Account setup and reset links

First-time account setup and password-reset functions use secure, time-limited and single-use token mechanisms.

Where the system stores token records, it stores token hashes rather than needing to retain the raw emailed token as the authentication record.

10.3 Login email changes

Where My Account permits a login-email change, Omega may collect the requested new email address, confirm the customer's credentials and send a verification message before activating the new login email.

Changing a customer's account email does not change the historical purchaser information recorded against an existing commercial licence where that information is required as part of the licence or transaction record.

11. Lifetime licence and website records

To administer the Omega Web Pro Lifetime Single Website Domain Licence, Omega retains licence information such as:

• Licence ID;
• Website ID;
• customer Account ID;
• permanently licensed normalized domain;
• licence status;
• licence creation information;
• generation count;
• last generation information;
• output platform information;
• signed integrity information;
• associated order references.

These records are materially different from temporary Builder working files because they are needed to administer a continuing lifetime licence.

12. Security, audit and anti-abuse information

Omega may create or retain limited security and audit records reasonably necessary to:

• detect repeated failed logins;
• apply temporary account lockouts;
• enforce request or email rate limits;
• record licence-generation activity;
• investigate suspected tampering or fraud;
• validate licence and ZIP integrity;
• protect customer accounts and Alpha & Omega Limited.

These records may include timestamps, identifiers, security-event descriptions and other limited technical information.

13. Disclosure of personal information

We may disclose personal information where reasonably necessary to:

• payment providers, including Stripe;
• hosting, infrastructure and server providers;
• email or SMTP providers used to deliver transactional messages;
• AI service providers where an external provider is used for a requested planning task;
• IT, security, technical-support and professional service providers;
• accountants, auditors, insurers or professional advisers where necessary;
• a purchaser or successor in connection with a genuine proposed or completed sale, merger, restructure or transfer of the business, subject to appropriate legal safeguards;
• courts, tribunals, regulators and law-enforcement authorities where required or authorised by law;
• other recipients where you authorise disclosure;
• other recipients where permitted or required by applicable law.

We do not state that we “sell” customer personal information as part of the ordinary Omega Web Pro business model.

14. Overseas disclosure and international processing

Some service providers used by Omega may operate infrastructure or personnel outside New Zealand.

Where Omega discloses personal information to an organisation or person outside New Zealand for the purposes of Information Privacy Principle 12, we will use a lawful basis for that disclosure.

Depending on the circumstances, this may include taking reasonable steps to establish that the overseas recipient:

• is subject to the New Zealand Privacy Act because it carries on business in New Zealand;
• is subject to privacy laws that provide comparable safeguards;
• is required by binding contractual safeguards to protect the information to an appropriate standard;
• is covered by another lawful mechanism recognised under applicable law.

Where Omega relies on an individual's authorisation for an overseas disclosure to a recipient that may not provide comparable privacy safeguards, Omega will obtain that authorisation in the manner required by law, including expressly informing the individual of the relevant privacy consequence where required.

15. Cookies and local browser storage

Omega Web Pro may use cookies, sessions or browser storage where reasonably necessary for:

• secure authentication;
• customer sessions;
• CSRF/security protections;
• Builder state;
• user interface preferences;
• service operation.

Essential cookies or equivalent browser storage may be necessary for parts of the Site to function correctly.

If non-essential analytics, advertising or tracking technologies are introduced, Omega will update this Policy and use consent or preference controls where required by applicable law.

You may control cookies through your browser, although blocking essential cookies can prevent My Account, Builder or other authenticated functions from operating correctly.

16. Analytics and website measurement

Omega may use privacy-conscious technical or aggregate measurement to understand service operation and improve website performance.

If third-party analytics or advertising platforms that process identifiable or pseudonymous visitor information are added, this Privacy Policy will be updated and any legally required notices or consent controls will be implemented.

17. Marketing communications

Transactional messages needed for a purchase or account—such as account setup, password reset, purchase confirmation, licence messages and security notices—are distinct from marketing messages.

Where Omega sends promotional electronic messages, it will comply with applicable laws concerning consent, sender identification and unsubscribe facilities.

You may opt out of promotional messages using the unsubscribe facility provided or by contacting us.

Opting out of promotional messages does not prevent us from sending essential transactional or security communications concerning an active account, licence, order or support request.

18. How long we retain information

We do not intend to retain personal information longer than is reasonably required for the lawful purposes for which it may be used.

Different categories require different retention periods.

19. Storage and security

Alpha & Omega Limited uses physical, technical and organisational safeguards intended to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction.

Depending on the information and system, safeguards may include:

• HTTPS/TLS in transit;
• server-side private configuration;
• private storage outside the public web document root;
• password hashing;
• time-limited setup/reset tokens;
• session security;
• CSRF protection;
• rate limits and login lockouts;
• cryptographic licence/project integrity checks;
• restricted file permissions;
• controlled access to administrative systems.

No Internet transmission or storage system can be guaranteed absolutely secure.

You are responsible for protecting your own password, email account, computer, hosting credentials and downloaded licensed ZIPs.

20. New Zealand privacy rights

Subject to applicable exceptions and lawful grounds for refusal under the Privacy Act 2020, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to personal information we hold about you;
• correct personal information you believe is inaccurate or incomplete.

Where a correction request is not accepted, you may have rights under the Privacy Act concerning a statement of correction.

You may also make a privacy complaint.

To exercise a right, contact our Privacy Officer using the details at the end of this Policy. We may need to verify your identity before providing account or personal-information records.

21. Rights of international users

Privacy and data-protection rights differ between jurisdictions. Where an applicable foreign law gives you mandatory additional rights, those rights remain available to the extent required by that law.

21.1 European Union / European Economic Area

Where the EU GDPR applies to Omega's processing of your personal data, applicable rights may include:

• the right to be informed;
• access;
• rectification;
• erasure in applicable circumstances;
• restriction of processing;
• data portability where applicable;
• objection where applicable;
• rights concerning certain automated decisions where applicable;
• the right to complain to a competent supervisory authority.

The availability of a particular right depends on the relevant processing, legal basis and applicable exceptions.

21.2 United Kingdom

Where UK data-protection law applies, applicable rights may similarly include information, access, rectification, erasure, restriction, portability, objection and rights concerning certain automated decision-making, subject to the applicable law and exceptions.

21.3 Australia

Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to Alpha & Omega Limited's activities, Omega will comply with applicable requirements concerning collection, notification, use and disclosure, direct marketing, security, access, correction and overseas disclosure.

This Policy does not represent that the Australian Privacy Act applies to every transaction or visitor; applicability depends on the legal tests under Australian law.

21.4 Other jurisdictions

Residents of other countries or regions may have additional mandatory privacy or data-protection rights. Contact us if you wish to exercise a right that you believe applies to your information.

22. Children

Omega Web Pro is a commercial website-generation and licensing service and is not designed as a children's online service.

We do not intentionally seek unnecessary personal information from children.

If you believe a child has provided personal information to us without the authority or consent required by applicable law, contact us so the matter can be reviewed.

23. Privacy and data breaches

If Omega becomes aware of a privacy or security incident involving personal information, we will investigate and respond in accordance with applicable law.

Where a privacy breach meets the legal threshold requiring notification under New Zealand law, Alpha & Omega Limited will notify the Office of the Privacy Commissioner and affected individuals as required.

Additional overseas breach-notification obligations will be followed where applicable.

24. Links to third-party websites

Omega Web Pro may contain links to third-party websites.

We do not control those websites and this Privacy Policy does not govern the personal information you provide directly to them.

Review the privacy practices of third-party services before providing information to them.

25. Changes to this Privacy Policy

We may update this Privacy Policy when our information-handling practices, service providers, technologies or legal obligations change.

The current version will be published at:

https://omegawebpro.com/privacy.html

The “Last Updated” date at the top of the page identifies the current published version.

Where required by applicable law, material new uses of personal information will be brought to affected individuals' attention before the new processing begins.

26. Privacy questions and complaints

If you believe your personal information has been mishandled, contact our Privacy Officer first and provide enough information for us to investigate.

We will review the complaint and respond appropriately.

If you are not satisfied, you may have the right to complain to the Office of the Privacy Commissioner New Zealand or another competent privacy regulator where applicable.

27. Privacy Officer and contact details

Customer support: support@omegawebpro.com