Privacy Policy
This Privacy Policy explains how Omelion collects, uses, stores, and protects information when people visit our website, use the platform, or connect approved third-party services.
What information we collect
We may collect information you provide directly, including names, email addresses, phone numbers, company details, account settings, support requests, and recruitment workflow data entered into the service.
We may also collect technical and operational data such as authentication events, browser or device metadata, usage logs, activity records, and other information needed to operate, secure, and support the platform.
- Account, profile, and company information.
- Candidate, client, job, workflow, and communication records created in the service.
- Operational logs, authentication events, and support-related information.
How we use information
We use information to provide the service, maintain user accounts, support recruitment workflows, secure the platform, respond to support requests, investigate abuse or incidents, and comply with legal obligations.
We may also use service data to maintain and improve the reliability, safety, and functionality of Omelion, provided that use remains consistent with our service relationship and applicable law.
- To deliver platform features and requested customer workflows.
- To authenticate users, enforce permissions, and maintain auditability.
- To troubleshoot, support, secure, and improve the service.
Microsoft and other third-party integrations
If a customer or authorized user connects Microsoft 365, Microsoft identity services, or another Microsoft service, Omelion uses the access granted by that customer only to provide the requested integration features inside the platform.
That means Microsoft-connected data is used to support approved workflow features such as connected inbox, sign-in, or related operational integrations. It is not collected for unrelated commercial exploitation outside the service relationship.
- Access is limited to the scopes and permissions the customer or authorized user grants.
- We use that access to provide, secure, maintain, troubleshoot, and support the integration, or as required by law.
- Microsoft remains a third-party provider, and its own terms and privacy practices continue to apply.
Security and retention
Omelion uses technical and organizational measures designed to protect personal data and customer information. These measures are intended to support secure authentication, access control, session management, auditability, and restricted administrative access.
We retain information for as long as reasonably needed to provide the service, meet contractual or legal obligations, resolve disputes, enforce agreements, and support legitimate business operations. Retention periods can vary based on the type of data and the customer relationship.
- Role-based and permission-based access controls.
- Authentication and session controls designed to reduce unauthorized access.
- Reviewable operational logs and controlled support access where needed.
Questions and requests
If you have questions about this Privacy Policy, need procurement or security-review support, or want to discuss Microsoft integration scopes, please contact us through the Omelion contact page.
We can walk through the platform, security model, and customer-authorized Microsoft integration approach with your team.