Privacy
How OmniHMI handles personal data. Last revised 30 September 2026.
Who is responsible
OmniHMI is a product of ArcGabriel Ltd, the controller of any personal data described here. Questions and requests go to Philip Martin at design@omnihmi.com.
What is held, and why
OmniHMI is in development. If you sign in, it holds your email address, when you signed in, the organisations you belong to and your role in each, and the work you create there: projects, the screen settings you chose, every design brief exactly as you wrote it, and any cabin model you upload. It holds these to provide the service to you and your organisation, under the contract you enter by using it. Briefs are treated as commercially confidential: they are never written to logs or to the audit record.
It also keeps an audit record that things happened (a sign-in, a project created, a member added), with an identifier and never the content.
Cookies
One cookie, set only when you use sign-in or the application, keeps you signed in. It is strictly necessary, lasts up to 30 days and carries no tracking. The public pages set none, and there is no analytics or advertising.
Marketing
Nothing about you is shared for marketing unless you turn it on in Settings, and turning it off stops it. When on, the brief, previews and package links of your completed generations may be passed to ArcGabriel's marketing team so they can follow up with you.
Who else handles it
The service runs on Railway. Sign-in and invitation emails are sent through Resend, which receives the address and the link. Cloudflare provides the domain's DNS. Each processes data only to provide its service, and may record technical connection details, such as an IP address, in its own logs. No data is sold.
If you email us at design@omnihmi.com, your message is received through Resend and kept in our inbox, as text, until we delete it or you erase your account.
When you generate a design, your brief, framed as a design request, is sent to fal.ai (Features and Labels Inc., USA) to make the concept preview, and the preview goes back to fal.ai once so its lettering can be checked. Nothing else about you goes with either: not your name, your address or your organisation. Generated previews and packages are kept privately, on the service's own storage or in Cloudflare R2, and are only ever sent to members of your organisation.
Sub-processors
| Who | What for | What they receive | Where |
|---|---|---|---|
| Railway Corporation | Runs the service and its database | Everything the service holds | EU (Amsterdam) |
| Cloudflare, Inc. | The domain's DNS; private storage of previews, packages and encrypted backups (R2) | Connection details; stored files | EU jurisdiction for storage |
| Resend (Plus Five Five, Inc.) | Sends sign-in and invitation emails; receives mail to hello@ | Email addresses, the messages themselves | EU (Ireland) |
| fal.ai (Features and Labels Inc.) | Makes the AI concept preview, then reads its lettering so invented words can be removed | Your brief, framed as a design request, and the preview it made; nothing that identifies you | USA |
How long
Your account and your work are kept until you erase them. Spent sign-in links are cleared within hours. Verified backups of the database are kept for up to 30 days.
Your rights
You can erase your account and everything held about you yourself, at any time, from Settings (/account/erase). An organisation where you are the only member goes with it. You can download a copy of everything held about you yourself, from Settings (Download my data). You may also ask for it to be corrected by writing to the address above, and you may complain to the Information Commissioner's Office.