Trax OmniWho this policy covers
Trax Omni is operated by UI Trax in Lahore, Pakistan. This policy covers our CRM website, workspace, mobile clients and connected CRM services. Contact info@traxomni.com or info@uitrax.com. The separate UI Trax marketing website may use different services and has its own privacy notice. For customer records placed in a company workspace, that company determines the purposes of processing; UI Trax processes those records to provide the service. We handle our own account, support, security and billing information for operating Trax Omni.
Information we process
Account information includes name, email, phone number, industry, company membership, role and authentication records. Workspace information includes leads, contacts, notes, tasks, messages, pipeline stages, files, reports and business activity. Technical information can include IP address, browser or device information, session records, security events and push-notification identifiers. Support and billing records include enquiries, plan details, transaction identifiers and payment status. Card details are handled by the payment provider when that provider is enabled; do not send card details to support.
Facebook, Instagram and Meta lead forms
When an authorized company administrator connects a Meta account, we use the permissions granted to identify and select authorized Pages, retrieve lead-form submissions and import them into that company’s CRM. A submission may include name, email, phone number and other answers supplied in the form, together with form, Page and lead identifiers. Page information supports connection management. Advertising information and campaign actions are used only for the authorized advertising features you choose. Connected-account credentials are kept on the server and protected with application encryption. We do not sell Meta-derived personal data. Connecting a Page does not authorize access to every Page or another company’s workspace.
WhatsApp, email and calendar connections
Enabled connections process the messages, delivery status, authorized mailbox information or calendar information needed for the selected feature. WhatsApp Business setup requires appropriate account authorization and may require Meta approval, templates and provider charges. Disconnecting a CRM connection stops future access through that connection but does not automatically erase messages, calendar events or permissions in the provider’s own systems. You may also revoke permissions directly with Meta, Google, Microsoft or your other provider.
Voice, meetings and optional AI
Voice notes, recordings, transcripts, selected images and request text may contain personal information. Record or upload them only with the necessary participant consent and authority. Optional transcription, meeting and AI features may send selected content to the configured external provider after the consent or confirmation required by that feature. Review proposed CRM changes before confirming them. Provider retention rules also apply. Do not upload unnecessary sensitive information. Turning off a feature does not itself delete copies already held by the external provider.
Why we use information
We use information to create and authenticate accounts, provide and secure workspaces, deliver selected communications and integrations, process billing, respond to support, prevent abuse and meet legal obligations. Where applicable, processing relies on performance of our agreement, consent for optional processing, legitimate interests in reliable and secure operation, or legal obligations. A workspace administrator is responsible for a lawful basis and notices for their customer and staff information.
Who can access it
Access depends on workspace roles and record permissions. Company owners can review company records and business activity. Managers and employees receive access allowed by their assigned role and team. Authorized UI Trax personnel may access information when needed for support, security or service operation. Hosting, email, notification, payment and configured integration providers process information needed for their services. We may disclose information when legally required or necessary to protect rights and investigate abuse. We do not sell personal information.
Hosting and international transfers
The current Trax Omni deployment is hosted on Amazon Web Services in Sydney, Australia. Connected providers may process information in other countries. This may involve a transfer outside your country. Where applicable, transfers require appropriate safeguards or another permitted legal basis. Provider locations and terms depend on the integrations you enable. Contact us for questions about a particular connection.
Retention and security
We retain account and workspace information while needed to provide the service, and retain information where necessary for legal, billing, security or dispute purposes. Retention varies by record type and enabled provider; we do not promise a universal deletion deadline for backups or external services. We use controls such as password hashing, encrypted connection credentials, access checks and revocable sessions. No service can guarantee absolute protection against every attack. Report suspected unauthorized access to info@traxomni.com.
Your choices and deletion
You can update account information, disconnect integrations and request access, correction or deletion, subject to applicable law and the company’s responsibilities. Account security offers account-data deletion; company owners must first transfer ownership as required. Personal account deletion is different from deletion of company customer records. See the Data Deletion page for steps, retained company content and assistance when you cannot sign in. We verify requests without asking you to send passwords, access tokens or authenticator codes by email.
Cookies, children and changes
Essential cookies support sign-in, session security and CSRF protection. Connected tools may use their own cookies under their policies. Trax Omni is a business service and is not intended for children. Do not intentionally submit children’s information without a lawful purpose and appropriate safeguards. We may update this notice; the updated date appears below and material changes will be communicated where appropriate.
Billing and refunds
Our standard policy is no voluntary refunds for paid subscriptions, subject to mandatory legal rights and the payment provider’s applicable terms. Billing and refund rules do not limit your privacy rights. Read the Refund Policy and Terms of Service before purchasing.