Privacy Notice

Last updated: 28 October 2026

Who we are. The controller of your personal data is Omniware. Omniware is a trading name of Multiverse Technology LLC, commercial registration number 1366655, Sultanate of Oman. Address: 3rd Floor, Mazoon Square, Muscat, Oman. Omniware runs RevenueGuard Audit Agents. Contact for privacy questions and data requests: reports@tryrevenueguard.com.

What we collect and why

Data Why Legal basis Kept
Your email address and the time you confirmed it Send your confirmation link and reports; enforce one free report per email and per website Contract Monthly scans subscribers: while your plan is active, then 12 months from your last contact with us. Everyone else: 12 months from your last report or contact with us
Website address, business name and trade (optional) Run the scan and word the report Contract Same as your email address
Ownership confirmation (the tick box and when you ticked it) Show you asked for the scan of a site you own or manage Legitimate interests Same as your email address
Free report markers (a hashed copy of your email address, and the website address) Enforce one free report per email and per website Legitimate interests 12 months, then deleted
UK and EU start-now tick on the order form, and the time you ticked it Show you asked us to start your scan straight away and understood that you lose your 14-day right to cancel Contract and legal obligation Kept with your order record
Reports, PDFs, screenshots, page code, speed data and report data for the scanned site Produce your report and let you see it again Contract Monthly scans: while your plan is active and for 30 days after it ends, then deleted. Free and one-off reports: up to 90 days, then deleted
Dashboard sign-in data: your email address and a hashed sign-in token Send your sign-in link and keep your dashboard secure Contract Sign-in token: until it expires. We don't keep a log of when you sign in
One extra email address a subscriber adds to receive their reports Send reports to that person Legitimate interests of the subscriber and us Kept and deleted in the same way as the subscriber's own email address
Order records from Lemon Squeezy (order number, amount, refund status) Accounting and refunds Legal obligation For the period tax and accounting law requires
Hashed IP address and request counts Prevent abuse and enforce limits Legitimate interests 24 hours, then deleted
Support emails Answer your questions Contract and legitimate interests 12 months from your last contact with us
Marketing opt-in on the order form (whether you ticked it, and the time) and your email address for marketing Send you news and offers about RevenueGuard, only if you tick the optional box Consent, which you can withdraw at any time with the unsubscribe link in any marketing email or by emailing reports@tryrevenueguard.com Until you withdraw consent. After that we keep a suppression record of your email address so that we do not send you marketing again

Report links. Report links in our emails last 7 days. After that, Monthly scans subscribers can sign in to the dashboard, and anyone else can email reports@tryrevenueguard.com for a new link while the report is still kept.

Extra email address for reports. A Monthly scans subscriber may add one extra email address to receive their reports. The subscriber must have that person's permission first. The person can ask us at any time to remove their address, by emailing reports@tryrevenueguard.com. We keep and delete that address in the same way as the subscriber's own.

Automated processing. Reports are produced entirely by software. This has no legal or similarly significant effect on you, so GDPR article 22 does not apply, but you can ask us about any result.

Websites we scan. We load public pages only, submit nothing and collect no data about the site's visitors. Screenshots may show names or photos published on the site. They are kept for up to 90 days for free and one-off reports, or while the Monthly scans plan is active and for 30 days after it ends, then deleted. Site owners can ask us never to scan their site at tryrevenueguard.com/bot, and we will delete any report on their site that they did not request. We keep the request so that we can keep honouring it.

Who processes your data for us

International transfers. We store and process your data mainly in the UK, in the Amazon Web Services London region. Some providers, including Lemon Squeezy and Cloudflare, may process data in other countries, such as the US. Where the law requires it, we rely on safeguards such as standard contractual clauses or adequacy decisions, and we transfer personal data out of Oman only as Oman's Personal Data Protection Law allows.

Your rights. You can ask for access, correction, deletion, restriction, objection and portability, and you can withdraw consent at any time. You can also complain to your regulator: the UK ICO, your EU data protection authority, the OAIC in Australia, or Oman's Ministry of Transport, Communications and Information Technology. Email reports@tryrevenueguard.com; we reply within one month.

Cookies. When a Monthly scans subscriber signs in to the dashboard, we set one cookie:

Cookie Purpose Duration Type
Session cookie Keeping you signed in to the dashboard 7 days Strictly necessary

Because this cookie is strictly necessary to provide the dashboard you asked for, we do not need your consent for it and we show no cookie banner. The Cloudflare Turnstile bot check on our forms may store technical data needed for security. We use no analytics or advertising cookies.