We collect what we need to sell and deliver plugins. We don't sell your data, run ads, or track you across the web.

OMNICORP is a trade name of RAC Production Inc., an Oregon corporation with a corporate mailing address at 501 Madison Avenue, Suite 704, New York, NY 10022-5501. This policy explains what data we collect when you use omnicorp.audio, why we collect it, who else touches it, and what rights you have.

Quick summary

We collect your email and purchase history so we can sell you plugins and let you re-download them.
We use Stripe for payments. We never see your card number.
We use a few well-known service providers (listed below) to run the site.
We don't use Google Analytics, advertising pixels, or cross-site tracking cookies.
If you want to access, correct, or delete your data, email support@omnicorp.audio.

What we collect

Account information

When you create an account, we collect your email address and either a password or a Google sign-in identity. Authentication is handled by our provider Clerk. We never see or store your password directly. We store your email and a Clerk user ID in our database so we can link your purchases to your account.

Purchase information

When you buy a plugin, Stripe collects your payment details and (depending on what they require for the transaction) your billing address and country. Stripe holds the card number; we don't. After the purchase, Stripe sends us a transaction record that includes the items purchased, transaction ID, date, amount, currency, and the email and billing country associated with the order. We store that record so we can show you your purchase history, send you receipts, and process refunds.

Entitlements and downloads

We track which plugins your account owns. When you download a plugin installer, we log the download — including a timestamp, your IP address, and your user-agent string — so we can detect abuse (for example, one account being used to mass-download by many different people).

Support emails

If you write to support, we keep the email so we have context for the conversation and a record of how the issue was resolved.

Server logs

Our hosting provider (Vercel) keeps standard request logs — IP address, user-agent, URL requested, timestamp, response code. We use these for security monitoring and debugging. They roll off on Vercel's standard schedule.

What we don't collect

We don't collect data about your music, what you make with our plugins, what other plugins you have installed, or what DAW you use. The plugins themselves don't phone home.

How we use what we collect

We use your data to:

Create and maintain your account
Process your purchases and issue receipts
Let you download what you've bought
Send you transactional email (account confirmations, "your download is ready," refund notices)
Detect and prevent fraud or abuse
Respond to support requests
Comply with our tax and legal obligations

That's it. We don't use your data for advertising, profiling, or resale.

Cookies and tracking

We use functional cookies set by Clerk to keep you signed in. Without them, the site can't tell you're logged in.

We use Vercel's built-in edge analytics, which are aggregate (page views, performance metrics) and not tied to individual users.

We don't use Google Analytics, Facebook Pixel, advertising cookies, or third-party trackers.

Service providers

We use these third-party services to run OMNICORP. Each one only sees the data it needs to do its job.

Clerk (authentication): handles sign-in, password storage, and Google OAuth. Sees your email and password (or Google identity). clerk.com/legal/privacy
Stripe (payments): processes card payments. Sees your payment details, billing information, and email. stripe.com/privacy
Neon (database): hosts our PostgreSQL database. Holds your account record, purchases, entitlements, and download log. neon.tech/privacy-policy
Vercel (hosting): runs the website and serves it to your browser. Sees request logs. vercel.com/legal/privacy-policy
Cloudflare R2 (file storage): stores plugin installer files and serves them via short-lived signed URLs. Sees download requests. cloudflare.com/privacypolicy
Resend (email): sends transactional emails (download links, refund notices, account messages). Sees your email address and the message content. resend.com/legal/privacy-policy
Cloudflare (DNS): routes traffic for omnicorp.audio. Doesn't process customer account data. cloudflare.com/privacypolicy

If we add or change a service provider, we'll update this list.

International transfers

OMNICORP is operated from the United States, and the providers listed above are mostly US-based. If you're in the EU, UK, or another region with data protection laws, your data is being transferred to and processed in the United States. By using the site, you consent to that transfer. We rely on each provider's standard contractual clauses and equivalent mechanisms where applicable.

How long we keep your data

Account data is kept until you delete your account.
Purchase records are kept for as long as we need them for tax, accounting, and legal compliance — typically seven years from the date of the transaction. This is true even if you delete your account, because we're required to keep transaction records.
Download logs are kept for a limited period for abuse prevention and then aged out.
Server logs roll off on our hosting provider's standard schedule (typically days to weeks).
Support emails are kept as long as we find them useful for context.

Your rights

Depending on where you live, you may have rights to:

See what data we have about you
Correct it if it's wrong
Delete it (subject to records we have to keep for legal reasons)
Get a portable copy of it
Object to or restrict certain processing
Withdraw consent

To exercise any of these rights, email support@omnicorp.audio from the address on your account. We'll respond within a reasonable time, usually within 30 days. We may need to verify your identity before acting on a request.

If you're in the EU or UK and you think we're handling your data improperly, you have the right to complain to your local data protection authority. We'd appreciate the chance to address it first, though.

If you're in California, the CCPA gives you similar rights. We don't sell personal information and we don't share it for cross-context behavioral advertising.

Children

OMNICORP is not directed at children under 16, and we don't knowingly collect personal information from them. If you believe a child has created an account or sent us information, email support@omnicorp.audio and we'll delete it.

Security

We use industry-standard practices to protect your data — TLS in transit, encryption at rest where our providers offer it, scoped access for installer downloads via short-lived signed URLs. No system is perfectly secure, but we work to keep yours safe.

If we ever experience a breach that affects you, we'll notify you as required by law.

Changes to this policy

If we change this policy, we'll post the updated version here with a new "last updated" date. If the change is meaningful, we'll try to give notice through the site or by email.

Contact

Questions, requests, or complaints? Email support@omnicorp.audio or write to RAC Production Inc., 501 Madison Avenue, Suite 704, New York, NY 10022-5501.

Last updated: 2026-05-04 Contact: support@omnicorp.audio