Privacy Policy
Last updated: July 10, 2026
Welcome to omnicastvr.com and to the portal portal.omnicastvr.com (hereinafter “our services”), operated by NOVALAB, a simplified single-shareholder company (SASU) with a share capital of €1,000, whose registered office is at 8 rue du Dobropol, 75017 Paris, France, registered under SIRET number 878 764 737 00010.
We are committed to protecting the privacy of your personal data. This policy describes how we collect, use, process and protect the information you provide when you visit our website, use our portal and use our software.
NOVALAB is a French company, hosted in France, and complies with the General Data Protection Regulation (GDPR) (EU) 2016/679.
Data controller: NOVALAB — contact: support@omnicastvr.com
1. Collection of personal data
We collect personal data through three distinct touchpoints.
a) Contact form (omnicastvr.com website)
Data collected: last name, first name, email, phone, company name.
This data is stored directly in our Supabase database.
Legal basis: legitimate interest (handling your contact request).
b) Activation and license management portal (portal.omnicastvr.com)
This portal is the main collection point for prospect and customer data. It covers three distinct moments:
- Sign-up : last name, first name, organisation, email, phone.
- Registering a workstation for the free trial : a machine hardware fingerprint, in hashed and non-reversible form (see section 3), is associated with your account in order to generate and control access to the trial.
- License order : chosen plan, number of licenses, order and billing information. Payment is not finalised directly on the portal: an invoice is sent to you separately, paid by bank transfer and/or by credit card via Stripe. In the latter case, your payment data is entered directly on the secure Stripe interface, our payment processor, and never transits through nor is stored on our servers.
Once the license is activated, this same portal hosts your login credentials and your fleet management data (registered headsets, device status, managed organisations). Legal basis: pre-contractual measures at your request (sign-up, free trial) and performance of the contract (order, account management).
c) Technical data transmitted by the OmnicastVR software (application telemetry)
Once a license is activated on a workstation, the software transmits a limited amount of technical data to our servers:
- A machine identifier (machine_uid) hashed with SHA-256, non-reversible to the raw hardware identifier;
- The installed application version;
- Aggregated internal usage counters (number of sessions, streaming duration, actions performed on devices).
No video stream, screen image, user file or headset content is transmitted, stored or processed on our cloud servers: headset control and video feedback (SCRCPY streaming, ADB commands) transit exclusively through your local network (LAN/USB), between the headset and the Windows workstation.
Legal basis: performance of the contract (license management) and legitimate interest (product improvement, support).
2. Data hosting and location
In line with the principle of data sovereignty, we have selected partners guaranteeing a high level of protection:
Database and authentication (Supabase) :
All data described in section 1 is hosted on servers physically located in France, AWS Europe-Paris region (eu-west-3). No transfer of this data outside the European Union takes place on this basis. Our Supabase subscription (Pro plan) includes automatic daily database backups, with a rolling 7-day retention. Supabase, as an infrastructure provider, is SOC 2 Type II and ISO 27001 certified on its platform.
Web hosting (Netlify) :
Our websites and portals are delivered via a content delivery network (CDN) relying on AWS infrastructure.
Payment (Stripe) :
When you pay an invoice by credit card, your payment data is processed directly by Stripe, our payment service provider, in accordance with its own privacy policy. We never receive or store your credit card number.
3. Security and “Privacy by Design”
The OMNICASTVR software and the portal portal.omnicastvr.com have been designed to minimise data collection:
Local video stream :
Headset screen feedback transits exclusively via your local network. No video stream, image or screen capture is sent, stored or processed on our cloud servers.
Offline operation :
Once the license is activated, the software works autonomously, without a permanent internet connection. If our backend is temporarily unavailable, a locally encrypted license cache (Electron safeStorage) takes over, valid for 30 days from the last successful synchronisation.
Machine identifier minimisation :
The workstation identifier transmitted (machine_uid) is hashed with SHA-256 as soon as it is generated on the workstation, without privilege elevation or transmission of raw hardware data.
Encryption :
All communications with our web portal are encrypted via the TLS/SSL protocol.
4. Cookies and consent banner
On your first visit, a cookie management banner is displayed and remains visible until you have made a choice. Three categories are distinguished:
| Category | Default status | Editable | Role |
|---|---|---|---|
| Functional | Enabled | No (always on) | Required for the site to work |
| Analytics | Disabled | Yes | Anonymised audience measurement |
| Marketing | Disabled | Yes | Advertising tracking / retargeting |
You can accept all, refuse all (only functional cookies will remain active), or customise your choice category by category. This choice can be modified at any time via the “preferences” button on the banner.
No analytics or advertising cookie or tracker is set before you have given your explicit consent. Our measurement and marketing tools (via Google Tag Manager) only fire if you have enabled the corresponding category.
Your choice is stored locally in your browser (local storage, technical key omnicast-cookie-consent) and is not sent to any of our servers. You can reset it at any time by clearing this site’s browsing data in your browser.
5. Purposes of processing
The data described in section 1 is used to:
- Respond to your information requests;
- Allow you to create an account and benefit from the free trial on the portal;
- Activate, manage and secure your OMNICASTVR software licenses;
- Process your license orders;
- Provide technical support and manage the commercial relationship;
- Improve the product based on aggregated usage counters;
- Comply with our legal obligations.
6. Retention period
Your personal data is retained only for as long as necessary for the purposes set out above — for example, the duration of your contractual relationship (account, active license) increased by the applicable legal retention periods (in particular for accounting and tax obligations for billing data).
7. Your rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access: obtain confirmation that your data is being processed and receive a copy of it;
- Right to rectification: have inaccurate or incomplete data corrected;
- Right to erasure: request the deletion of your data, within the limits provided by law;
- Right to restriction of processing;
- Right to object, in particular for processing based on legitimate interest;
- Right to portability of the data you have provided to us;
- Right to withdraw your consent at any time, where processing is based on it;
- Right to lodge a complaint with the French CNIL (www.cnil.fr).
To exercise these rights, contact our data controller:
We are committed to responding within 30 days (this period may be extended by 2 months for complex requests, in accordance with the GDPR).
8. Changes
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This policy may be updated to reflect any changes in our processing activities; the last update date is shown at the top of this document.