Privacy
Privacy
The short version: your images never leave your machine, and we do not want them.
Last updated 8 September 2026
Medical images
OmniDICOM opens, decodes, renders and processes studies entirely on the computer in front of you. No image, file name, study description or patient detail is ever transmitted to us, under any setting, including while using AI enhancement. There is no upload step and no cloud processing.
The application does make outbound connections to the PACS and DICOMweb nodes you configure. Those are your servers, and what travels there is governed by your own arrangements, not by us.
What licensing sends
To keep a licence valid the application contacts our licence service. That is the only connection it makes to us, and it carries:
- your licence key — once, when you first activate;
- afterwards, a signed licence token and a salted hash of a machine identifier. The underlying hardware identifier never leaves your computer;
- when you start a trial, a device hash, device label and application version so reinstalling does not restart the trial;
- a device label you can recognise (for example "MacBook Pro"), so we can help when you ask us which machine holds a licence;
- the application version.
This happens about once a day while you are online. It carries no image data and no patient information.
Purchase
Payment is handled by Paddle as merchant of record. Paddle collects your email address and billing details and passes us the email address so we can send your licence key and support you. Licence emails are delivered through our transactional email provider, Resend, which receives the destination address and message content needed to deliver them. Cloudflare hosts our website and licensing service. We do not receive or store card numbers. Paddle's privacy notice covers what they hold.
Diagnostics
The application does not automatically upload crash reports to us. If you send a report to support, remove patient information, image data and private file paths first. We use the technical information you choose to provide to investigate the problem.
Website
Our pages use externally hosted web fonts. When you open a checkout, Paddle processes the connection and payment information needed to complete your purchase and may use cookies or similar technologies under its privacy notice. We do not add advertising trackers. Our hosting and licensing services process technical request information for security, rate limiting and service operation.
Retention and your rights
We keep the licence and activation records needed to provide your subscription while it remains active. After it ends, we retain only records needed for support, fraud prevention or a legal obligation, and delete or anonymise the rest. Where Korean transaction-record retention rules apply to records we hold, contract, cancellation, payment and supply records are retained for five years, and complaint or dispute records for three years. Paddle maintains its own payment records under its privacy notice. Device hashes and trial dates are retained to prevent repeated free trials; they contain no medical images. You can ask us for a copy of what we hold, or ask us to delete it, at contact@omnidicom.com — deleting your licence records ends the licence.
Data controller: 옴니다이콤 (OmniDICOM), business registration number 104-43-02097, contact@omnidicom.com.