Privacy Policy

Draft status

This is a working website policy draft for counsel review. It is not final legal advice and must be validated against actual processors, analytics tools, product behavior, and launch jurisdictions before publication.

Information we expect to collect

• Contact information submitted through forms, pilot requests, account creation, support, or sales conversations.
• Company and role information used to qualify pilots, package fit, procurement needs, and customer support.
• Account, authentication, billing, package, entitlement, and usage records when a user creates or uses an Omega account.
• Workflow, prompt, document, source, memory, evidence, and operational data submitted by customers inside OmegaOS.
• Website telemetry, device, browser, referral, consent, and cookie preference data, subject to cookie and privacy choices.

How information is used

• Provide, secure, operate, support, and improve OmegaOS and related services.
• Respond to pilot, sales, support, legal, privacy, and procurement requests.
• Run governed AI workflows, including source-backed memory, evidence, review, billing, and operational telemetry.
• Measure website performance, campaign attribution, conversion, and customer acquisition where permitted.
• Comply with legal, security, audit, tax, accounting, fraud prevention, and dispute obligations.

AI and customer data

Public launch copy must not claim that customer data is never used to train models unless the final architecture, provider contracts, routing, retention, and opt-out controls support that statement. The safer launch posture is that Omega will publish its AI data-use posture before customer production onboarding.

Privacy rights

• Request access to personal information, subject to verification and legal limits.
• Request correction or deletion where applicable.
• Request portability where applicable.
• Object to or restrict certain processing where applicable.
• Opt out of sale or sharing of personal information where applicable.
• Withdraw cookie consent where consent is used.

Contact

Draft contact placeholders: privacy@omeganeural.com for privacy requests and legal@omeganeural.com for legal notices. Final contacts must be confirmed before publication.

Scope

This draft applies to Omega Neural public websites, pilot intake, waitlists, events, sales conversations, support interactions, account creation, and OmegaOS services that link to this policy. It does not replace a customer contract, DPA, order form, enterprise addendum, or a separate privacy notice for a specific product or jurisdiction.

Legal bases and consent posture

• Contract necessity for account, pilot, subscription, support, billing, entitlement, and service-delivery activity.
• Legitimate interests for security, fraud prevention, product improvement, B2B sales operations, and service administration, subject to applicable law.
• Consent for non-essential cookies, certain marketing communications, and other activities where consent is required.
• Legal obligation for tax, accounting, security, sanctions, dispute, regulatory, and compliance records.
• Customer instructions where Omega acts as a processor or service provider for customer content under a DPA or similar agreement.

How we share information

• Service providers and subprocessors that help host, secure, support, analyze, communicate, process payments, provide AI/model routing, and operate OmegaOS.
• Customer-authorized integrations, connectors, MCP clients, marketplaces, or third-party tools selected by the customer or workspace administrator.
• Professional advisers, auditors, insurers, banks, payment processors, legal counsel, tax advisers, and compliance reviewers where needed.
• Public authorities, regulators, courts, or counterparties where required by law, legal process, contract enforcement, security, or rights protection.
• Successors or transaction parties in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate protections.

Customer content and controller responsibilities

Customers are responsible for the data they submit to OmegaOS, including obtaining required rights, consents, notices, lawful bases, and authority. Where Omega processes personal information on behalf of a customer, the DPA or customer agreement should govern controller, processor, service-provider, subprocessor, deletion, security, and transfer obligations.

International transfers

Information may be processed in countries where Omega, its affiliates, service providers, model providers, and subprocessors operate. Final launch terms must define applicable transfer mechanisms, such as standard contractual clauses or other lawful transfer mechanisms where required.

Children

OmegaOS is intended for business and professional use. It is not directed to children, and Omega should not knowingly collect personal information from children without appropriate authorization and legal review.

Changes to this policy

Omega should show a last updated date, preserve prior versions where appropriate, and provide notice of material changes where required by law or contract.