PRIVACY POLICY
OM Intelligence Inc.
A Delaware Corporation
Effective Date: March 24, 2026
Last Revised: March 24, 2026
OM Intelligence Inc. (“Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you access or use our website at om-intelligence.com and any subdomains, mobile applications, APIs, or successor services (collectively, the “Service”). This Privacy Policy is incorporated into and subject to the Terms of Service. Capitalized terms not defined herein have the meanings given in the Terms of Service.
By accessing or using the Service, you consent to the collection, use, and processing of information as described in this Privacy Policy. If you do not agree, you must not use the Service.
OM Intelligence acts as a data controller with respect to account information, usage data, and operational data. With respect to User Content (documents, deal data, and other materials you upload or input), the Company acts primarily as a data processor on your behalf. Where required by applicable law (including GDPR or CCPA/CPRA), the Company will enter into a Data Processing Agreement (DPA) or equivalent addendum upon request.
We treat User Content as confidential. We do not access, use, or disclose User Content except as necessary to provide, maintain, and improve the Service, or as required by law. Access to User Content is restricted to authorized personnel on a need-to-know basis and to automated systems necessary for Service delivery.
In the course of providing the Service, we generate and store the following data associated with your account:
We do not intentionally collect sensitive personal identifiers such as Social Security numbers, bank account numbers, credit card numbers, health information, or government-issued identification numbers. If such information is included in uploaded documents, it will be processed as part of document extraction but is not separately identified, indexed, or used by the Company for any purpose other than delivering the Service.
We use information collected through the Service for the following purposes:
Uploaded documents are stored in association with your account and are retained for as long as your account is active or as needed to provide the Service. You may request deletion of specific documents at any time. Upon account termination, uploaded documents will be deleted after a reasonable retention period (typically 30 days) to allow for data export.
Extracted fields, evidence candidates, traced values, governance records, scenarios, overrides, and other structured deal data are retained for as long as your account is active. This data is necessary to provide the Service, including audit trails, lineage tracking, and historical analysis. Upon account termination, structured data will be deleted in accordance with Section 4.1.
Generated exports (PDFs, Excel files) are available for download but may not be permanently retained by the Service. The Company does not guarantee the long-term availability or reproducibility of any Service Output. Users are strongly encouraged to download and maintain independent copies of all Service Outputs they wish to preserve, as the Company does not guarantee long-term availability or reproducibility of generated exports.
Account registration information (name, email, company) is retained while your account is active. You may request deletion of your account and associated personal information by contacting support@om-intelligence.com. We will process deletion requests within 30 days, subject to any legal retention requirements.
We retain device data, usage logs, analytics data, and error logs for security, debugging, and service improvement purposes, typically for 12 to 24 months. This data may be retained in anonymized or aggregated form beyond that period.
Chat interactions (your queries and system-generated responses) are stored in association with your account and the relevant deal. Chat history is retained for as long as the associated deal exists in your account. You may request deletion of chat history for specific deals.
User Content may be transmitted to third-party AI service providers for data extraction and analysis. Current providers include Anthropic (Claude) and OpenAI (GPT-4). These providers process User Content as necessary to perform extraction and generate analysis results. By using the Service, you consent to the transmission and processing of User Content by such providers.
We select AI providers that maintain commercially reasonable data handling safeguards and contractual commitments regarding data use. However, data transmitted to third-party AI providers is subject to those providers’ own privacy policies and data practices, which are outside the Company’s direct control.
We do not use User Content to train proprietary AI models. User Content transmitted to third-party AI providers is sent via API for transient processing only. We select API configurations and provider agreements that are designed to prevent the use of User Content for model training by third-party providers. However, the Company cannot independently audit or guarantee the internal data handling practices of third-party AI providers. Users who require absolute assurance that their data will not be used for model training should review the applicable provider’s data policies directly. Users with heightened sensitivity regarding data usage for model training should consider this limitation before uploading highly confidential documents.
The Service is hosted on Amazon Web Services (AWS) infrastructure located in the United States (us-east-1 region). User Content and account data are stored on AWS services including but not limited to RDS (PostgreSQL), S3, ECS, and CloudFront. AWS maintains its own security certifications and compliance programs.
We may share information with service providers who assist in operating the Service, including email delivery, analytics, monitoring, and payment processing. These providers are contractually bound to use your information only as necessary to perform services on our behalf and to maintain appropriate security measures.
We may engage additional subprocessors to assist in providing the Service. All subprocessors are subject to comparable data protection obligations. We maintain an internal record of subprocessors and will notify enterprise customers of material changes to subprocessors where required by applicable data processing agreements.
We do not sell personal information. We do not use personal information or User Content for advertising, profiling, or marketing purposes unrelated to the Service. We may disclose information in the following circumstances:
We implement reasonable technical, administrative, and physical safeguards designed to protect information transmitted to and stored within the Service, including:
While we implement commercially reasonable safeguards, no system is completely secure, and we cannot guarantee that unauthorized access, data breaches, or security incidents will never occur. The Company does not guarantee the security, integrity, or confidentiality of any data transmitted to or stored within the Service. You transmit information at your own risk.
The Service is operated from the United States. All data, including User Content, account information, and Service Outputs, is stored and processed in the United States (AWS us-east-1, N. Virginia). If you access the Service from outside the United States, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.
Data transmitted to third-party AI providers may be processed in locations determined by those providers. The Company does not control the data processing locations of third-party AI providers.
Where personal data is transferred from the European Economic Area, United Kingdom, or Switzerland to the United States or other jurisdictions, we rely on Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent transfer safeguards as required by applicable law.
Depending on your jurisdiction, you may have the following rights with respect to your personal information:
To exercise any of these rights, contact support@om-intelligence.com. We will respond within 30 days or such shorter period as required by applicable law. We may require verification of your identity before processing requests.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent local legislation. Our legal basis for processing your personal information includes performance of a contract (providing the Service), legitimate interests (security, improvement), and consent (where applicable). You have the right to lodge a complaint with your local data protection authority.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided personal information to us, please contact support@om-intelligence.com.
The Service does not currently respond to “Do Not Track” browser signals. We may use analytics and usage tracking as described in Section 2.3 regardless of any Do Not Track preferences.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and in accordance with applicable law, typically within 72 hours where required by GDPR or equivalent legislation. Notification may be provided via email to the address associated with your account, through the Service interface, or by other means as required by applicable law. The Company will make reasonable efforts to determine the scope of the breach and take steps to mitigate further risk.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on the Service and update the “Last Revised” date. Material changes will be communicated via email or prominent notice on the Service. Your continued use of the Service after changes are posted constitutes acceptance of the revised Privacy Policy.
This Privacy Policy is incorporated into and forms part of the Terms of Service. In the event of any conflict between this Privacy Policy and the Terms of Service regarding data handling, the more protective provision shall apply. All limitations of liability, disclaimers, and indemnification provisions in the Terms of Service apply to this Privacy Policy.
For questions, concerns, or requests regarding this Privacy Policy or our data practices:
Email: support@om-intelligence.com
OM Intelligence Inc.
A Delaware Corporation
OM Intelligence Inc.
A Delaware Corporation