Privacy Statement

Scope and who we are

This Privacy Statement explains how Omnicort ("Omnicort", "we", "us", or "our") handles personal information when you visit omnicortai.com, apply for Founder 50, create or use an Omnicort workspace, communicate with us, or use related customer communication and Business Brain services.

A business using Omnicort may also act as the controller of customer, employee, or lead information it places in the service. In that situation, the business is responsible for its own notices, permissions, and lawful instructions, and Omnicort processes that information to provide the service.

Information we collect

Depending on how you use Omnicort, we may collect:

• Account and identity information, such as name, work email, authentication identifiers, role, and workspace membership.
• Founder 50 and business information, such as company name, website, industry, country, contact details, requested employee use case, enquiry volume, and communication challenges.
• Business content, such as documents, policies, FAQs, founder notes, approved knowledge, employee instructions, customer records, and connected-service data you choose to provide.
• Communication information, such as messages, support correspondence, call or message metadata, and, where enabled with appropriate notice and permission, transcripts or recordings.
• Connected-service information obtained through the scopes and permissions you approve, including account identifiers, connection status, sync metadata, and selected business objects.
• Usage and device information, such as pages viewed, features used, timestamps, browser and device details, IP-derived security signals, diagnostics, and audit events.
• Payment and billing information. Payment card details may be handled by a payment processor; we may retain billing status, wallet, transaction, and invoice records.

How we use information

We use information to provide, secure, support, and improve Omnicort; create and administer workspaces; process Founder 50 applications; compile approved employee context; operate customer-authorized communications and connected services; enforce permissions, consent, usage, and safety controls; troubleshoot incidents; prevent fraud and abuse; measure product reliability; communicate service and account information; and comply with legal obligations.

Where required, we rely on consent, performance of a contract, legitimate interests such as security and product operation, and compliance with law. The applicable basis depends on the information, location, and relationship involved.

AI-assisted processing and learning

Omnicort may use AI systems to generate drafts, summarize evidence, retrieve approved knowledge, classify events, propose actions, and help operate AI communication employees. AI output can be incomplete or incorrect and should be reviewed according to the business's permissions and risk policy.

Raw customer content is not automatically promoted into approved company memory. Omnicort is designed to create reviewable learning proposals with source references. We do not use one customer's raw business or customer data for another customer's Business Brain. Cross-business learning, if offered, must be separately disclosed, explicitly enabled, minimized, aggregated or anonymized as applicable, and governed by the selected product controls.

How we share information

We may share information with service providers that help us deliver hosting, authentication, communications, telephony, email, storage, analytics, support, security, billing, and AI-assisted features. These providers receive information only for the services they perform and are subject to contractual or legal obligations as applicable.

We may also share information at your direction, with connected services you authorize, within your workspace according to roles, to comply with law or protect rights and safety, or as part of a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate safeguards. We do not sell personal information for money.

Connected services and customer communications

When you connect a third-party account, Omnicort requests access through the scopes shown during connection. You can disconnect an account, although retained records, audit evidence, and lawful backups may remain for the periods described below.

Businesses are responsible for having the rights, notices, and permissions needed for customer calls, messages, recordings, transcripts, marketing, and connected data. Omnicort may block or limit an action when consent, identity, permission, safety, or provider readiness is missing.

Data retention

We retain information for as long as reasonably necessary to provide the service, maintain security and auditability, resolve disputes, enforce agreements, satisfy legal and financial obligations, and support backup and recovery. Retention varies by information type, workspace settings, customer instructions, product stage, and applicable law.

When information is deleted, it may remain temporarily in backups or restricted logs until the applicable retention cycle completes. Some records may be retained longer where required for fraud prevention, billing, legal claims, consent evidence, or security investigations.

Security and international processing

We use technical and organizational measures intended to protect information, including access controls, tenant boundaries, encryption where appropriate, audit logging, secret isolation, least-privilege design, and review gates for sensitive actions. No service can guarantee absolute security.

Omnicort and its providers may process information in countries other than your own. Where required, we use contractual, organizational, or legal safeguards for international transfers.

Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, and to withdraw consent where processing relies on consent. You may also disconnect services, change workspace permissions, pause an employee, or request account closure through available product controls or support.

We may need to verify your identity and authority before completing a request. If information belongs to a business customer, we may direct you to that business or coordinate with it as required.

Cookies, children, and updates

We may use essential storage and similar technologies for authentication, preferences, security, and reliable operation. If non-essential analytics or advertising technologies are introduced where consent is required, we will provide appropriate controls.

Omnicort is intended for businesses and is not directed to children. Do not submit information about children unless you have a lawful business purpose, required authority, and appropriate safeguards.

We may update this Statement as the product and legal requirements evolve. We will change the effective date and provide additional notice when required.

Contact us

Questions, privacy requests, and concerns can be sent to info@omnicortai.com. Please include the workspace or application email involved and enough detail for us to understand the request without sending unnecessary sensitive information.