Privacy Policy

Account Information

When you create an account, we collect your email address, company name, and billing information.

Usage Data

We collect information about how you use our Services, including API call metadata, dashboard interactions, and feature usage patterns.

Decision Data

To provide the Services — precedent lookup, audit trails, replay, and analytics — we store the decision inputs you submit (such as the scenario and context) alongside the resulting verdict and a tamper-evident cryptographic receipt. This data is encrypted at rest and in transit, retained only for the retention window of your plan and then automatically purged, and can be exported or deleted on request. Because OmegaEngine is BYOK-only, we never send your decision data to a third-party LLM provider on our own account.

• •Provide, maintain, and improve our Services
• •Process transactions and send related information
• •Send technical notices and security alerts
• •Respond to support requests
• •Analyze usage patterns to improve the product

We retain your account information for as long as your account is active. Decision records and audit trails are retained according to the retention window of your plan — from a few days on Free, up to 365 days on Business, and unlimited on Enterprise — and are then automatically purged. You may request export or deletion of your data at any time.

Depending on your location, you may have rights to:

• •Access your personal data
• •Correct inaccurate data
• •Request deletion of your data
• •Object to processing
• •Data portability

We use a small number of cookies and similar technologies:

• •Strictly necessary — session and access cookies that keep you signed in and protect against CSRF. The service doesn't work without them.
• •Product analytics (PostHog) — page views and product events (e.g. "ran a scan"), tied to a randomly generated identifier stored in a cookie. These load only after you accept analytics cookies (you're asked on your first visit). We use this to understand what's working; we do not sell it or use it for third-party advertising.
• •Error monitoring (Sentry) — crash and error reports with automatic PII scrubbing.

Browser analytics (PostHog) load only after you accept — choose "Essential only" to keep them off, and change your choice any time via "Cookie preferences" in the footer (or block non-essential cookies in your browser). We also record a small set of server-side operational events (e.g. a signup or a scan run) needed to run, secure, and bill the Services — these are tied to your account only if you have accepted analytics; otherwise we count them anonymously, with no link to you. When you request deletion (Section 5) we erase your account data; to also remove analytics identifiers held by our analytics processor, email privacy@omegaengine.ai and we will action it.

For privacy inquiries, contact us at privacy@omegaengine.ai

Data Protection Officer. Our designated Data Protection Officer (GDPR Art. 37) is Jesse Mahoney, reachable at dpo@omegaengine.ai. Contact the DPO directly for data-protection concerns, data subject requests, or supervisory-authority matters.