Privacy Policy — omnibusixai

Key Definitions

For clarity, the following terms are used throughout this policy to describe data types, users and processing activities related to our AI development and integration services.

Personal data means any information that can identify or be linked to an identifiable individual, such as names, email addresses, phone numbers, job titles, account identifiers, or other contact details provided during engagement with our services.

Processing covers any operation performed on personal data, including collection, recording, organizing, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, erasure or destruction, specifically in support of AI model training, feature engineering and service delivery.

User refers to any individual who accesses omnibusixai.info, engages with our sales or support teams, or uses our software or AI-enabled services on behalf of an organization.

Service means the AI software development, model integration, deployment, and related consulting and maintenance services offered by omnibusixai to clients and partners.

Cookies are small text files stored on a user device by the website to remember preferences, support analytics, or enable certain functionality during a visit to omnibusixai.info or while using demo services.

How We Use Personal Data

We process personal data to deliver contracted services, maintain secure operations, and improve our offerings. Processing is limited to specific, relevant purposes.

• To develop, test and deploy AI models and software components requested by clients.
• To communicate about projects, invoices, support requests, and service updates.
• To host and maintain client environments, dashboards and deployed models.
• To analyze usage patterns and improve product design, documentation and support materials.
• To detect, prevent and respond to security incidents or abuse.
• To comply with legal obligations and to enforce contractual rights.
• To run optional marketing communications where you have provided consent.
• To process payments, issue invoices and manage business records when services are purchased.

Legal Bases for Processing

Where applicable, we rely on lawful bases such as contractual necessity, legitimate interests, consent, or compliance with legal obligations to process personal data.

• Contract performance: processing necessary to provide ordered services and fulfill contractual commitments.
• Legitimate interests: for fraud prevention, security, service improvement, and business operations, balanced against user privacy.
• Consent: for optional marketing communications or optional analytics features where consent is requested.
• Legal obligation: where processing is required to comply with applicable laws or regulatory requests.

Data Subject Rights

If applicable under data protection laws, individuals may have rights regarding their personal data. We respond to valid requests in accordance with local law and the circumstances of processing.

• Right of access — request a copy of personal data we hold about you.
• Right to rectification — ask for inaccurate or incomplete data to be corrected.
• Right to erasure — request deletion of personal data where lawful and appropriate.
• Right to restriction of processing — request limited use of your data under specific conditions.
• Right to data portability — request a machine-readable copy of data you provided to us.
• Right to object — object to processing based on direct marketing or legitimate interests where allowed by law.

Cookies and Similar Technologies

We use cookies and similar technologies to provide core site functionality, analyze usage, and offer personalized experiences where you opt in.

Types include session cookies for secure sessions, persistent cookies to remember preferences, and third-party cookies used by analytics or integration partners.

Categories: Strictly necessary cookies (required for site function), Performance and analytics cookies (help improve the site), Functional cookies (remember settings), and Optional marketing cookies (used with consent).

You can manage cookie preferences through your browser settings or by using the cookie banner controls on omnibusixai.info. For details, see our cookie policy linked below.

View our Cookie Policy

When We Share Data

We share data only as needed to operate services, to comply with law, or with your authorization. Partners and subprocessors are contractually required to protect data consistent with this policy.

• Cloud infrastructure and hosting providers that store or process data on our behalf.
• Third-party service providers such as analytics, payment processors and communication platforms.
• Affiliated service providers and subcontractors involved in project delivery or maintenance.
• Professional advisors and auditors where needed to support business operations and compliance.
• Law enforcement or regulators when required by law or to respond to legal process.
• Potential buyers or partners in the event of a merger, acquisition or sale of assets, subject to privacy protections.

International Data Transfers

Because we operate globally and rely on cloud infrastructure, personal data may be transferred to and processed in countries other than the one in which you reside. We take steps to ensure appropriate protections are in place for such transfers.

Safeguards may include standard contractual clauses, data processing agreements, technical and organizational security measures, and assessments of third-party compliance with privacy standards.

Data Retention

We retain personal data only as long as necessary to provide services, meet contractual and legal obligations, and enable legitimate business operations. Retention periods vary by data type and purpose.

Account and contract records are retained for the duration of the engagement and thereafter for a period required for billing, accounting and legal compliance.

Support interactions, messages and project notes are retained for the period necessary to provide support and to maintain service history.

System logs and diagnostics used for security and troubleshooting are retained for limited periods appropriate to operational needs and legal requirements.

Upon request where deletion is lawful and feasible, we will remove personal data from active systems and take reasonable steps to delete backups within a practical timeframe.

Security Measures

We maintain technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction. Security practices are reviewed regularly and updated as needed to address emerging risks.

• Encryption in transit and at rest for sensitive data and client environments.
• Role-based access control, strong authentication and regular access reviews.
• Regular vulnerability assessments, logging, monitoring and incident response procedures.

How to Exercise Your Rights

If you are a data subject and wish to exercise any rights described above, contact us with sufficient detail to locate your records. We will verify requests and respond in accordance with applicable law.

• Submit a request to access personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Ask for deletion of personal data where processing is no longer necessary and no other lawful basis applies.
• Request restriction of processing under qualifying circumstances.
• Request a portable copy of data you provided to us in a commonly used format.
• Object to processing where we rely on legitimate interests and you have grounds to do so.
• Withdraw consent for optional processing activities that relied on consent, without affecting processing based on other lawful grounds.
• Lodge a complaint with an appropriate supervisory authority if you believe your rights have been violated.

How to Submit a Rights Request

To submit a rights request, contact our privacy team by email or post. Provide your full name, contact details, the type of request and any relevant supporting information. We may request additional information to verify your identity before fulfilling a request. Contact: [email protected] or omnibusixai, 1651 Soi Rajdamnern 16, Khlang Sub District, Amphoe Mueang Nakhon Si Thammarat District, Nakhon Si Thammarat Province 80000, Thailand. Phone: +66940518282.

[email protected]

We aim to respond to verified data access, correction, deletion, or portability requests within a reasonable timeframe. Typical processing time is up to 30 days from receipt of a valid request and may be extended where permitted by applicable law. If additional information is required to verify your identity or clarify the request, processing may take longer and we will notify you of the expected timeframe.