Privacy Policy

We collect and process your contact information when you register or engage us to use our Service

You may register to the Service via our online form. Upon registration, we collect your contact details such as full name, email address, and authentication details such as password. You may also register via your Google account. We do not collect or store any payment information. We refer to your contact details as "Contact Information".

The Service we provide involves processing the information being indexed from your connected tools

In order to provide the Service, we process documents, messages, and other content indexed from your connected workplace tools (such as Google Drive, Slack, Notion, and others). We access this data only as authorized by you through OAuth connections and only to provide the Service. We do not monitor or access your information beyond what is necessary to provide the Service unless we are obligated to do so under applicable law. We refer to this overall data as "Indexed Data".

We use OAuth tokens to access your connected tools

When you connect a third-party tool (such as Google Drive), we receive OAuth access tokens and refresh tokens. These credentials are encrypted at rest using AES-256-GCM encryption and are used solely to access and index content from your connected tools on your behalf. We never store your third-party passwords.

We also collect analytics information about your use of the Service

When you use our Service, we record and collect certain information about your interaction with the Service, including the IP address from which you access the Service, time and date of access, type of browser used, search queries made, links clicked, and actions taken while using the Service. We refer to this data as "Analytics Information".

Data Controller (Account, Usage, and Communication Data)

For Contact Information (such as name, email, authentication details), account data, analytics information, and all information we collect to operate, secure, and improve the Service, Omnishi acts as the Data Controller. We determine the purposes and means of processing this type of data.

Data Processor (Indexed Data)

For any content, documents, messages, files, or other materials that are indexed from your connected workplace tools ("Indexed Data"), Omnishi acts solely as a Data Processor on behalf of you or the organization that owns the workspace. We process Indexed Data only according to your instructions and do not use Indexed Data for our own purposes.

To respond to and handle your inquiry and manage our relationship

We process your Contact Information to contact you, handle your inquiry, and manage your account and our relationship with you.

To provide you with the Service

We process Indexed Data in order to give you access to the Service, including AI-powered search, knowledge governance, meeting intelligence, and proactive knowledge delivery. We generate vector embeddings from your content to enable semantic search. We use AI models to extract knowledge claims, detect decisions, and generate answers from your indexed content.

To maintain the Service

We process the Analytics Information to provide, maintain and improve your user experience when accessing our Service. We will also use the Analytics Information for quality assurance and for the development and enhancement of the Service.

To enforce these Terms and comply with applicable law

We will use the Analytics Information and Indexed Data to prevent fraud, resolve disputes, troubleshoot problems, assist with any investigations, enforce these Terms and take other actions otherwise permitted by law.

We process information with our service providers

We process personal information with the assistance of our service providers who assist us with the internal operations of the Service, including cloud hosting and infrastructure providers. These companies are authorized to use your personal information only as necessary to provide these services to us and not for their own promotional purposes.

We use artificial intelligence (AI) services

We use third-party AI services, including AWS Bedrock (Amazon Titan for embeddings, Anthropic Claude for AI features), to power features such as semantic search, knowledge claim detection, answer generation, and meeting transcription. When you use these features, relevant content may be sent to these AI providers for processing. The AI providers process your data in accordance with their respective privacy policies and data processing agreements. We do not use your content to train AI models.

We access third-party services on your behalf

When you connect workplace tools (such as Google Drive, Slack, Notion, Jira, and others), we use your OAuth authorization to access and index content from those services. We access only the data scopes you explicitly authorize and only for the purpose of providing the Service.

We will share information with competent authorities, if required

If you have abused your rights to use the Service, or violated any applicable law, we will share information with competent authorities and with third parties (such as legal counsels and advisors), for the purpose of handling of the violation or breach. We will also share your personal information if we are required to do so by a judicial, governmental or regulatory authority.

We will share your Information with third parties in any event of change in our structure

If the operation of our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share information only as required to enable the structural change in the operation of the business.

What are cookies?

Cookies are text files, comprised of small amounts of data, that are saved on your computer or other device when you use the internet and visit various websites.

We use cookies necessary to operate the Service

We use essential cookies for authentication (JWT tokens stored in httpOnly cookies) to keep you logged in and maintain your session. We may also use analytics cookies to understand how you interact with our Service.

You can always delete or disable cookies

You can always delete the cookies saved on your device through the settings of your computer browser or device.

We implement measures to secure your Information

We implement industry-standard measures to reduce the risks of damage, loss of information and unauthorized access or use of information. This includes AES-256-GCM encryption for OAuth credentials at rest, strict multi-tenant data isolation, and secure authentication via JWT tokens. However, these measures do not provide absolute information security.

Data retention

We will retain Contact Information, Indexed Data and Analytics Information for the duration needed to support our ordinary business activities in providing the Service to you and your organization. When you disconnect an integration or delete your account, we will delete the associated Indexed Data. You may request deletion of your account and data at any time by contacting us.

Omnishi is the data controller

The following is the contact information of Omnishi, the data controller:
Omnishi Ltd.
Email: [email protected]

Legal basis under EU law for processing your personal data

The legal basis for processing your Contact Information for the purpose of handling your inquiry to register to our Service is our legitimate interest in managing our business relations with you. The legal basis for processing Indexed Data to provide you with the Service is your and our legitimate interests in providing the Service you've signed up for. The legal basis for processing Analytics Information is our legitimate interest in maintaining, developing and enhancing the Service.

Your rights under GDPR

If you are in the EU or the UK, you have the following rights under the GDPR: Right to Access, Right to Rectify, Right to Data Portability, Right to Object, Right to Restrict processing, Right to Withdraw consent, and Right to be Forgotten. If you wish to exercise any of your rights, please contact us at: [email protected]

Right to submit a complaint

Subject to applicable law, you have the right to lodge a complaint with your local data protection authority.