OmniXon Privacy Statement

1. Introduction

OmniXon ("we", "us", "our") provides sovereign, managed private cloud solutions for regulated industries. This Privacy Statement explains what personal data we collect, why we collect it, how we use it, and the choices you have. It applies to visitors to our website, customers, partners, and users of our services.

2. Scope

This Privacy Statement covers:

• Visitors to https://omnixon.cloud and related web properties;
• Customers and their end users who use OmniXon managed private cloud services;
• Partners and integrators who engage with OmniXon.

It does not apply to third‑party services you access through our Marketplace; those services have their own privacy policies.

3. Personal Data We Collect

We collect only the personal data necessary to provide services and operate our business.

Data you provide

• Contact details (name, company, job title, email, phone).
• Account and billing information (company billing address, purchase orders).
• Support and service data (support tickets, logs you submit, configuration details).
• PoC and onboarding information (technical contacts, environment details).

Data collected automatically

• Usage and telemetry from our management and AIOps systems (performance metrics, resource utilization, error logs) when you opt into managed services.
• Website analytics (IP address, browser, pages visited) for site performance and security.

Data from third parties

• Information from partners, integrators, or public sources used to verify business identity and compliance status.

4. How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain OmniXon services and the Marketplace.
• Deliver support, maintenance, and managed operations.
• Perform billing, invoicing, and contract management.
• Improve and secure our products (AIOps, monitoring, anomaly detection).
• Comply with legal and regulatory obligations, including data residency and certification requests.
• Communicate product updates, security notices, and service‑related information.

5. Legal Bases for Processing

Where applicable, we rely on:

• Contract performance to deliver services under your agreement.
• Legal compliance to meet regulatory obligations.
• Legitimate interests for fraud prevention, security, and service improvement, balanced against your rights.
• Consent where required for marketing communications or optional telemetry.

6. Data Residency and Sovereignty

You choose where your data is stored. We support on‑premise and certified sovereign deployments so customer content remains within the geographic boundaries you specify. We do not transfer customer content outside the agreed jurisdiction without your authorization or a lawful requirement.

7. Sharing and Disclosure

We do not sell personal data. We may share data:

• With service providers who perform functions on our behalf under confidentiality and security obligations.
• With partners and integrators for PoC, deployment, and certification, only as necessary.
• To comply with law, respond to legal process, or protect rights and safety.
• In connection with a business transaction (merger, acquisition), subject to confidentiality and notice.

8. Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, role‑based access controls, logging, and AIOps‑driven anomaly detection. For managed services, we operate 24/7 monitoring and incident response.

9. Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and contractual requirements.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete personal data.
• Restrict or object to processing.
• Port data to another provider where technically feasible.
• Withdraw consent for marketing communications.

To exercise rights, contact info@omnixon.cloud or your account manager. We will verify requests and respond within applicable legal timeframes.

11. Children

Our services are not directed to children. We do not knowingly collect personal data from children under applicable age thresholds.

12. International Transfers

When transfers outside a jurisdiction are necessary, we use appropriate safeguards (data processing agreements, standard contractual clauses, or local legal mechanisms) and ensure transfers comply with applicable law.

13. Changes to this Statement

We may update this Privacy Statement to reflect changes in our practices or legal requirements. We will post the updated statement with an effective date and, where required, notify customers.

14. Contact

For privacy questions, data subject requests, or complaints contact info@omnixon.cloud or your account manager.