Scope
This policy explains how OmniCore Lab handles personal information through our public website, contact and project forms, and any OmniCore customer account, mission, file, agent, security, or support features that we make available.
Information we collect
Depending on how you use OmniCore, we may collect account and profile information; authentication identifiers and related sign-in metadata; organization and contact information; mission requests, requirements, messages, drawings, images, CAD or other files you submit; agent identities, grants and activity; service and mission history; support communications; and technical, security, device, network, request, and diagnostic information.
Authentication
When account features are available, OmniCore may use Firebase and related Google services to authenticate human users. Firebase authentication establishes an external identity; OmniCore separately determines the applicable OmniCore account, membership, and permissions. We do not treat an email address or authentication event by itself as authority to another account.
How we use information
We use information to provide and secure the service; authenticate users and agents; process and track manufacturing missions; interpret submitted requirements and files; provide support; prevent fraud, abuse, prohibited manufacturing, and security threats; maintain operational records; improve reliability and product operation; comply with law; and protect users, OmniCore, and others.
AI and automated processing
OmniCore may use AI models and automated systems to interpret requests, drawings, images, files, requirements, or operational context and to produce candidate analyses or plans. Model output does not itself grant account, commercial, or physical authority. Customer account data, mission content, and private uploaded files are not used by OmniCore to train general-purpose models unless we separately offer an opt-in program and you affirmatively choose it.
Service providers
We may use service providers for hosting, authentication, storage, communications, security, analytics, AI/model processing, and—if paid services are introduced—payment processing. Providers receive information only as needed for the services configured for OmniCore and are subject to their own terms and applicable contractual restrictions. Current website hosting and form processing may generate routine request and function logs.
Sale, sharing, and advertising
OmniCore does not currently sell personal information or use customer account or mission data for cross-context behavioral advertising. If our practices materially change, we will update this policy and provide any controls required by applicable law before using information in that manner.
Files and confidential material
Customer files are intended to be private and account-scoped when authenticated file features are available. Do not submit passwords, private keys, controller credentials, signing material, unlawful content, export-controlled material you are not authorized to provide, or another person's confidential information without permission. Uploaded files are treated as untrusted input for security purposes and may be scanned, validated, quarantined, or rejected.
Retention
We retain information for the period reasonably necessary for the purposes described here, including providing the service, maintaining security and fraud records, resolving disputes, meeting legal obligations, and preserving legitimate operational provenance. Retention of an operational record does not by itself authorize model training or broader disclosure. Where appropriate, directly identifying account information may be deleted or deidentified while limited non-identifying operational history is retained.
Your privacy choices and rights
Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of personal information, and to exercise additional privacy choices. OmniCore intends to provide common account controls for access, correction, export, session management, connected-agent management, and account deletion. See Account & Data Rights for request and deletion details. We will not discriminate against you for exercising rights provided by applicable law.
Account deletion
When self-service accounts are available, the account owner will be able to request deletion through the Privacy & Data settings after recent reauthentication. Deletion will revoke applicable sessions and agent credentials and remove or deidentify account information and private files where appropriate, subject to legitimate security, legal, dispute, fraud-prevention, and operational-retention requirements. Until self-service deletion is available, requests may be sent to contact@omnicorelab.com.
Security
We use administrative, technical, and organizational measures designed to protect the service and customer information. Our architecture separates public account access from internal manufacturing and physical-execution authority. No security measure eliminates all risk, and we may suspend, restrict, or revoke access when needed to protect the service or investigate abuse.
Children
OmniCore customer accounts are intended for adults. Do not create an account if you are under 18 or under the age of legal majority where you live. The service is not directed to children under 13, and we do not knowingly seek personal information from children under 13.
Changes
We may update this policy as the service, providers, or legal requirements change. We will post the updated policy with a new effective date and provide additional notice when required by law.
Contact
Privacy questions and requests may be sent to contact@omnicorelab.com.