At OMNIA, privacy is part of the design. This Policy explains, clearly and completely, what personal data we process, for what purpose and on what legal basis, for how long, with whom we share it, and how you can exercise your rights. It applies to the site omniabrain.net and to the OMNIA platform services (the "Services").
01Data controller
The controller of the data collected through the site and the commercial relationship is TT GROUP LATAM, corporate ID 3-102-475773, domiciled in San José, Costa Rica, operator of the OMNIA brand. For any privacy matter, you may write to our contact point privacy@omniabrain.net or call +506 6364-4214.
02Legal framework
We process your data in accordance with Costa Rica's Law No. 8968 on the Protection of the Individual with regard to the Processing of their Personal Data and its Regulation, under the supervision of the Data Protection Agency (PRODHAB). Where we process data of individuals in the European Union, we additionally apply the principles of the General Data Protection Regulation (GDPR).
03Scope and our role
This Policy distinguishes two situations:
- OMNIA as controller: for data of site visitors, prospects and users of our own account, OMNIA determines the purposes and means of processing and is accountable for it.
- OMNIA as processor: for data a client uploads to the platform to run its business (for example, data of its employees, assets or third parties), the client is the controller and OMNIA processes such data solely on the client's instructions and under the data processing agreement signed with it. Requests about that data are directed to the controlling client, with OMNIA providing appropriate assistance.
04Data we process
| Category | Data |
|---|---|
| Browsing data | IP address, device and browser type, operating system, pages viewed, date and time, and cookie and similar-technology data. |
| Contact data (B2B) | Name, role, company, email and phone you provide when requesting information, a demo or support. |
| Account and usage data | User ID, credentials, company, assigned role, and access and activity logs needed to operate and secure the Service. |
| Processed on behalf of a client | Data the client chooses to add to the platform. OMNIA does not determine its purposes and processes it per the contract with that client. |
We do not collect sensitive data through the site. Where a Service requires it by its operational nature, it will be processed with the reinforced safeguards required by law and under the responsibility of the relevant client.
05Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Handle requests for information, demos and support. | Pre-contractual relationship or consent. |
| Provide, operate, maintain and secure the contracted Services. | Performance of the contract. |
| Improve the site and product through aggregate analytics. | Legitimate interest or consent, depending on the cookie. |
| Send commercial communications about OMNIA. | Consent, revocable at any time. |
| Comply with legal, accounting and regulatory obligations. | Compliance with a legal obligation. |
06Cookies and similar technologies
We use the following categories of cookies. Non-essential ones are set only with your consent, which you can manage or withdraw from the site's cookie banner or your browser settings.
| Category | Purpose |
|---|---|
| Essential | Enable basic site functionality, session and security. No consent required. |
| Preference | Remember choices such as language (Spanish or English) and display settings. |
| Analytics | Help us understand, in aggregate, how the site is used so we can improve it. |
07Recipients and processors
OMNIA does not sell or trade your personal data. We share it only with providers acting as processors, under contract and solely for the purposes described:
| Provider / type | Purpose |
|---|---|
| Cloud infrastructure (Oracle Cloud Infrastructure) | Hosting, compute, database and backups of the platform. |
| Artificial intelligence services | Text processing for the AI assistant features. |
| Email, messaging and notification providers | Transactional emails and Service notifications. |
| Site analytics | Aggregate measurement of website usage. |
| Competent authorities | Where there is a legal obligation or valid request. |
08International transfers
Some of our processors may handle data outside Costa Rica. In such cases we apply adequate safeguards (data protection contractual clauses and equivalent security measures) so that your data maintains a level of protection consistent with Law 8968 and, where applicable, the GDPR.
09Retention periods
- Account and Service data: for the duration of the relationship and up to five (5) years thereafter, for legal, accounting and claim-defense obligations.
- Prospect and commercial contact data: up to twenty-four (24) months from the last interaction, or until you withdraw your consent.
- Access and security logs: up to twelve (12) months.
- Data processed on behalf of a client: per the contract with that client; on termination it is securely returned or deleted.
10Information security
We apply technical and organizational measures appropriate to the risk: role-based access control, authentication via an identity provider, encryption in transit, audit logging of operations, environment separation, backups and least-privilege principles. In the event of a security incident affecting your personal data, we will act diligently and notify the individuals and authorities that the law requires.
11Artificial intelligence
OMNIA includes artificial intelligence features that assist the user: the AI suggests and a person decides. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you without human intervention. Interactions with the assistant are logged for traceability, audit and quality control, and are handled under this Policy. We do not use your data to train third-party models without a legitimate basis to do so.
12Your rights
You may exercise at any time your rights of access, rectification, update and deletion of your data, as well as object to certain processing and withdraw consent given, without affecting the lawfulness of prior processing. To exercise them, write to privacy@omniabrain.net stating your request; we may ask you to verify your identity. We will respond within the timeframes set by the Regulation to Law 8968 (generally, five business days). If you are not satisfied, you may contact PRODHAB (prodhab.go.cr). Where the data was added by a client and OMNIA acts as processor, we will forward your request to that controller.
13Minors
The site and Services are intended for businesses and adults. We do not knowingly collect data from minors through the site; if we become aware that this has occurred, we will delete it.
14Third-party links
The site may contain links to third-party services with their own privacy policies. OMNIA is not responsible for those third parties' privacy practices; we recommend reviewing their notices.
15Changes to this Policy
We may update this Policy to reflect legal, technical or Service changes. We will post the current version on this page, indicating its effective date; material changes will be communicated through the usual channels before they take effect.
16Contact
For questions about this Policy or to exercise your rights, write to privacy@omniabrain.net or call +506 6364-4214. Controller: TT GROUP LATAM, corporate ID 3-102-475773, San José, Costa Rica.