1. Introduction
Omni Meta Framework, operated by OmniSec Intelligence & Security, is committed to protecting the privacy and security of our users and customers data. This Privacy Policy describes how we collect, use, store and protect your personal information in compliance with the General Data Protection Law (LGPD - Law No. 13,709/2018) and other regulations, when applicable.
2. Data Collection
We collect the following types of information when you use our platform:
- Registration data: full name, corporate email, phone number, position, and company
- Authentication data: login credentials and session tokens
- Usage data: access logs, platform interactions, frameworks used
- Compliance data: assessments performed, evidence attached, reports generated
3. Data Usage
We use the collected data for the following purposes:
- Provide, contact and maintain Omni Meta Framework platform services
- Authenticate users and manage access permissions
- Generate compliance reports and analytical dashboards
- Improve user experience and develop new features
4. Data Protection
We implement adequate technical and organizational measures to protect your data:
- Protection against unauthorized access, loss, destruction or alteration of information
- Data stored on servers located in Brazil, with encryption in transit (TLS/SSL) and at rest (AES-256)
- Development carried out with security as a priority, with quality controls and Security indicators in code analysis tool
- We perform regular security checks and adhere to industry best practices
5. Data Subject Rights
In compliance with LGPD, you have the following rights over your personal data:
- Adequacy - Right to treatment compatible with the purpose informed by the agent
- Necessity - Right to limitation of treatment to the minimum necessary for its purpose, covering pertinent data, dispensing excessive collection
- Free access - Right to facilitated and free information about the form and duration of data treatment
- Quality - Right to clarity, accuracy, relevance and updating of data, according to necessity and fulfillment of purpose
- Transparency - Right to clear, precise and easily accessible information about data treatment and respective treatment agents
- Security - Right to data security, with treatment agents required to use measures capable of protecting personal data from unauthorized access and accidental or illicit situations
- Prevention - Right to prevention of damages, obliging the treatment agent to adopt measures to prevent their occurrence
- Non-discrimination - Right to non-discrimination, the impossibility of performing treatment for discriminatory, illicit or abusive purposes
- Accountability and Transparency - Right to demand accountability and transparency from treatment agents
6. Cookies and Similar Technologies
We use cookies and similar technologies to improve platform functionality, remember your preferences, and analyze system usage. You can manage cookie settings through your browser settings. Note that disabling cookies may affect the functionality of some features.
7. Contact
To exercise your rights, clarify doubts, or report privacy-related incidents, please contact us:
Email: dpo@omniseccorp.com