Privacy Policy
Last updated: March 26, 2026.
Plain-language summary
- Services depend on machine-learning; your submissions and outputs are used to train, fine-tune, and evaluate Om models, and this cannot be turned off. - We do NOT use personal account or billing information for model training or sale. - Access to Om Data is governed by subscription tiers and Vintages as described in the Terms (Explore / Non-Commercial, Discovery / Commercial - Internal, Builder / Commercial - External). Subscription pricing and plan changes are plan-based; vintage snapshots are selected in product/API flows where supported. - Buyouts provide perpetual rights to specific Vintage snapshots, not future Vintages.
1. Who We Are
Om Therapeutics, Inc., a Delaware C Corporation with its principal place of business at 3210 Merryfield Row, San Diego, CA 92121 USA ("Om," "we," "us") provides software, APIs, and related services that incorporate machine-learning ("ML") techniques. This Privacy Policy ("Policy") explains our global data-handling practices.
2. Scope
- Visit an Om website or app that links to this Policy.
- Create an account or subscription.
- Interact with the Diligence tool, API, SDKs, plug-ins, or any other product developed by Om Therapeutics, Inc.
- Purchase products or paid subscription plans that may be offered (including subscription tiers, upgrades, or buyouts).
- Contact us or participate in events, surveys, or promotions.
3. Key Definitions
- Om: Om Therapeutics, Inc., a Delaware C Corporation with its principal place of business at 3210 Merryfield Row, San Diego, CA 92121 USA.
- Personal information: any data that identifies, relates to, describes, or can reasonably be linked to an individual.
- Service Data: text, files, prompts, and other content you submit or generate.
- Model Training: using Service Data to develop, fine-tune, or evaluate Om ML systems.
- Om 1000 (V1): Om’s proprietary dataset provided as an immutable Vintage snapshot.
- Vintage: a versioned dataset snapshot of Om Data (e.g., V1, V2).
- Subscription Tier: the access level and rights you purchase (Explore / Non-Commercial, Discovery / Commercial - Internal, Builder / Commercial - External).
- Explore Tier: the Non-Commercial subscription tier.
- Discovery Tier: the Commercial - Internal subscription tier.
- Builder Tier: the Commercial - External subscription tier.
4. Information We Collect
Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | name, email, postal address, phone, company, job title, credentials | you |
| Payment Data | partial card details, billing address, tax/VAT numbers | payment processor |
| Service Data | protein sequences, molecular inputs, prompts, files, dataset access selections, outputs | you / automated collection |
| Usage Data | IP address, device IDs, cookies, event logs, error reports | automated |
| Third-Party Data | SSO identity, marketing attribution, public records | business partners |
5. How and Why We Use Data
How and Why We Use Data
| Purpose | Legal/Lawful Basis |
|---|---|
| Operate, secure, and provide the Services (including data generation, subscriptions, and dataset delivery) | Contract |
| Model Training and Service Improvement | Contract |
| Process payments and send transactional messages | Contract / Legal obligation |
| Prevent fraud, abuse, or security incidents | Legitimate interests |
| Marketing communications (opt-in where required) | Consent |
| Compliance with laws, audits, and requests from authorities | Legal obligation |
Lawful bases for EU/UK data subjects are detailed in Section 6.
5.1 Model-Training Policy
We use the protein sequences you submit and the computational outputs we generate, including binding datasets, to train and improve our ML models as an integral part of the Services.
What we use for model training
- Protein sequences you submit
- Computational outputs and predictions we generate
- Binding datasets and interaction matrices we generate
What we never use for model training or sale
- Your personal information (name, email, etc.)
- Payment information
- Any other account data
Note on support communications: We may use customer support communications internally to improve product features and support quality. These communications are not used for model training, are never sold to third parties, and are not used for any external purposes. We apply data-minimization and de-identification techniques so that Service Data used for model training is not linked back to individual accounts.
If identical FASTA later appears in the public domain, Om may rescreen it and clearly label that provenance. We do not share personal account data in any dataset outputs.
6. Legal Bases (EU/EEA/UK GDPR and Comparable Laws)
Legal Bases
| Processing Purpose | Lawful Basis |
|---|---|
| Service provision and model training (inseparable) | Art. 6(1)(b) - contract |
| Marketing | Art. 6(1)(a) - consent |
| Security and fraud | Art. 6(1)(f) - legitimate interests |
| Compliance | Art. 6(1)(c) - legal obligation |
Model training and evaluation are integral to the Services. Users who do not agree to this processing cannot use the Services. This requirement is based on contractual necessity (GDPR Art. 6(1)(b)), not on separate consent under Art. 6(1)(a).
7. Disclosures to Third Parties
- Service providers (cloud hosting, analytics, customer support) under strict contracts.
- Subscribers and licensees who access Om Data outputs (dataset outputs only; no personal account data).
- Affiliates and acquirers in corporate transactions.
- Authorities when legally required.
- Others with your explicit direction.
8. Your Rights and Choices
Rights and Choices
| Jurisdiction | Rights | How to Exercise |
|---|---|---|
| Global (all users) | Access, correction, deletion | support@omtx.ai |
| EEA/UK (GDPR) | Access, correction, deletion, portability; restrict or object to certain processing | Account privacy controls or email |
| Brazil (LGPD) | Confirm processing; anonymization; review automated decisions | support@omtx.ai |
| Canada (PIPEDA) | Access, correction; complain to OPC | support@omtx.ai |
8.1 Account Closure and Model Training
We stop using your Service Data for future model training upon account closure. Service Data already incorporated into our models cannot be removed retroactively. Personal account information can be deleted per this Policy.
8.2 Subscription Tiers and Vintages
- Subscription Tiers control what Om Data you can access and how you may use it.
- Vintages are versioned snapshots and are tracked for lineage/audit; in API data access flows, you can access the latest snapshot your active rights allow.
- Subscription access is governed by active subscription status and tier rights.
- Buyouts apply only to the Vintage snapshot purchased.
See the Terms of Service for licensing terms, Digital and Physical Derived Works, payment obligations, deletion requirements, the 60-day cure period, buyout options, and consequences of non-payment.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure.
10. International Transfers
We may transfer personal information across borders. Where required, we rely on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms.
11. Data Retention
We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and jurisdiction.
12. Children's Privacy
The Services are not directed to children under 18, and we do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Policy from time to time. Updates become effective when published in our application. Continued use requires accepting the current legal version where applicable.
14. Contact
Om Therapeutics, Inc.
3210 Merryfield Row, San Diego, CA 92121 USA support@omtx.ai