Public website draft · November 2026

Privacy Policy

Review is required before publication. Sections marked below still need confirmed details.

1. 01Who we are

   omniDocs is a document management and AI-assisted information discovery service offered by Nxus Data & AI Solutions ("Nxus", "we", "us"). This notice describes the intended handling of personal information when organisations and their authorised users access omniDocs.

   To confirm: Privacy contact, business address and effective date are still to be confirmed.

2. 02Information we process

   We may process account identifiers such as name, organisational email address, Microsoft Entra ID identifiers and organisation or tenant information; uploaded documents and their contents; extracted text and metadata; user questions and generated answers; sharing permissions; and technical records needed to operate and secure the service.

   Documents uploaded by customers may contain personal information about other people. Customers should upload only information they are authorised to process.

3. 03Why we process information

   To authenticate users; provide document storage, preview, extraction, search and question-answering; enforce access controls and sharing permissions; operate subscriptions and provide support; protect the service from misuse; and meet applicable legal obligations.

   Where Nxus processes documents on behalf of a business customer, the business customer may determine the purposes and lawful basis for that processing. Nxus and the customer should agree their respective privacy roles in applicable contractual terms.

4. 04Service providers and AI processing

   omniDocs is built on Microsoft Azure and uses Microsoft identity and AI services. Document content or selected extracted passages may be sent to configured AI services to answer user questions. The exact data flows, hosting regions, subprocessors and applicable service terms must be confirmed before publication.

   We do not describe AI-generated answers as guaranteed accurate. Users should review cited evidence and coverage notices.

5. 05Access and sharing

   Access is intended to be controlled through organisational sign-in and document-level authorisation. Owners can grant view-only access to authorised recipients and revoke that access. Cross-organisation isolation and production access controls must be verified before external customer onboarding.

6. 06Retention and deletion

   We intend to retain account information, documents, extracted content, sharing records and operational logs only as needed for service delivery, security, contractual and legal purposes.

   To confirm: Specific retention periods, backup retention and deletion timelines must be confirmed and inserted here before publication.

7. 07International transfers and location

   The service uses cloud infrastructure.

   To confirm: Actual storage regions, AI processing locations and international transfer safeguards must be verified and disclosed before publication.

8. 08Security

   We use technical and organisational measures intended to protect information, including authenticated access, role-based service permissions and controlled document access. No online service can guarantee absolute security. Specific certifications or regulatory compliance are not claimed by this notice.

9. 09Your privacy rights

   Depending on applicable law, individuals may have rights to request access, correction, deletion, objection or other privacy-related actions. Requests concerning documents controlled by a customer organisation may need to be directed to that organisation. Contact the published privacy channel for assistance.

10. 10Website analytics

    This public website uses Lovable's built-in visitor analytics. It sets no cookies, stores nothing on your device, does not keep your IP address and cannot identify you or recognise a returning visitor — each visit counts on its own.

    It records the pages you visit, where you came from, your country, browser, operating system and device type, how long you stay, how fast pages load, errors that occur, and which buttons and links you click. Detailed data is kept for 90 days; daily summaries are kept for a year.

    This site shows no cookie banner or consent choice, so this data is recorded for every visitor. Lovable collects this data for us. Lovable's privacy policy at https://lovable.dev/privacy explains how it handles it.

    The only other third-party resource this site loads is web fonts from Google Fonts, which receives the request for those fonts. No advertising pixels or third-party analytics tools are used.

11. 11Children, changes and contact

    omniDocs is intended for organisational use and is not directed to children. We may update this notice as the service evolves, with the latest effective date shown on the website. For privacy enquiries, use the published privacy contact.