Privacy Policy

This Privacy Policy explains how Ontos (“Ontos,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information through the Ontos Service. Our Terms of Service also apply.

We collect account and organization information, including names, work email addresses, roles, memberships, onboarding responses, and support communications. We collect documents and project information submitted to the Service, including bid documents, drawings, specifications, project details, prompts, analysis results, citations, and feedback (“Customer Content”).

We also collect service and technical information such as features used, document type and size, page count, processing status, timestamps, device and browser information, IP address, security events, diagnostics, and service-performance measurements.

We use information to authenticate users; administer organizations and workspaces; store, render, and analyze documents; provide findings and citations; operate, secure, maintain, and support the Service; communicate with customers; comply with law; and enforce our agreements.

We may use service telemetry, performance information, feedback, and aggregated or de-identified information to evaluate and improve Ontos. We use identifiable Customer Content for model development, testing, or product research only where the customer has separately authorized that use.

Ontos uses cloud hosting, authentication, storage, database, document-processing, AI, and monitoring providers to operate the Service. These providers may process information only to perform services for Ontos, subject to their contractual terms and applicable law. Ontos uses AI systems to produce the analysis requested by the customer and does not authorize our providers to train shared or general-purpose models on Customer Content.

We may otherwise disclose information with the customer’s direction or permission, to professional advisers subject to confidentiality obligations, in connection with a corporate transaction, or when reasonably necessary to comply with law or protect rights and safety. We do not sell Customer Content or personal information and do not use it for targeted or cross-context behavioral advertising.

We retain Customer Content while needed to operate an active workspace and preserve the cited analysis. A workspace administrator may request deletion at any time by contacting privacy@joinontos.com. We handle verified deletion requests in accordance with applicable law and applicable customer agreements. Limited copies may remain where reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, enforcement, or ordinary service-provider retention.

We use safeguards designed to protect Customer Content, including authenticated workspaces, organization-level access controls, tenant separation, private document storage, encryption in transit, provider-managed encryption at rest, scoped credentials, and monitoring. No system can guarantee absolute security.

Depending on applicable law, you may request access to, correction of, export of, or deletion of personal information associated with you, or object to or restrict certain processing. Workspace administrators control Customer Content for their organizations. We may verify identity and authority before fulfilling a request, and we will not discriminate against anyone for exercising an applicable privacy right.

Ontos does not use personal information for targeted advertising and does not track users across unrelated websites. Certain providers may use cookies necessary for authentication, security, and operation of the Service.

Ontos is a business service and is not directed to children under 13. We may update this Privacy Policy. Material changes will be posted here with a revised effective date, and additional notice will be provided when required by law. Questions and privacy requests may be sent to privacy@joinontos.com.