1. Who We Are
General Analysis is owned and operated by Omni Research, Inc., a Delaware corporation ("General Analysis," "we," "our," or "us"). We operate www.generalanalysis.com and related pages (collectively, the "Site") and provide AI safety & security products and services (collectively, the "Services").
This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit the Site or use our Services. By accessing the Site or Services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
Information you provide directly
- Contact information: name, email address, company name, and job title when you fill out forms, request a demo, or contact us.
- Account information: credentials and profile data if you create an account on our platform.
- Communications: the content of emails, messages, or other communications you send us.
- Customer Data: data you submit to or through the Services as part of your use (e.g., prompts, configurations, or test artifacts). You remain the controller of Customer Data.
Information collected automatically
- Device and browser data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Usage data: pages visited, links clicked, referring URLs, time spent on pages, and interaction patterns.
- Cookies and similar technologies: we use cookies, pixels, and local storage to operate the Site, remember preferences, and analyze traffic. See Section 6 for details.
Information from third parties
- Analytics providers: aggregated and pseudonymized usage data from services such as Google Analytics or similar tools.
- Business partners: information from partners or integrations you have authorized.
3. How We Use Your Information
We use personal information for the following purposes:
- Provide and operate the Site and Services, including account management, support, and billing.
- Communicate with you about your account, respond to inquiries, send transactional messages, and (with your consent where required) send marketing communications.
- Improve and develop our products, including analyzing usage patterns, diagnosing technical issues, and conducting internal research.
- Ensure security by detecting and preventing fraud, abuse, and unauthorized access.
- Comply with legal obligations and enforce our Terms of Service and other agreements.
4. How We Share Your Information
We do not sell your personal information. We may share it in the following circumstances:
- Service providers: vendors who help us operate the Site and Services (e.g., hosting, analytics, email delivery). They are contractually required to protect your data and use it only for the services they provide to us. A current list of sub-processors is available on request by emailing security@generalanalysis.com.
- Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
- Legal requirements: when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- With your consent: in any other case where you have given explicit consent.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.
Customer Data submitted through the Services is retained and deleted in accordance with your Enterprise Agreement or, absent one, our standard data-retention schedule.
6. Cookies & Tracking Technologies
We use the following categories of cookies:
- Strictly necessary: required for the Site to function (e.g., session management, security). These cannot be disabled.
- Analytics: help us understand how visitors interact with the Site so we can improve it.
- Functional: remember your preferences and settings.
You can manage cookies through your browser settings. Note that disabling certain cookies may affect Site functionality.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate or incomplete information.
- Deletion: request that we delete your personal information, subject to certain exceptions.
- Portability: request a machine-readable copy of your data.
- Opt out of marketing: unsubscribe from promotional emails via the link in any marketing message.
- Restrict or object to processing: in certain circumstances, request that we limit or stop processing your data.
To exercise any of these rights, contact us at security@generalanalysis.com. We will respond within the timeframe required by applicable law.
California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale or sharing of personal information. We do not sell personal information as defined by the CCPA. To submit a request, email security@generalanalysis.com.
EEA, UK, and Swiss residents (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your data on the basis of contractual necessity, legitimate interests (e.g., improving our services, ensuring security), and, where required, your consent. You have the rights listed above and may also lodge a complaint with your local supervisory authority.
8. Data Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
9. Data Breach Notification
In the event of a security breach that results in unauthorized access to your personal information, we will notify affected individuals and relevant authorities as required by applicable law. Where legally required, we will provide notification without unreasonable delay and no later than 72 hours after becoming aware of the breach.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required by law, we rely on appropriate legal mechanisms to protect your data during transfer.
11. Children's Privacy
The Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it promptly.
12. Third-Party Links
The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the latest version. We encourage you to review this page periodically. Your continued use of the Site or Services after changes are posted constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
- Email: security@generalanalysis.com
- General inquiries: info@generalanalysis.com
Omni Research, Inc.
San Francisco, California