Need Help, Talk Us: (02) 3814 2340
YouTube LinkedIn
Privacy Policy / AI Data Handling

Privacy, Data Protection & AI Data Handling

Omnisenti is committed to handling personal information, client data, and AI-related operational data responsibly, transparently, and securely.

This policy explains how we collect, use, disclose, store, protect, and manage information in connection with our website, enquiries, AI workflow reviews, implementation projects, support activities, AI systems, and related services.

Last updated: 21 May 2026

Overview

Privacy at a Glance

What We Collect

We may collect contact details, business information, enquiry details, website usage information, client project information, AI system data, support data, and related operational information.

Why We Use It

We use information to respond to enquiries, assess AI opportunities, deliver services, design workflows, configure AI systems, provide support, improve reliability, meet legal obligations, and protect our business and clients.

How We Protect It

We use reasonable technical, organisational, and administrative safeguards appropriate to the nature of the information and the services provided.

Your Choices

You may contact us to request access, correction, deletion, marketing opt-out, or to raise privacy questions or complaints, subject to applicable law and contractual obligations.

This summary is provided for convenience. The full policy below explains Omnisenti's practices in more detail.

1 Scope of This Policy

This Privacy Policy applies to personal information and related data handled by Omnisenti Pty Ltd (ACN 672 324 736) and its related entities (referred to as "Omnisenti," "we," "us," or "our") in connection with:

  • use of our website at omnisenti-eu.com and associated domains;
  • contact forms, enquiry forms, and Youform submissions;
  • sales enquiries and prospect communications;
  • AI workflow reviews and consultations;
  • meetings, proposals, and client onboarding;
  • AI implementation projects, including design, configuration, integration, testing, deployment, and optimisation;
  • AI voice, chat, private AI, workflow automation, integration, and support services;
  • events, webinars, AI Insights sign-ups, and marketing communications;
  • support requests and service interactions;
  • partner and distributor enquiries;
  • any other communications with Omnisenti.

This policy describes Omnisenti's own handling of information. Where Omnisenti processes data on behalf of a client as part of a service engagement, responsibilities for specific data may be allocated in a proposal, services agreement, data processing addendum, statement of work, or other client agreement. In those circumstances, the relevant client agreement will govern to the extent of any inconsistency, unless applicable law requires otherwise.

This policy does not apply to information contained in records held by our clients where we act solely as a service provider. In those cases, the client's privacy policy and applicable data processing terms apply to the extent relevant.

2 Information We Collect

The types of information we may collect depend on how you interact with us. We only collect information that is reasonably necessary for the purposes described in this policy, for our services, or as otherwise permitted or required by law.

A. Identity and contact information

Name, email address, phone number, company or organisation name, role or title, location, and business contact details.

B. Business and enquiry information

Enquiry type, business problem or workflow description, industry, website, preferred contact method, service interest, implementation goals, and partner or distributor context.

C. Website and device information

IP address, browser type, device information, pages visited, referring URLs, approximate geographic location, cookie and analytics data, and interaction data.

D. Communication records

Email correspondence, meeting notes, phone call details, support communications, event and webinar interactions, and sales or client relationship history.

E. Client project information

Workflow maps, system information, business processes, documents, data sources, integration requirements, CRM, calendar, inbox, and workflow tool information, test scenarios, implementation notes, operating rules, and approval and escalation logic.

F. AI system data

Prompts, AI outputs, transcripts, conversation logs, call routing metadata, model configuration information, test data, evaluation notes, issue logs, performance observations, and quality-assurance records.

G. Voice AI and call-related information

Caller phone number, call date and time, call duration, audio recordings where enabled, transcripts where generated, caller intent, routing decision, transfer outcome, voicemail handoff information, call metadata, and testing and optimisation notes.

H. Support and diagnostic information

Support request details, issue descriptions, screenshots, logs, affected systems, troubleshooting records, change requests, and optimisation requests.

I. Sensitive or regulated information

Omnisenti may handle sensitive or regulated information only where necessary, lawful, and appropriate for a specific service or client project. Examples may include health-related information, legal matter information, financial information, insurance information, identity information, employment information, customer or patient context, and confidential business information.

We ask that you do not submit sensitive, confidential, privileged, regulated, or third-party information through public website forms unless we have agreed appropriate safeguards or contractual terms.

3 How We Collect Information

We collect information through a range of sources and methods, including:

  • directly from website visitors through forms, submissions, and interactions;
  • contact forms and Youform submissions;
  • email, phone, online meetings, and in-person meetings;
  • client documents, systems, and authorised uploads;
  • integrations and APIs connected as part of service delivery;
  • AI agents and automation workflows configured for or with clients;
  • voice AI calls and transcripts where applicable;
  • support requests and service interactions;
  • events, webinars, and related registrations;
  • analytics tools and website technologies;
  • service providers and partners who assist us;
  • authorised client representatives;
  • public business sources where appropriate and lawful.

We generally aim to collect information directly from you or your organisation where reasonable and practicable. In some client projects, information may be provided by the client, a partner, an authorised user, or a connected system.

4 How We Use Information

We use information for purposes that are reasonably necessary for our business functions, services, client relationships, legal obligations, and legitimate business interests, or as otherwise permitted by applicable law or agreement. These purposes include:

  • responding to enquiries and requests;
  • assessing AI opportunities and suitability;
  • conducting AI workflow reviews;
  • preparing proposals, scopes, and agreements;
  • delivering consulting, implementation, integration, automation, and support services;
  • designing workflows and AI operating models;
  • configuring, testing, monitoring, and optimising AI systems;
  • providing voice AI, chat AI, private AI, workflow automation, data analysis, and integration services;
  • providing support and troubleshooting;
  • managing client relationships;
  • improving service reliability and quality;
  • protecting security and preventing misuse;
  • complying with legal, regulatory, contractual, tax, accounting, and administrative obligations;
  • communicating about services, events, updates, and insights;
  • managing partner or distributor relationships;
  • enforcing agreements and protecting Omnisenti's rights, people, clients, and systems.

5 AI Systems, Automation and Human Oversight

Omnisenti designs, implements, configures, and supports AI systems to assist with a range of business functions. These may include:

  • workflow analysis and process mapping;
  • knowledge retrieval and information access;
  • call triage and routing;
  • customer support automation;
  • document handling and processing;
  • data analysis and reporting;
  • report generation;
  • quotation and proposal workflows;
  • routing and escalation logic;
  • internal productivity and operational support;
  • quality assurance and service testing;
  • service optimisation.

Important safeguards

  • AI systems may generate incorrect, incomplete, or context-dependent outputs. Outputs should be reviewed before being relied upon for important decisions.
  • Omnisenti designs AI implementations with human oversight, fallback, escalation, review, or approval points where appropriate to the use case and risk profile.
  • AI outputs should not be treated as professional advice unless separately reviewed by qualified professionals or authorised personnel.
  • Client-specific AI systems may require client-side policies, notices, approvals, and monitoring depending on the deployment context and applicable requirements.
  • Omnisenti does not guarantee that AI outputs will be error-free or suitable for every context.

Transparency

Where AI systems interact directly with individuals, Omnisenti encourages appropriate transparency, notice, and escalation pathways, depending on the context, jurisdiction, and client deployment.

6 Client Project Data and Implementation Data

Client project data may include workflows, documents, prompts, testing materials, system logic, data sources, integration details, call flows, routing rules, issue logs, client instructions, and related operational information.

How we use client project data

Omnisenti may use client project data to:

  • understand the client's workflow and operational context;
  • design AI-enabled systems and solutions;
  • configure implementation components;
  • test and refine outputs;
  • troubleshoot issues;
  • document operating logic;
  • provide support;
  • improve the specific client implementation;
  • maintain continuity of service.

Project-specific handling

Client project data may be subject to separate confidentiality obligations, service agreements, statements of work, data processing terms, and retention arrangements. Different projects may require different handling depending on the sensitivity of the data, the system design, the applicable contract terms, and relevant law.

Do not assume that all client data is treated identically. Where a client has specific requirements for data handling, residency, access restrictions, or deletion, those requirements should be agreed in writing before implementation begins.

7 Voice AI, Call Recordings and Transcripts

Omnisenti designs, configures, and supports voice AI systems for clients. These systems may involve:

  • call audio and audio streams;
  • call recordings where enabled;
  • transcripts where generated;
  • caller phone numbers;
  • caller intent classifications;
  • call routing decisions;
  • transfer metadata and outcomes;
  • voicemail handoffs;
  • business-hours logic and scheduling;
  • escalation logs;
  • call-testing records;
  • quality assurance notes.

Recording and transcription

Whether calls are recorded, transcribed, retained, reviewed, or deleted depends on the client deployment, system configuration, applicable law, consent requirements, and client agreement. Omnisenti configures these settings based on client instructions and applicable legal requirements.

Client responsibility

Where a client deploys a voice AI system that interacts with its customers or callers, the client may be responsible for providing appropriate notices, obtaining required consents, and complying with recording, telecommunications, privacy, consumer, and industry-specific obligations.

Omnisenti position

Omnisenti encourages voice AI deployments to include appropriate transparency, fallback, escalation, and human support pathways. We do not use voice biometrics for identification or authentication purposes unless this has been expressly agreed with the client in writing and a lawful basis for biometric processing has been established.

8 Private AI, Knowledge Systems and Client Documents

Omnisenti helps clients implement private AI or knowledge-grounded AI systems using approved organisational content. These may include:

  • approved documents and manuals;
  • policies and procedures;
  • frequently asked questions;
  • internal knowledge bases;
  • client data sources;
  • business rules;
  • structured and unstructured information.

Purpose

The purpose of these systems is to make approved information more accessible and useful inside the client's operational context, subject to appropriate controls and boundaries.

Controls

Depending on the project, controls may include approved source lists, access restrictions, prompt and response design, human review paths, version management, knowledge update processes, testing, output limitations, and audit or review logs where available.

Client responsibility

Clients are responsible for ensuring they have the right to provide Omnisenti with any documents, data, or information used in a private AI or knowledge system. This includes confirming appropriate licences, permissions, consents, and authority to use third-party or personal information in the system.

9 Model Training and AI Provider Use

This section explains how Omnisenti approaches model training, AI provider relationships, and the processing of information through third-party AI systems.

Client data and model training

Omnisenti does not intentionally use identifiable client data, customer data, or sensitive information to train public AI models unless expressly agreed in writing.

AI provider relationships

Omnisenti uses third-party AI model providers, cloud platforms, automation platforms, voice AI platforms, and related service providers to deliver services. These providers may process information according to their own technical settings, security commitments, data processing terms, and service configurations. We select providers based on their capability, security practices, and suitability for the intended use case, but we do not control their infrastructure or operations.

Enterprise and private configurations

Where appropriate and commercially available, Omnisenti may use enterprise, private, restricted, or configured environments to reduce unnecessary exposure of client information.

Service improvement

Omnisenti may use de-identified, aggregated, or non-confidential learnings to improve its methods, templates, testing processes, documentation, and service quality, provided this does not disclose identifiable personal information or confidential client information.

Specific requirements

If a client requires specific data residency, no-training, retention, deletion, or subprocessor controls, those requirements should be addressed in the relevant agreement before implementation. Do not assume that default provider settings will meet specific client requirements unless confirmed in writing.

10 Sensitive and Regulated Information

Sensitive or regulated information may require additional safeguards depending on the nature of the information, the applicable law, and the service context.

Examples of sensitive or regulated information

Examples may include health information, legal matter information, financial or insurance information, identity documents, employment information, personal information about children or vulnerable people, commercially confidential information, and privileged information.

Collection and handling

Omnisenti only seeks to collect or process sensitive information where it is reasonably necessary for a specific service, authorised by the relevant client or individual, permitted by law, or otherwise covered by an applicable agreement.

Important warning

Do not send sensitive, privileged, regulated, or confidential information through public contact forms unless Omnisenti has agreed appropriate safeguards or a secure intake process. If you are unsure whether information is appropriate to submit through a public form, contact us first at privacy@omnisenti.com or service@omnisenti.com.

11 Cookies, Analytics and Website Technologies

Omnisenti uses cookies, pixels, analytics tools, embedded content, and similar technologies to:

  • operate the website;
  • understand website performance;
  • measure visitor behaviour;
  • improve content and usability;
  • support security;
  • manage forms and submissions;
  • understand lead-generation performance;
  • connect visitors with relevant information.

Types of technologies

We may use essential cookies necessary for website operation, analytics cookies to understand usage, and embedded third-party services for functionality. Where we use third-party services such as form tools (for example, Youform), analytics providers, or embedded content from platforms such as YouTube or LinkedIn, those services may set their own cookies and collect information according to their own policies.

Consent

Where required by applicable law, we will provide cookie notices or consent options. You can manage cookie preferences through your browser settings. Blocking certain cookies may affect website functionality.

12 Disclosure to Service Providers and Third Parties

Omnisenti may disclose or make information accessible to service providers and third parties who assist us in delivering services, operating our business, and meeting our obligations. These may include:

  • hosting and cloud providers;
  • AI model and API providers;
  • automation platforms;
  • voice AI platforms;
  • telephony providers;
  • CRM and customer support tools;
  • form providers;
  • analytics providers;
  • email and communication providers;
  • workflow and integration tools;
  • payment, accounting, and billing providers;
  • professional advisers;
  • subcontractors and implementation partners;
  • client-authorised third parties;
  • regulators, law enforcement, courts, or government bodies where required;
  • parties involved in business transfers, restructuring, or due diligence where appropriate and lawful.

We require service providers to handle information only as necessary to provide services to us or our clients, subject to applicable contractual, technical, or organisational safeguards where appropriate.

13 Overseas Disclosure and Cross-Border Processing

Because Omnisenti uses cloud, AI, automation, communication, analytics, and software providers, information may be stored, processed, accessed, or supported from locations outside Australia.

Potential jurisdictions

Potential jurisdictions may include Australia, the United States, the United Kingdom, the European Union and European Economic Area, Singapore, Hong Kong, New Zealand, and other locations where clients, service providers, or infrastructure operate.

Variability

The exact locations may depend on the systems used for a particular project, provider configurations, client requirements, and applicable agreements. Not all information is processed in all locations.

Safeguards

Where appropriate, Omnisenti may use contractual safeguards, provider security terms, data processing arrangements, access controls, and project-specific restrictions.

Client requirements

If clients require particular data residency or cross-border controls, those requirements should be agreed before implementation.

14 Data Security

Omnisenti takes reasonable technical, organisational, and administrative steps to protect information from misuse, interference, loss, unauthorised access, modification, and disclosure.

Security measures

Measures may include, depending on the service and data context:

  • access controls and role-based permissions;
  • least-privilege access principles;
  • password and authentication controls;
  • secure configuration of systems and services;
  • encryption where appropriate;
  • reputable cloud and software providers;
  • confidentiality obligations for staff and contractors;
  • internal access restrictions;
  • monitoring and logging where available;
  • backup and recovery practices where appropriate;
  • vendor due diligence where appropriate;
  • incident response procedures.

AI system security

AI systems are subject to specific security risks, including prompt injection, data exfiltration, model manipulation, and adversarial behaviour. We take reasonable steps to implement security measures appropriate to the risk profile of each system, including input validation, output filtering, access controls, and monitoring for anomalous behaviour.

Security limitations

No method of electronic transmission, storage, or processing is completely secure. Omnisenti does not guarantee absolute security, but we take reasonable steps appropriate to the nature of the information and services.

15 Data Retention

Omnisenti retains information for as long as reasonably necessary for the purposes described in this policy, including to provide services, support clients, meet legal obligations, resolve disputes, maintain business records, improve specific implementations, and protect Omnisenti's rights and interests.

Retention periods

Different retention periods may apply depending on the type of information and the applicable legal and operational requirements:

  • website enquiries and lead communications;
  • sales communications and proposals;
  • client project data and implementation records;
  • AI system logs and performance data;
  • voice recordings and transcripts;
  • support records and issue logs;
  • accounting, billing, and financial records;
  • marketing and communication records;
  • legal or contractual records.

Client project data

Client project data retention may be governed by the relevant statement of work, service agreement, data processing agreement, or client instructions.

Deletion and de-identification

Where information is no longer required, Omnisenti may delete, de-identify, archive, or securely restrict access to it, subject to legal, contractual, technical, and operational requirements.

16 Data Breaches and Incident Response

If Omnisenti becomes aware of a suspected data incident involving personal information, it will take reasonable steps to assess, contain, investigate, and respond to the incident.

Notification

Where required by applicable law, Omnisenti may notify affected individuals, relevant clients, regulators, or other parties. Not all incidents are notifiable. Notification depends on legal requirements, the seriousness of the incident, the risk of harm, contractual terms, and the role of Omnisenti in relation to the data.

Client projects

Client projects may include separate breach notification requirements and procedures agreed in the relevant contract or data processing terms.

Approach

Omnisenti will handle data incidents in accordance with applicable legal obligations and relevant client agreements. If you become aware of a potential data security issue affecting Omnisenti systems or services, please contact us promptly at privacy@omnisenti.com.

17 Your Rights and Choices

Depending on your location and applicable law, you may have rights in relation to personal information we hold about you. These may include:

  • requesting access to personal information;
  • requesting correction of inaccurate or incomplete information;
  • requesting deletion where applicable;
  • requesting restriction or objection to processing where applicable;
  • withdrawing consent where processing depends on consent;
  • opting out of marketing communications;
  • requesting information about how personal information is handled;
  • making a complaint about privacy practices.

Jurisdiction-specific rights

For Australian individuals, rights may include access and correction under the Australian Privacy Principles. For individuals in other jurisdictions, additional rights may apply depending on location and circumstances.

Requests

We may need to verify your identity before responding to a request. We may refuse or limit requests where legally permitted, required, or where the rights of others, confidentiality, legal privilege, security, or contractual obligations are affected.

Making a request

To exercise any of these rights, please contact us using the details in Section 26. We will respond within a reasonable period in accordance with applicable law.

18 Automated Decision-Making and AI-Assisted Decisions

Omnisenti may use AI systems, automation, or decision-support tools to assist with service delivery, workflow analysis, routing, support triage, lead qualification, business operations, or client implementations.

Significant decisions

Omnisenti does not intend to use automated systems to make decisions about individuals that have a significant legal or similarly significant effect without appropriate safeguards, notice, human review, or client-specific arrangements where required.

Client systems

Where Omnisenti designs AI systems for clients, the client may determine how the system is used, what decisions are made or supported, and what notices, consents, human review, or appeal mechanisms are required. Omnisenti's role is to design and configure the system according to the client's requirements and applicable law.

Additional information

If automated decision-making is used in a way that may materially affect individuals, additional information may be provided in the relevant client policy, system notice, terms, or project documentation.

19 Client Responsibilities

Clients using Omnisenti systems and services have important responsibilities to ensure lawful and appropriate handling of information. Depending on the project, these may include:

  • providing their own privacy notices to end users, customers, or employees;
  • obtaining required consents and authorisations;
  • ensuring they have the right to provide data to Omnisenti;
  • informing callers or users when they interact with AI where required;
  • complying with call recording and telecommunications obligations;
  • complying with health, legal, financial, employment, consumer, or industry-specific obligations;
  • managing end-user rights requests where the client controls the relationship;
  • reviewing AI outputs where human review is required;
  • maintaining accurate and up-to-date source materials;
  • approving knowledge-base content before deployment;
  • defining escalation and human review responsibilities;
  • ensuring client-side staff use the system appropriately and in accordance with applicable policies.

Omnisenti's role

Omnisenti's role may vary by project. In some cases, Omnisenti may act as a service provider, processor, contractor, integrator, adviser, or independent controller depending on the circumstances and the applicable agreement.

20 Confidentiality, Submissions and Third-Party Information

Please do not submit confidential, sensitive, privileged, regulated, or third-party information through public website forms or unsecured channels unless Omnisenti has agreed appropriate safeguards.

Authority to provide information

If you provide information about another person, organisation, customer, patient, caller, employee, or third party, you must ensure you have the authority or lawful basis to provide it.

Reliance on provided information

Omnisenti may rely on information provided by clients, authorised users, partners, or representatives as being lawfully provided unless otherwise notified. If you become aware that information provided to us was not lawfully obtained or should not have been shared, please contact us promptly.

21 Marketing Communications

Omnisenti may use business contact information to send updates, insights, event information, service information, or relevant communications where permitted by law.

Opting out

Individuals may unsubscribe or opt out of marketing communications using available unsubscribe options or by contacting us at privacy@omnisenti.com or service@omnisenti.com.

Non-marketing communications

Administrative, service, legal, security, or transactional communications may still be sent where necessary, even if you have opted out of marketing communications.

22 Children and Minors

Omnisenti's website and services are generally intended for businesses and professional users, not children.

Omnisenti does not knowingly collect personal information from children through its website for general marketing or enquiry purposes.

If a client project involves minors, students, patients, care recipients, or vulnerable individuals, additional safeguards, notices, consents, and client-specific arrangements may be required.

23 Third-Party Websites and Services

The Omnisenti website may contain links to third-party websites, platforms, embedded content, or services such as LinkedIn, YouTube, form tools, analytics tools, or partner websites.

Omnisenti is not responsible for the privacy practices, content, or security of third-party websites or platforms. Individuals should review the privacy policies of those third parties before providing any information.

24 Client Agreements and Data Processing Terms

For client projects, this Privacy Policy may be supplemented by:

  • a proposal or statement of work;
  • a master services agreement;
  • a data processing addendum;
  • a confidentiality or non-disclosure agreement;
  • a security schedule;
  • a support agreement;
  • an AI use policy;
  • subprocessor terms;
  • project-specific data handling instructions.

Hierarchy

If there is inconsistency between this Privacy Policy and a signed client agreement, the client agreement may prevail to the extent of the inconsistency, unless applicable law requires otherwise.

25 Changes to This Policy

Omnisenti may update this Privacy Policy from time to time to reflect changes in services, technology, AI systems, legal requirements, operational practices, or business structure.

The updated version will be published on this page with a revised "Last updated" date. Where required by law or where changes are material, Omnisenti may provide additional notice.

Continued use of the website or services after changes are posted constitutes acceptance of the updated policy, subject to your rights under applicable law.

26 Contact Us About Privacy

If you have a privacy question, request, or complaint, please contact us with details of the issue.

Contact details

Privacy enquiries: privacy@omnisenti.com
General enquiries: service@omnisenti.com
Phone: (02) 3814 2340
Address: 5/9 Montgomery St, Kogarah NSW 2217, Australia

Complaint handling

We take privacy complaints seriously. We may need to verify your identity and request additional information before responding. We aim to respond within a reasonable period.

External review

For Australian privacy complaints, if you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

Questions?

We're Here to Help

If you have questions about this Privacy Policy, how we handle data, or your privacy rights, our team is available to assist.

Or call us on (02) 3814 2340

↑ Back to top