Privacy

What we store and what we measure

This site uses no cookies or trackers, and it loads nothing from third parties. We store what you send through its two forms, the waitlist and a company's request for more information, along with the IP address you sent it from, and we measure in aggregate which pages are read, without identifying anyone. It is all here.

In short

The essentials

We store your email and a few sign-up details to write to you about GrailAOS. If you choose integrator or company, we also send your contact details to the team so they can reply. Every email has an unsubscribe link, and if you ask us, we delete your data from the list.

If you request more information for your company, we store your request, with the pages of this site you read during that visit (you can leave them out), and we send it to the team by email so they can reply.

We also measure in aggregate which pages are read, for how long and how far, and which sites visitors come from, with no cookies, without identifying anyone and with no third parties. If your browser sends the GPC (Global Privacy Control) signal, we do not measure your visit.

The data controller is Grupo Omniatix Inteligencia Aplicada S.A.S. (Omniatix™). Two providers are involved: Cloudflare, which serves the site and stores the list, the requests and the measurement counters, and Resend, which sends the emails.

What we store

What stays on the list

When you sign up, the list stores this, and nothing else:

Your email
To write to you. We store it in lowercase and only once: if you sign up again, it is not duplicated.
The language
The language of the page you signed up from, so we write to you in that language.
Your interest
If you chose one: using it in your business, building solutions on GrailAOS or representing an integrator or a company.
The source page
The address of the page on this site you signed up from.
The IP address
The address of the connection you signed up from. We use it only for the sign-up limit, up to five attempts per hour from the same connection, and it is deleted after 30 days. To count the attempts we also store the connection of each attempt (for IPv6, only its prefix) and the time, which are also deleted after 30 days.
The status
Whether you are active on the list or marked as unsubscribed.
The dates
When you first signed up, the last time you signed up and, if you unsubscribe, when you did.
An unsubscribe code
A random code that goes in the unsubscribe link of every email, so that no one else can unsubscribe you.

What for

To write to you about GrailAOS

When you sign up, you get a confirmation email. After that we write rarely, and only when there is something concrete, such as access to the developer program, which is currently private, by invitation, and being prepared.

If you choose “I represent an integrator or a company”, we also send your contact details to the team by email, through Resend, so they can reply: your email, your interest, the site language, the source page and the time you signed up. The IP address is not in that email, which stays in the team's inbox. This happens when you sign up for the first time or sign up again after unsubscribing, not every time you repeat the sign-up.

The data on the list is not used for anything else. The IP address only serves to limit sign-ups from the same connection, and an unsubscribed record, until it is deleted, only serves to prove that we respected the unsubscribe.

Request for more information

If your company requests more information

The form to request more information about GrailAOS, on the enterprise, features and examples pages, stores your request so we can answer it, and nothing else. Sending it does not trigger any email to you: we write to you at the email you left.

Your request also brings us the pages of this site you read during this visit, with how long each one was in view and how far you got. Only your browser keeps that list, in this tab, and it is deleted when you close the tab; it does not leave your browser until you send the form. Above the button, a line says so: “see which” shows you the list and “don't include them” sends the request without it. With the GPC signal, no list is built.

The request goes by email to the Omniatix team's inbox, through Resend, with these same details; the IP address is not in that email.

What each request stores:

Your details
Your name, your company email and its domain, the company and your role.
What you want to solve
If you wrote it, up to 500 characters.
The pages you read
If they came with the request: the address of each page of this site you read during that visit, the seconds it was in view and how far you got, in quarters of the page.
The language and the source page
The language of the page you sent it from, and its address.
The dates
The date of the request and the date of the email the team receives.
The IP address
The address of the connection you sent it from. We use it only to limit requests, and it is deleted after 30 days. To count the requests we also store the connection and a code derived from the email that does not reveal it (not the email itself), with the time, which are also deleted after 30 days.

What we measure

Which pages are read, in aggregate

We measure in aggregate which pages are read, for how long and how far, and which sites visitors come from, with no cookies, without identifying anyone and with no third parties. If your browser sends the GPC (Global Privacy Control) signal, we do not measure your visit.

When you leave a page, or hide it, a script from the site itself sends a single notice to grailaos.com with this, and nothing else:

The page
Its address on this site and its language.
The time in view
In ranges, for example 30 to 60 seconds. It counts only the time the page was in view, not the time spent in another tab.
How far you got
In quarters of the page: less than a quarter, 25, 50, 75 or 100%.
Where you came from
Only the name of the site that brought you, for example example.com, never the full address; or that you came in directly.
The type of screen
Mobile or desktop.

How we measure it

Daily counters, with no one's data

The notice carries no identifier and nothing that tells your browser apart from another. We do not store your IP address: the server uses it only in memory, while it handles the notices, to stop excessive sending from the same connection, and it never writes it to the database or to a log. Each notice adds one to daily counters: how many views each page had, in which ranges of time and of reading, and from which sites. No row per visit is kept.

We also count, per day, how many times the versions of each page meant for models, the files, the site's , the sitemap and the robots file are requested, by the kind of reader that the requesting program declares: a model provider's crawler or assistant, another program or a browser. That uses no script and does not store the IP address. Separately, the site's MCP limits requests per connection: it records the connection (the IP address, or its prefix for IPv6) in one-minute windows, and old windows are deleted with the following requests.

We only measure on grailaos.com, never on a test copy of the site.

What we do not do

No cookies, no trackers, no third parties

The site sets no cookies and has no pixels or trackers. It loads nothing from other sites: the fonts, the styles, the scripts and the measurement are served from grailaos.com, and what is measured stays in the site's database.

Reading the site leaves nothing stored beyond this tab: while you browse, your browser notes in it the list of pages you read during this visit, for the request for more information, and the list is deleted on its own when you close the tab. That list does not leave your browser unless you send that request. The two forms, the waitlist and the request for more information, send data only when you submit them.

Who is involved

The data controller and the providers

The data on the list, in the requests for more information and from the measurement is processed by Omniatix, with two providers:

Data controller
Grupo Omniatix Inteligencia Aplicada S.A.S. (Omniatix), based in Argentina.
Cloudflare
Serves the site, receives the forms and the measurement notices, and stores the list, the requests and the counters in its database. For the request for more information, it also checks whether your email's domain receives mail (its MX record): the lookup carries only the domain, not your email.
Resend
Sends the list's emails: the confirmation, the updates and, if you choose integrator or company, the email that sends your contact details to the team. Also the email that brings each request for more information to the team.

How long

How long we keep the data

Each piece of data is kept for a set period and then deleted. The periods run like this:

Active record
24 months from the last time you signed up; then it is deleted. Every time you sign up again, the period starts over from that sign-up.
Unsubscribed record
Unsubscribing does not delete it: it marks it as unsubscribed and we stop writing to you. It is deleted 12 months after you unsubscribe, and until then it only serves to prove that we respected the unsubscribe. If someone signs up your email again through the form, the record is reactivated and a confirmation email is sent.
Request for more information
24 months from your last request, with the pages you read if they came with it; then it is deleted. If you request information again with the same email, the period starts over from that request.
Aggregate measurement
The daily counters of pages, source sites and readings by models are deleted 25 months after their day. The list of pages in your tab is deleted when you close it.
IP address
It is deleted after 30 days, in the record, in the requests for more information and in the attempts. It only serves to limit sign-ups and requests.
The email with your contact details that the team receives
If you chose integrator or company, or if you requested more information. It is deleted 24 months after the last contact.

Your data

Unsubscribing and asking for deletion

Every email has an unsubscribe link: one click and we stop writing to you. If your email program offers an unsubscribe option in the message list, that works too.

To see, correct or delete your data, write to us at privacy@omniatix.com. If you ask for deletion, we remove your data from the list and from the requests for more information, with the pages that came with them, and, if we sent your details to the team, we also delete that email, without waiting for the period to end.

The aggregate measurement stores nothing that identifies you: there is no data of yours to see or delete there. To keep your visit from being measured, turn on the GPC signal in your browser.

llms.txt A file with the index of a site, meant to be read by models.MCP Model Context Protocol: an open protocol that lets a model use the tools and data that another server offers.