Privacy Policy & Data Protection Charter
Effective Date: October 12, 2026 • Governing Law: Democratic Socialist Republic of Sri Lanka (PDPA No. 9 of 2022)
The Omicron Zero-Training Data Commitment
We strictly guarantee that traveler passports, national IDs, bank balance slips, and biometric photographs uploaded or processed via Omicron CoPilot, Omicron Flow, or Omicron Direct are never used to train, fine-tune, or calibrate public or proprietary AI models. Processing occurs within ephemeral encrypted memory environments with automated cryptographic destruction upon completion.
1. Identity of the Data Controller
This policy governs the processing of data by Omicron Technologies, a technology startup headquartered in Point Pedro, Jaffna, Northern Province, Sri Lanka (Telephone: +94 72 493 4357 / 0724934357 • Email: [email protected]).
2. Categories of Information Processed
When a licensed travel agency or individual uses our automation platform, we process only the strictly necessary categories of traveler data required by destination embassies and booking systems:
- Traveler Identity Data: Full legal name, date of birth, nationality, passport number, and MRZ cryptographic string.
- Travel Itinerary Data: Flight dates, flight numbers, accommodation booking vouchers, and intended travel itinerary.
- Financial Solvency Evidence: Certified bank statement summaries processed for embassy threshold verification.
- Agency Staff Audit Telemetry: Timestamp, staff identifier, and confirmation logs documenting supervisory approvals.
3. Legal Basis Under Sri Lanka PDPA & GDPR
Processing is carried out in strict accordance with Section 5 of Sri Lanka’s Personal Data Protection Act No. 9 of 2022 and Article 6 of the General Data Protection Regulation (GDPR):
- Contractual Necessity: Processing is essential to fulfill the travel agency’s mandate to lodge visas and issue tickets on behalf of the data subject.
- Data Minimization: Only fields explicitly required by the target government visa portal are parsed and populated.
4. Chrome Extension (Omicron CoPilot) Security
The Omicron CoPilot browser extension runs locally within the browser instance of the agency workstation. It accesses only authorized embassy portal tabs and communicates with our backend via TLS 1.3 encrypted API endpoints. It does not monitor personal browsing history, keystrokes outside form containers, or unapproved domains.
5. Data Retention & Right to Erasure
Agencies may configure an automated Zero-Retention Policy, where raw passport scans and bank statements are purged from cloud buffers within 60 minutes of confirmation. In all cases, data subjects hold the statutory right to request immediate erasure of their dossiers by contacting their travel agency or emailing our Data Protection Officer at [email protected].
6. Contact & Regulatory Inquiries
For privacy audits, compliance verifications, or questions:
Omicron Technologies Data Protection Desk
Point Pedro, Jaffna, Northern Province, Sri Lanka
Phone: +94 72 493 4357 / 0724934357
Email: [email protected]