Privacy policy
BD AI is operated by OMS IT. This policy explains what personal data the platform holds, why it holds it, who can see it and how long it is kept. It describes the system as it actually works today.
01What we collect
Account data: email address, display name and the roles assigned to your account.
Support data: help cases, AI Help Center questions, live chat messages and any attachments you choose to send.
Learning data: enrolments, progress, assessment attempts and issued certificate records.
Document data: files you upload to the document vault, plus their metadata and version history.
Technical data: security and audit events such as sign-in, permission checks and administrative actions.
02Why we hold it
To operate the account, answer your question, route it to a human reviewer where needed, run learning and certification records, and keep an auditable record of administrative decisions.
We do not sell personal data, and we do not use it for advertising.
03Who can see it
Row-level security in the database restricts each record to the person it belongs to and to authorised BD AI staff with an explicit permission for that module.
Administrative access is permission-scoped and every privileged action is written to an append-only audit log that staff cannot edit or delete.
04AI processing
Questions asked in the AI Help Center are processed by an AI model to draft a grounded answer from the BD AI knowledge base. The AI never decides eligibility, approval, verification or any other outcome — a named human reviewer does.
Do not put national ID numbers, passwords, financial account numbers or medical details into AI chat. If you already did, contact us and we will remove the record.
05Retention
Support and learning records are kept while your account is active and for as long as needed to answer a later dispute about the same case or certificate.
Audit records are immutable and retained as the platform's compliance evidence.
06Your rights
You can ask for a copy of your data, ask for a correction, or ask for deletion of data we are not required to retain. Requests are handled by a human and answered through an official BD AI channel.
07Third parties
BD AI uses infrastructure providers for hosting, database, storage, email delivery and AI inference. They process data on our instructions only. A third-party AI provider is infrastructure — it is never presented as a partner, endorser or certifier of BD AI.
Questions about this policy go through the BD AI contact page or the AI Help Center. BD AI only replies from the channels listed on the Trust & Verification page.