Privacy Policy

1. Who this policy covers

It covers visitors to our website and people who use the Service, including agency and in-house marketing teams and the clients they invite to review content. If an organization gave you access to a workspace, that organization controls the workspace, and we may refer some requests to them.

2. Information we collect

• Account information: your name, email address, password (stored securely by our authentication provider, never in plain text) and any profile details you add.
• Workspace content: marketing plans, brand voice rules, posts, captions, images, videos, caption files, campaigns, comments, and review and approval decisions and history.
• AI requests and results: the text and files you send to Ospi Agents and the results they return.
• Usage and technical information: the features you use, actions you take, AI usage and cost per request, device and browser details, IP address, and logs we use for security and troubleshooting, including an audit log that workspace owners and admins can see.
• Communications: the emails we send you (such as invites, review notifications and account emails) and messages you send us.
• Notification tokens: if you turn on browser notifications, a token that lets us send them.
• We don't collect payment card details today. If we introduce paid plans, payments will be handled by a payment processor and we won't store full card numbers.

3. How we use information

• To provide and run the Service, including accounts, workspaces, the content calendar, campaigns, and review and approval.
• To run Ospi Agents on your content when you ask, using your workspace's marketing plan and brand voice.
• To send service emails, such as invites, review requests, approvals, change requests and password resets.
• To keep the Service secure and reliable: preventing abuse, enforcing AI usage limits and investigating problems.
• To improve the Service using aggregated usage information.
• We do not sell your personal information, and we do not use your workspace content to train our own AI models.

4. AI processing

When you use Ospi Agents, the content involved, along with your workspace's brand context, is sent to AI model providers through our AI routing service to produce a result. Those providers process it under their own terms and policies. AI output can be inaccurate, so please review it before you publish.

5. Who we share information with

We share information only as needed to run the Service:

• Lovable: application hosting, database, authentication, file storage and email delivery (built on Supabase).
• OpenRouter: routes AI requests to model providers.
• AI model providers reached through OpenRouter or our hosting provider's AI gateway, such as Anthropic, Google, OpenAI, Black Forest Labs and Recraft.
• Google Firebase: browser push notifications, if you turn them on.

We may also share information to comply with the law, to protect the rights, safety and security of our users and others, or as part of a merger, acquisition or sale of assets, with notice where required. Inside a workspace, other members can see that workspace's content and history.

6. Cookies and browser storage

We use essential browser storage to keep you signed in and remember preferences, such as the workspace you last used. We don't use advertising cookies.

7. How long we keep information

We keep account and workspace information while your account or workspace is active. When a workspace owner asks us to delete a workspace, or you ask us to delete your account, we delete the information within 30 days, except limited records we must keep for legal, security or accounting reasons. Backups are overwritten on a rolling schedule.

8. Security

Each workspace is isolated so that members of one workspace can't access another's data. Sign-in requires a confirmed email address, and data is encrypted in transit. No system is perfectly secure. If you believe you've found a security issue, email us.

9. Your rights and choices

You can ask to access, correct, download or delete your personal information by emailing us. We'll verify your identity before acting on a request. If the information belongs to a workspace your organization controls, we may refer you to that organization.

California residents: under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use it, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising.

10. Children

The Service is not directed to children under 16, and we don't knowingly collect their personal information.

11. Where information is processed

We're based in the United States. Information is processed in the United States and in the other countries where our service providers operate.

12. Changes to this policy

We'll post any changes on this page and update the date at the top. If a change is significant, we'll also email workspace owners.

13. Contact

Ospi Technologies LLC, Santa Clara, California. Email: hello@helloospi.com.