Who we are
This Privacy Policy explains how Odysee AI ("we," "us," or "our") collects, uses, and shares personal information when you visit Odysee.ai (the "Site") or contact us through it.
Odysee AI is a company based in the United States. For visitors in the European Economic Area (EEA) and the United Kingdom, Odysee AI is the "controller" of your personal data under the EU and UK General Data Protection Regulation (GDPR).
This policy applies only to the Site. It does not cover our products or services, which may be governed by separate agreements or policies.
Information we collect
We collect two kinds of information: what you give us through our forms, and what is collected automatically when you browse the Site.
Information you provide. When you fill out a contact or demo request form, we collect the details you enter, such as your name, email address, company name, and the content of your message.
Information collected automatically. When you visit the Site, we and our analytics provider collect information about your device and how you use the Site. This includes your IP address, browser type, operating system, approximate location (city or country, derived from your IP address), referring website, pages viewed, time spent on pages, and the date and time of your visit. This information is collected using cookies and similar technologies, as described in "Cookies and analytics" below.
We do not intentionally collect sensitive personal information (such as health, financial account, or government ID data) through the Site. Please do not include this kind of information in form submissions.
How we use your information
We use the information we collect to:
- Respond to your inquiries and demo requests, and follow up about our products and services
- Operate, maintain, and improve the Site and understand how visitors use it
- Measure the effectiveness of our website content
- Protect the Site against fraud, spam, abuse, and security threats
- Comply with legal obligations and enforce our rights
If you submit a contact or demo request, we may send you follow-up communications related to your request. You can ask us to stop at any time by replying to the email or contacting us as described below. We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
Legal bases for processing (EEA and UK visitors)
If you are in the EEA or UK, the GDPR requires us to have a legal basis for each way we use your personal data. We rely on the following:
| Purpose | Legal basis |
|---|---|
| Responding to contact and demo requests | Steps taken at your request before entering a contract, and our legitimate interest in responding to business inquiries |
| Follow-up communications about your request | Our legitimate interest in developing business relationships (you can object at any time) |
| Analytics cookies and website measurement | Your consent, which you can withdraw at any time |
| Security, fraud and spam prevention | Our legitimate interest in keeping the Site safe |
| Complying with the law | Legal obligation |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can contact us for more information about that assessment.
International data transfers
We are based in the United States, so information collected through the Site is processed and stored in the United States. Our service providers may also process it in other countries.
When we transfer personal data from the EEA or UK to the United States or other countries without an adequacy decision, we use appropriate safeguards. These include the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), or transfers to recipients certified under the EU–US Data Privacy Framework and its UK Extension. You can request a copy of the relevant safeguards by contacting us.
Data retention
We keep personal information only as long as we need it for the purposes described in this policy, or as required by law.
- Contact and demo request information is kept for as long as needed to respond and follow up, and for up to 24 months after our last interaction with you, unless you become a customer or ask us to delete it sooner.
- Google Analytics data is retained for 14 months, after which it is automatically deleted.
When information is no longer needed, we delete it or de-identify it so it can no longer be linked to you.
Security
We use reasonable technical and organizational measures to protect personal information, including encryption in transit (HTTPS), access controls, and working with reputable service providers. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
Your privacy rights
Depending on where you live, you may have rights over your personal information. We honor the requests below wherever they apply.
EEA and UK residents have the right to:
- Access the personal data we hold about you and receive a copy
- Correct inaccurate or incomplete data
- Delete your data in certain circumstances
- Restrict or object to our processing, including processing based on legitimate interests
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing that happened before you withdrew it
- Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office)
US residents. Residents of California and other states with privacy laws (such as Colorado, Connecticut, Virginia, and others) may have the right to know what personal information we collect and how we use it, to access, correct, and delete it, and to opt out of the sale or sharing of personal information or its use for targeted advertising. We do not sell or share personal information for targeted advertising. We will not discriminate against you for exercising any of these rights.
How to make a request. Email us at info@odysee.ai. We may need to verify your identity before responding, and we will respond within the time required by applicable law (generally 30 days under the GDPR and 45 days under California law). You may use an authorized agent to make a request on your behalf, and if we deny your request, you may appeal by replying to our decision.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top. If we make material changes, we will give more prominent notice, such as a banner on the Site.