Privacy Policy

This Privacy Policy describes how Osirus AI, LLC ("Osirus," "we," "our," or "us") collects, uses, shares, and protects personal data when you use our website, apps, APIs, and related services (collectively, the "Services").

This policy is informed by the structure used in OpenAI's privacy documentation and adapted for Osirus services and integrations. For reference, see OpenAI's policy at openai.com/policies/privacy-policy.

1) Personal Data We Collect

We may collect personal data in the following categories:

• Account and profile data: name, email, organization details, auth/account identifiers, and billing profile information.
• Content you provide: prompts, files, project content, chat/search/image/video/speech inputs, and generated outputs linked to your account or workspace.
• Technical and usage data: IP address, approximate location, browser/device data, cookies, session details, page interactions, diagnostics, and abuse-prevention signals.
• Payment and subscription data: plan, usage, invoices, and transaction metadata. Payment card processing is handled by third-party processors.
• Data from integrations/providers: information needed to route requests to third-party AI providers (for example, model/provider metadata and request-response telemetry).

2) How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain the Services.
• Authenticate users, manage workspaces, and process transactions.
• Support, troubleshoot, secure, and improve platform quality and safety.
• Prevent fraud, misuse, policy violations, and unauthorized access.
• Communicate with you about updates, billing, support, and service notices.
• Comply with legal obligations and enforce our Terms and policies.

3) Disclosure of Personal Data

We may disclose personal data in limited circumstances:

• Vendors and service providers: infrastructure, analytics, support, security, communications, and billing providers acting under contractual restrictions.
• AI model providers: when you run requests through connected providers (such as OpenAI, AWS Bedrock, and others), relevant request data is sent to those providers to fulfill your request.
• Organization administrators: if you use an org/workspace account, admins may have access to account/workspace metadata and content controls.
• Legal and safety reasons: to comply with law, legal process, or to protect rights, safety, and security.
• Business transactions: in connection with a merger, financing, acquisition, restructuring, or sale of assets.

4) AI Features, Model Improvement, and Controls

To provide and improve service quality and safety, we may process prompts, files, and outputs as permitted by applicable law and contracts. Where product controls are available, we will honor your selected settings.

When you connect third-party AI providers, your use is also subject to those providers' own terms and privacy policies.

5) Retention

We retain personal data only as long as needed for service delivery, legitimate business operations, security, dispute resolution, and legal compliance. Retention periods may vary based on data category, product settings, and legal requirements.

6) Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing.

You can use account settings where available or contact us to submit a request. We may need to verify your identity before completing certain requests.

7) Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session continuity, preference storage, performance measurement, and security. Browser settings may allow you to manage cookie behavior, but disabling cookies can impact service functionality.

8) Children

Our Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

9) Security

We implement reasonable technical, administrative, and organizational safeguards designed to protect personal data. No system is perfectly secure, and you should also protect your credentials and account access.

10) International Transfers

Your data may be processed in countries other than your own. Where required, we use contractual and operational safeguards for cross-border data transfers.

11) Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will post the updated version and revision date on this page.

12) Contact Us

If you have privacy questions or requests, contact us at legal@osirus.ai.