Privacy Policy

1. Introduction

Ody ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with GDPR and other applicable data protection regulations.

2. Information We Collect

We collect information that you provide directly to us, including:

• Name and contact information (email, company, role)
• Professional information (organization size, industry, AI maturity)
• Project details and success metrics
• Communication preferences and consent records
• Chat conversations and AI interactions
• Usage data and analytics

3. How We Use Your Information

We use the information we collect to:

• Process and respond to your inquiries and applications
• Provide, maintain, and improve our services
• Send you updates about our pilot program and relevant offerings
• Analyze usage patterns and optimize user experience
• Comply with legal obligations and enforce our terms
• Detect, prevent, and address technical issues and security threats

4. Data Storage and Security

Your data is encrypted in transit and at rest. We use industry-standard security measures to protect your personal information. Data is stored securely in EU-compliant data centers. We retain your data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. AI Services and Data Processing

Ody uses AWS Bedrock to provide AI chat capabilities. Important details about AI data processing:

• No Training on Your Data: Your prompts, chat conversations, and AI-generated responses are never used to train any AI models.
• Data Isolation: AWS Bedrock operates on an isolated infrastructure model where model providers have no access to your data.
• AWS Environment:All AI processing happens within the AWS ecosystem under AWS's security controls and compliance standards.
• No Third-Party Sharing: Your data does not leave the AWS environment or get shared with AI model providers.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke consent at any time

To exercise these rights, please contact us using the information provided below.

7. Cookies and Analytics

We use privacy-friendly analytics to understand how visitors interact with our website. We track basic usage events (page views, form submissions) without collecting personally identifiable information through third-party tracking cookies. You can opt out of analytics through our consent banner.

We also use essential cookies to:

• Maintain your session and authentication state
• Remember your preferences

You can control cookies through your browser settings, but disabling cookies may affect your ability to use certain features of our platform.

8. Data Sharing

We do not sell your personal information. We may share your data with:

• Service providers who assist in our operations (e.g., email services, hosting)
• Legal authorities when required by law or to protect our rights
• Third parties only with your explicit consent

Our service providers include:

• AWS (Amazon Web Services) for hosting and infrastructure
• AWS Bedrock for AI capabilities
• WorkOS for authentication services

These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information and not use it for other purposes.

9. International Transfers

If we transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions. Your information may be transferred to and processed in countries other than your country of residence. We take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

10. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your GDPR rights, or have concerns about our privacy practices, please contact us at: