1. What we collect

When you create an account or use Ospri, we may collect:

Name, email address, and profile picture (via Google, Apple, or email signup)
Payment information processed securely through Stripe (we never store card numbers)
Competitor handles and URLs you add to your dashboard
Remix conversations, AI-generated scripts, and saved insights
Usage data such as page views, feature usage, and session duration

2. How we use your data

We use collected data to:

Provide and maintain the Ospri service (scanning, alerts, remix features)
Process payments and manage subscriptions
Send transactional emails (alerts, weekly digests, billing notices)
Improve product quality and fix bugs
Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Third-party services

Ospri uses the following third-party services to operate:

Stripe — payment processing
Google OAuth and Apple Sign In — authentication
OpenAI — AI-powered remix and insight features
Resend — transactional email delivery
Supabase — media file storage
PostHog — product analytics (anonymized usage data)
Vercel — hosting and infrastructure

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on infrastructure with encryption at rest and in transit. Passwords are hashed with bcrypt. Sessions use signed JWTs. We apply reasonable security measures to protect your information, but no system is 100% secure.

5. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used to understand product usage. We do not use advertising or tracking cookies.

6. Your rights

You can:

Access, update, or delete your account data from the Settings page
Export your competitor and insight data
Request full data deletion by emailing support@ospri.ai
Opt out of marketing emails at any time

If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized usage data may be retained for product improvement.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of Ospri after changes constitutes acceptance.

9. Contact

Questions about this policy? Email support@ospri.ai.

Privacy Policy