Legal

Privacy Policy

Last updated: September 25, 2026

1. What we collect

When you create an account or use Ospri, we may collect:

  • Name, email address, and profile picture (via Google, Apple, or email signup)
  • Payment information processed securely through Stripe (we never store card numbers)
  • Competitor handles and URLs you add to your dashboard
  • Remix conversations, AI-generated scripts, and saved insights
  • Visits to our public pages: the page, the site that linked you, country, and device type
  • How you heard about Ospri, if you tell us during signup

2. How we use your data

We use collected data to:

  • Provide and maintain the Ospri service (scanning, alerts, remix features)
  • Process payments and manage subscriptions
  • Send transactional emails (alerts, weekly digests, billing notices)
  • Improve product quality and fix bugs
  • Respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Third-party services

Ospri uses the following third-party services to operate:

  • Stripe: payment processing
  • Google OAuth and Apple Sign In: authentication
  • OpenAI: remix and insight features
  • Resend: transactional email delivery
  • Supabase: media file storage
  • Vercel: hosting and infrastructure

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on infrastructure with encryption at rest and in transit. Passwords are hashed with bcrypt. Sessions use signed JWTs. We apply reasonable security measures to protect your information, but no system is 100% secure.

5. Cookies

We only use cookies that keep you signed in and remember choices you make during signup. We count visits to our public pages without cookies: your IP address and browser are turned into a random code that changes every day and can't be traced back to you. The IP address itself is never stored. We do not use advertising or tracking cookies.

6. Your rights

You can:

  • Access, update, or delete your account data from the Settings page
  • Export your competitor and insight data
  • Request full data deletion by emailing support@ospri.ai
  • Opt out of marketing emails at any time

If you are in the EU/EEA, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized usage data may be retained for product improvement.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of Ospri after changes constitutes acceptance.

9. Contact

Questions about this policy? Email support@ospri.ai.