OSSA.AI Privacy Policy

Effective as of: 1st of January 2024


OSSA.AI operates as an autonomous platform dedicated to the creation of short-form videos for social media, enabling users to craft videos through text inputs. We acknowledge the significance of your privacy and your concern regarding the handling and sharing of your information online. We hold in high regard and protect the privacy of every individual who accesses our websites and engages with our platform, committing to the collection and utilization of information in a manner that aligns with your rights and obligations under applicable laws.

This Policy outlines the methods by which OSSA.AI Inc (“OSSA.AI”, “we”, “us”, “our”) gathers, employs, and discloses personal data about you in the context of your usage of our website (https://ossa.ai/) (“Site”), along with our application programming interfaces, software, tools, data, and documentation provided on the Site (together referred to as “Services”). Within the scope of this Privacy Policy, OSSA.AI acts as the data controller of your information, where “you” and “your” refer to you as the user of the Services.

Please review this Privacy Policy with attention to ensure your understanding of it. Your use of any of our Services constitutes your acceptance of this Privacy Policy and our practices regarding the collection, use, and disclosure of your information as detailed herein. If you do not concur with this Privacy Policy, it is imperative that you cease using our Services immediately.

Policy Coverage and Scope

This Privacy Policy is specifically applicable to our practices in collecting and processing information concerning users of the Services, which includes individuals who engage with the Services on behalf of a business client. This Privacy Policy is not relevant to our methods of gathering and processing data for customers of our enterprise or business solutions, as these practices are defined by the agreements with our customers. For inquiries about how a business client uses information, you should contact the respective client directly.

Moreover, this Privacy Policy does not encompass websites or platforms managed by third parties that may be linked from our Site (regardless of whether these links are provided by us or shared by other users). It also does not pertain to third-party content, data, applications, or materials, including those from other users. We do not assume responsibility for the privacy, security practices, or information present on these external sites or platforms, nor for the accuracy, completeness, or reliability of information from third-party sources. We exert no authority over the ways in which your information is collected, stored, or used by these external websites. We recommend reviewing the privacy policies of any third-party website or platform before submitting any personal information to them. Our provision of links to third-party websites or platforms does not imply an endorsement of their content, nor does it signify approval of their owners or operators.

Information Collection Details

We gather specific information about you from various sources, as detailed in this section.

Information You Provide Us

Certain functionalities of the Services might necessitate you to provide us with information directly. Choosing not to provide this information can limit your ability to use or access these functionalities. Depending on how you utilize our Services, we might collect some or all of the following information from you:

  • Account and Contact Details. When setting up an account, we gather your name, email address, and account password. We may also collect additional details related to your account, such as your phone number, business or company name and role, postal address, and social media profiles. Based on your chosen subscription plan, we might gather your payment details and transaction history.
  • User Input.In the course of using our Services, we collect personal information included in the text, voice, and other forms of Input (as outlined in our Terms) that you provide to create videos and other outputs, along with associated metadata. As mentioned below, we may utilize the Input you provide to refine our services, such as training and improving the models that underpin our Services. Certain features of the Services necessitate processing parts of text and/or parameters within a video, voice transcription and/or photo(s). The data utilized in this process helps us develop, train, and enhance our models. We may also share Input with our vendors assisting in providing the Services.
  • Communication Details. We collect your name, email address, and other information you provide in interactions with us, including through the “Support” channel in the OSSA.AI Discord and via email communications with OSSA.AI.

Information Collected Automatically

We automatically gather specific data about your interactions with the Services (“Usage Data”), including through cookies, web beacons, and other tracking technologies (“Tracking Technologies”). This information encompasses:

  • Device Details, such as the type of device, operating system, unique device identifiers, and IP address.
  • Location Data, such as the approximate location determined by your IP address.
  • Additional Interaction Data, including your operating system, browser type, date and time stamps, and clickstream data (this includes the referring site, the types of content you view or interact with, the features you use, and other actions you take on the Services, as well as the site you navigate to afterwards).

Third-Party Information Sources

We may also receive information about you from external entities, including:

  • Integration Partners. Data obtained when you link OSSA.AI with an integration service.
  • Login Integrations. Information received when accessing the Services via a login integration or Single Sign-On service.

Utilization of Your Information

Our utilization of your personal data is aimed at delivering superior products and services to you. Our activities in this regard encompass:

  • Administering your Account, including granting access to and usage of our Services.
  • Customizing and enhancing your experience with our Services, such as offering tailored recommendations, facilitating the creation of output, and producing such output on your behalf.
  • Offering customer support, addressing your inquiries, dispatching emails you've subscribed to, or sending announcements related to your account.
  • Engaging in research and development activities to refine and innovate our products and technology (including training the models that power our services), analyzing how you interact with our Services, soliciting feedback to better understand and improve our Services and your user experience, as well as observing and interpreting trends.
  • Improving the safety and security of our Services through activities like troubleshooting, data examination, testing, assessment, and system reporting.
  • Fulfilling relevant legal requirements, upholding our contractual commitments and policies, and safeguarding the Services, our rights, and the rights of our users or others.
  • Dispatching marketing communications to you, including updates and promotions regarding our products or services (subject to your consent or where legally permissible). We are committed to avoiding unsolicited marketing communications unless allowed by law. Furthermore, we adhere strictly to our obligations under prevailing email marketing regulations. Should you wish to opt out of our emails, you can do so using the unsubscribe feature in the email, or by sending a manual request to [email protected]. Upon such a request, your email address will be promptly removed from our subscription list.

Data Sharing Practices

We disclose your personal data only as outlined in this Privacy Policy. Except as specified herein, we do not engage in the sale of your personal data for financial gain. You retain control over your personal information at all times.

Under specific circumstances, we may share your personal data with third parties as detailed in this Privacy Policy, including:

  • Third-Party Vendors and Service Providers. We engage with external parties to assist in delivering our Services, including but not limited to payment processing, cloud storage, chatbot functionality, voice transcription, image creation, system management, security, customer relationship management, delivery, search engine operations, data analysis, advertising, and marketing. These third parties might need to access certain or all parts of your data. We are committed to ensuring that your data is managed in a secure and protected manner.
  • Based on Your Direction or Consent. We might also share data with third parties, including other Service users, upon your instruction, direction, or consent. This could occur, for instance, when you decide to share output or other content with others, via your use of login integrations, social media features, or with your explicit permission.
  • Affiliated Entities.We may share data with our affiliates or other entities within our corporate family.
  • For Legal Purposes. In specific scenarios, legal obligations may necessitate the sharing of data we hold, potentially including your personal data. This could occur in situations involving legal actions, or in compliance with legal requirements, court orders, governmental directives, or law enforcement demands. We may also share data to abide by legal statutes, to uphold our contractual terms and policies, or to defend the Services, our rights, and the rights of our users or other parties.

We may compile statistical data about our Site usage, including information on traffic, usage patterns, user demographics, sales, and other relevant metrics. All such data will be de-identified, ensuring no personal identification. This anonymized data may occasionally be shared with third parties like potential investors, affiliates, partners, and advertisers. Any data sharing and usage will be conducted strictly within legal parameters.

Business Transitions and Your Information

Occasionally, we might engage in the expansion or downsizing of our business, which could lead to the sale and/or transfer of control of all or a portion of our business. This could manifest in various forms, such as an asset sale, merger, bankruptcy, or other types of business transactions. In such instances, personal information provided by users, when pertinent to any segment of our business being transferred, will be passed along with that segment. The acquiring entity or the entity assuming control will have the right, as per the stipulations of this Privacy Policy, to use the information for the same purposes as we originally collected it. Additionally, we may share personal information with third parties who assist in these business transactions, including legal consultants participating in the due diligence process.

If there is a situation where your personal information is to be transferred in this manner, you will be notified beforehand and informed about the changes.

Cookies and Other Tracking Technologies

As described above, our Site and Services utilize various Tracking Mechanisms to gather Usage Data. These include first-party Tracking Mechanisms (placed directly by us and exclusively used by us) and third-party Tracking Mechanisms (implemented by entities other than us). Notable providers of these technologies include Google Analytics, Meta and Active Campaign.

Most web browsers are set to accept cookies by default. However, you have the option to control how your devices handle the use of Tracking Mechanisms. While it’s not obligatory to permit our use of Tracking Mechanisms, they play a significant role in continuously enhancing our Services, thereby improving your experience.

Should you wish, you can disable or delete cookies via your Internet browser settings at any time. Most browsers also allow you to choose between disabling all cookies or just third-party cookies. For more detailed instructions, consult the help section in your browser or the documentation that came with your device. Note that disabling or deleting cookies may affect the functionality of some Services, and you may lose quick and efficient access to our Site, including login and personalization settings. It's important to mention that our website, like many others, may not be configured to respond to “do not track” / “opt-out preference” signals from browsers. To understand more about “do not track” signals, you can visit www.allaboutdnt.com/.

To opt out of interest-based advertising by entities participating in the Digital Advertising Alliance, visit www.optout.aboutads.info/ or www.youronlinechoices.com/. The Network Advertising Initiative’s opt-out can be found at www.thenai.org/opt-out/. Additionally, Google and Meta offer options to control the collection and use of your information. For instance, Google Analytics’ Opt-Out Browser Add-on can be accessed here, and settings for Facebook Ads can be adjusted in your Facebook account. Keep in mind, certain ad blockers or cookie-restricting tools might affect your ability to opt out effectively.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement

Protecting Your Personal Data

Ensuring the security of your data is a top priority for us. To protect your personal data, we have implemented appropriate physical, electronic, and administrative measures aimed at safeguarding and securing the personal information we collect through our Site.

Despite our efforts in implementing security measures, it's crucial to acknowledge that data transmission over the Internet may not always be entirely secure. Therefore, we cannot assure the absolute security of data during its collection, transmission, and storage. We urge you to exercise caution when sending data over the Internet to us.

Furthermore, if you opt to create an account with us, maintaining the confidentiality of your account credentials is your responsibility. We advise against sharing your login details with anyone. Should you suspect any unauthorized access or compromise of your account, we encourage you to inform us promptly.

Summary of Your Rights

Upon providing information through our Site, you may be presented with options to limit how we use your data. Our goal is to empower you with substantial control over the use of your information. Your rights regarding personal information may vary based on your location, but it's important to note that these rights are not unlimited and may apply only under specific circumstances.

To exercise any of these rights, please reach out to us using the contact information provided in the “How to Reach Us” section below.

We assure you that exercising these rights will not result in any form of discrimination against you. To verify your identity before fulfilling these rights, we may require additional information, such as your email address or a government-issued ID. You are also permitted to appoint, in writing or via a power of attorney, an authorized agent to act on your behalf. If such a request is made by an agent, we will need confirmation that you have authorized their representation, and we might also ask you to verify your identity directly with us. Should we decline your request, you have the option to appeal our decision by contacting us using the methods outlined below.

Privacy of Minors

Our Services are not designed for individuals under the age of 18, and we do not deliberately collect personal data from children below 13 years of age. If you are a parent or guardian and discover that your child under 13 has provided us with personal information, please reach out to us at [email protected]. In instances where it comes to our attention that personal information from a child under 13 has been collected without knowledge, we will act promptly to delete such information from our records.

Interaction with Social Platforms

Some features of our Services enable you to engage with third-party services or platforms such as YouTube, TikTok, Instagram, and email integrations, known as “Social Features”. These include functionalities that allow you to visit our pages on third-party platforms and interact with our content, for instance, by “liking” or “sharing” it, or to access our Services via a login integration. Utilizing these Social Features might permit third parties to gather and/or utilize your data. When you engage with Social Features, any information you post or make available could be publicly displayed by the third-party service. Both OSSA.AI and the third party may receive information about you and your use of both our Services and the third-party service. Additional details are available in the following section.

Content from Third-Party Websites and Services

As previously mentioned, we do not accept responsibility for the privacy, security, or any practices of third-party applications, websites, or services that are linked to or from our Service. While we may offer links to third-party websites or platforms, or show content, data, applications, or materials from third parties, please be aware that our Privacy Policy does not extend to these third-party sites or materials. Your interaction with any third-party site, application, or service, including those linked from our Services, is governed by the respective terms and policies of that third party.

Specific Disclosures for U.S. State Residents

This section offers additional details specifically for residents of California, Colorado, and other U.S. states with laws akin to the California Consumer Privacy Act (“CCPA”). In this context, “personal information” also encompasses “sensitive personal information” as defined under the CCPA.

The table below outlines the types of personal information (with sensitive information marked by *) that we collect and disclose, including our practices over the previous 12 months.

Category of Personal InformationRecipient(s)
Identifiers, such as name, contact information, IP address and other device identifiers Vendors and service providers, with your direction or consent (e.g., to other users), with our affiliates.
Personal information under the California Customer Records statute, such as name
Internet and similar network activity information, such as information regarding your interactions with the Services, Input and UGC
Geolocation information, such as IP address Vendors and service providers, with your direction or consent (e.g., to other users), with our affiliates.
Commercial information, such as your subscription transaction history
Characteristics of protected classifications, such as race, color, sex and age
Professional-related information, such as your business/company name
Information drawn from other personal information provided to us, which could include your preferences, interests, and other information used to personalize your experience.
Account access credentials, such as username and password*

For detailed purposes of our collection and disclosure of your personal information and the sources from which we gather your personal information, please refer to section 3 “Information Collection Details” and section 4 “Utilization of Your Information” above. Details on our retention of personal information are described in section 8, “Information Retention Period”. We utilize and disclose sensitive personal information only for the purposes stated in the CCPA or with your explicit consent.

We do not engage in the “sale” or “sharing” (as defined in the CCPA) of personal information, and have not done so in the past 12 months. Moreover, we are not aware of any instances of selling or sharing personal information about California residents who are under 16 years of age.

California residents under 18 who have registered to use the Services and have posted UGC can request removal of their UGC by contacting us at [email protected]. Such requests should confirm that they personally posted the UGC and specify its location. We will make a reasonable and sincere effort to remove the content from public view or anonymize it to prevent individual identification. Please note that this removal process may not be exhaustive. For example, the content may have been republished by third parties, or archived by search engines and others beyond our control.

International Use and Data Transfer

Our Services are specifically tailored for users within the United States and are not designed for individuals located outside the United States. As a user of our Services, you acknowledge that your personal data may be processed and stored on servers, and possibly transferred to parties, outside your home country, including but not limited to the United States.

The personal data you supply to us, as well as the data we collect from you, will be transferred to, housed in, and processed in countries outside of your country of residence, including in the United States. This processing also involves our staff and those of our third-party service providers or partners who are based outside the European Economic Area (EEA), UK, or Switzerland. We handle your personal data in countries outside your home country to deliver our Services, fulfill our contractual obligations with you, and to ensure the functionality of our website. For certain international data transfers, we rely on standard contractual clauses, unless the data is being transferred to a country recognized as having adequate protection for personal data under applicable laws.

For users in the EEA, UK, or Switzerland, the legal grounds for processing your personal information are as follows:

  • Contractual Performance: We process certain account and contact details, application data, user content, and Usage Data to offer and maintain your account and our Services. If you do not provide necessary information, it may impact our ability to deliver these Services.
  • Legitimate Interests: We handle certain account and contact details, application data, user content, communications data, and Usage Data when it aligns with our legitimate interests. These interests do not outweigh your rights and freedoms. Our legitimate interests include processing information to respond to your queries, safeguard our Services against fraud, security threats, or abuse, and to develop, improve, and effectively offer products and services, including for training and enhancing our models.
  • Consent: If we request your consent to process your personal information for specific purposes, such as for marketing communications. You have the right to withdraw this consent at any time.
  • Legal Compliance: We may process information to adhere to applicable laws, enforce our contractual policies, or to protect the Services, our rights, our users’ rights, or the rights of others.

As outlined in section 1 “Introduction”, OSSA.AI Inc. is the designated data controller for processing your information, and we are an established domestic corporation in the United States.

Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy occasionally. In such instances, we will update the "Effective" date at the beginning of this Privacy Policy and publish the revised version on our Site. If there are significant changes in the way we handle personal information that we have collected from you, we will endeavor to notify you using reasonable commercial efforts and undertake additional steps as mandated by relevant laws. We encourage you to visit this page frequently to stay informed. If you disagree with any modifications to this Privacy Policy, we advise against using or accessing the Services.

How to Reach Us

Should you have inquiries regarding our Services or this Privacy Policy, feel free to reach out to us via email at [email protected].

When contacting us, please make sure your query is explicit, especially if it relates to requesting details about the data we have about you. In the event you believe we have violated applicable data privacy or protection laws, you have the right to lodge a complaint with your local data protection supervisory authority in your location or where you believe the infringement has occurred. However, we would appreciate the opportunity to address your concerns directly before you approach the authority, and we invite you to contact us first to resolve any issues.