Privacy Policy

1. Who we are

Odina is operated by a Delaware corporation (“Odina,” “we,” “our,” or “us”). The company operating Odina is the controller of personal information processed through the Odina website, desktop application, accounts, and hosted services (collectively, the “Services”).

2. Information we collect

Account and profile information

When you create an account, we process your email address, a securely hashed password, verification and password-reset records, account status, session information, and the profile or onboarding answers you provide, such as your name, role, organization, work context, and intended uses.

Subscription and billing information

We process plan, entitlement, subscription, and billing-status records, together with Stripe customer, subscription, and price identifiers. Stripe processes payment-card and checkout information; Odina does not store your full payment-card details.

Usage and security information

We process feature usage, AI token consumption, model and token counts, transcription duration, request status, and timestamps so we can provide allowances, prevent abuse, troubleshoot failures, and operate subscriptions. We may also process or hash limited device, user-agent, IP, and server-log information for authentication, fraud prevention, rate limiting, and security.

Information you submit through website features

If you use an interactive website feature, we process the text and selections you submit to return the requested result. Where that feature uses AI, the submitted content is sent to the relevant AI provider as described below.

Website and cookie information

The Odina landing page does not currently use advertising cookies. Our hosting and security providers may process basic request information such as IP address, browser type, requested page, and timestamp to deliver and protect the website. If we add analytics or non-essential cookies, we will update this policy and provide any consent controls required by law.

3. What stays on your device

Odina is local-first. Project files, terminal sessions, terminal history, local agent processes, working-folder paths, and project memory are stored or executed on your device by default. We do not automatically upload your repositories or complete terminal history to an Odina account.

Your Odina session token is stored on your device using operating-system-backed encryption where available. You can remove it by signing out.

4. Hosted AI features

When you deliberately use a hosted AI feature—such as AI Copy, response generation, notification curation, transcription, or voice—the content needed to fulfill that request is transmitted to our hosted service and OpenAI. This can include prompts, selected terminal text, relevant task context, or audio.

Odina is designed not to retain raw prompts, terminal content, source code, or audio in its account database after the request is completed unless retention is necessary to provide a feature you request, investigate abuse, meet a legal obligation, or resolve a support issue. Usage metadata and cost counters may be retained without the underlying content.

Third-party AI providers process submitted content under their own contractual and privacy terms. Do not submit secrets or personal information that is not necessary for the feature.

We do not use your project files, terminal content, prompts, or audio to train Odina models without your explicit consent.

5. How we use information

• Provide, authenticate, secure, and personalize the Services.
• Deliver requested AI features and calculate plan usage.
• Process subscriptions, account emails, and customer support.
• Maintain reliability, prevent abuse, and investigate security incidents.
• Understand aggregate product usage and improve Odina.
• Comply with law and enforce our Terms of Service.

Depending on your location and the context, our legal bases include performing our contract with you, our legitimate interests in operating and securing the Services, your consent, and compliance with legal obligations.

6. Service providers and disclosures

We use service providers to operate Odina, including infrastructure and hosting providers, MongoDB Atlas for account data, Stripe for billing, Resend for account email, and OpenAI for requested AI processing. They may process information only as needed to provide their services to us and are subject to their own privacy and security obligations.

We may also disclose information when required by law; to protect users, Odina, or the public; in connection with a merger, financing, acquisition, or sale of assets; or when you direct or consent to the disclosure. We do not sell your personal information or use your project content for advertising.

7. International transfers

Odina is based in the United States, and our providers may process information in the United States, European Economic Area, United Kingdom, Japan, or other countries. Where required, we use appropriate safeguards for international transfers, such as adequacy decisions or standard contractual clauses.

8. Retention

We retain account, profile, entitlement, billing-reference, and usage records for as long as your account is active and as reasonably necessary to operate the Services, meet tax or legal requirements, resolve disputes, and prevent fraud. Authentication challenges and sessions expire. Following a verified deletion request, we delete or de-identify account information unless we must retain specific records by law. Deletion from backups may take up to 90 days.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, and to withdraw consent. You may also complain to your local privacy or data-protection authority.

To exercise a right or request account deletion, email info@odina.ai. We may need to verify your identity before completing the request.

10. Security and younger users

We use technical and organizational safeguards designed to protect information, including encryption in transit, access controls, password hashing, and operating-system-backed credential storage. No system is completely secure.

Odina may be used by people of any age. Where applicable law requires consent from a parent or legal guardian for a younger user, that user may use the Services only with that consent and involvement. A parent or legal guardian may contact us to review or request deletion of a younger user's personal information.

11. Changes and contact

We may update this policy as Odina evolves. We will post the revised version and update the date above; when required, we will provide additional notice. Questions or privacy requests can be sent to info@odina.ai.