Odo glyphOdo

Privacy Policy

Last Updated: August 25, 2025

Odo Labs, Inc. ("Odo," "we," "us," or "our") values your privacy and is dedicated to safeguarding the personal information you entrust to us. This Privacy Policy explains our practices regarding the collection, use, and protection of your information when you use our services, visit our website, or interact with us.

1. About This Policy

Who We Are

Odo Labs, Inc. is a technology company based in Denver, Colorado, providing AI-powered email and productivity solutions. We operate the Odo platform and related services (collectively, the "Services").

Our Role with Your Data

When you use Odo, we function in two capacities:

  • As a Controller: We manage personal information related to your account and how you interact with our Services
  • As a Processor: We handle the content you provide through our platform (such as emails, calendar entries, and related data) on your behalf and under your direction

For data where we act as a processor, you maintain control and should direct any initial inquiries about that data to the appropriate controlling party.

How to Reach Us

For privacy-related questions or concerns, please contact:

Odo Labs, Inc. 2752 Clay Street, Unit 402 Denver, Colorado Email: privacy@useodo.com

While we encourage you to contact us first with any concerns, you may also file complaints with applicable data protection authorities in your jurisdiction.

Updates to This Policy

We may update this Privacy Policy periodically. Continued use of our Services after changes are posted constitutes acceptance of those changes. Please review this policy regularly and ensure your information remains current in our systems.

2. Information We Collect

We gather various categories of information to provide and enhance our Services:

Personal Information Categories

  • Account Information: includes your name, role, company, email address, and phone number
  • Payment Information: includes billing details and payment card information for subscription management
  • Correspondence Data: includes email correspondence and conversation notes
  • Usage Data: includes your interactions with our platform and features you utilize
  • Technical Data: includes IP addresses, browser information, device identifiers, operating system details, and timezone settings

Aggregated and Anonymous Data

We may derive insights from personal information by creating aggregated or anonymized datasets. This processed data cannot identify individual users and may be used for business analytics, service improvements, and industry research.

Data Minimization

We follow the principle of data minimization, collecting only the information necessary to provide our Services. We regularly review and delete unnecessary data.

3. How We Obtain Information

Information You Provide

Most data comes directly from you when you:

  • Create an account or subscribe to our Services
  • Communicate with our team
  • Use Odo's features and functionality
  • Participate in surveys or provide feedback

Automatically Collected Information

Our systems automatically gather certain technical information when you use our Services, including through cookies and similar tracking technologies.

Third-Party Sources

We may receive information from:

  • Analytics services that help us understand usage patterns
  • Business partners and service providers
  • Publicly available professional databases

4. Our Use of Information

We process your information based on the following legal grounds:

Contract Performance

To deliver the Services you've requested, manage your subscription, and fulfill our agreements with you.

Legitimate Business Interests

Where appropriate and when your rights don't override these interests, we use data to:

  • Enhance and develop our Services
  • Provide customer support
  • Ensure platform security and prevent fraud
  • Conduct business analytics
  • Send relevant service updates

Legal Compliance

To meet our obligations under applicable laws and regulations.

With Your Consent

For specific processing activities where we've obtained your explicit agreement.

5. AI Processing and Machine Learning

How AI Powers Our Services

Odo utilizes advanced machine learning technology to deliver intelligent email management, smart categorization, suggested responses, and other capabilities. To enable these features, certain data is processed through third-party AI systems:

  • Email Content and Data: Subject, email body text, sender, and recipient information
  • Calendar Data: Event titles, details, dates, and times
  • Voice and Speech Data (when enabled): Voice commands and spoken queries that are converted to text for processing

Important Safeguards

  • We maintain strict agreements preventing AI providers from training their models on your data
  • Your information is processed solely to deliver requested Services
  • We implement zero-retention policies with our AI partners where technically feasible
  • Voice data is immediately converted to text and audio recordings are not retained
  • Speech processing occurs through secure third-party services that do not store your voice data

Your Control

You explicitly consent to AI processing when activating these features. Voice features require separate opt-in consent and can be disabled at any time in your account settings.

6. Google API Services and Limited Use Disclosure

Google APIs We Use

Odo accesses the following Google services through official APIs to provide our Services:

  • Gmail API: To read, organize, categorize, and manage your emails
  • Google Calendar API: To access, display, and manage your calendar events and scheduling information

Our Commitment to Google's Limited Use Requirements

Odo's use and transfer to any third party of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit that:

  • We only use Google user data to provide and improve user-facing features that are prominent in our user interface
  • We only access the minimum amount of data necessary to provide our Services

We do NOT:

  • Sell or transfer your Google user data to third parties (except as necessary to provide our Services)
  • Use your Google user data for advertising, retargeting, or marketing purposes
  • Use your Google user data to build user profiles for advertising
  • Transfer or use your Google user data to determine credit-worthiness or for lending purposes
  • Allow any person or entity to conduct the prohibited activities above

All use of Google user data is limited to providing the Odo services you've explicitly requested and consented to use.

7. Information Sharing

We share your information only as described below:

Service Providers

Carefully selected vendors assist us with:

  • Infrastructure and hosting
  • Payment processing
  • Customer relationship management
  • Analytics and performance monitoring
  • AI and machine learning capabilities

All providers are contractually bound to protect your information and use it solely for delivering our Services.

Business Transfers

If Odo undergoes a merger, acquisition, or asset sale, your information may transfer to the successor entity, who will be bound by this Privacy Policy.

Legal Requirements

We may disclose information when required by law, legal process, or to protect rights and safety.

With Your Direction

We share information when you explicitly instruct us to do so.

8. Data Security

We implement comprehensive security controls including:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures
  • Annual security assessments to maintain compliance with industry standards and Google's security requirements

While we strive to protect your information, no system is completely secure. We'll promptly notify you of any breaches as required by law.

9. Data Deletion and Retention

Your Right to Delete Your Data

You have the right to request deletion of your personal information at any time. To request deletion:

  • Email us at privacy@useodo.com with "Delete My Data" in the subject line
  • We will verify your identity to protect your information
  • We will delete your personal data within 30 days of verification

What We Delete

Upon your request, we will delete:

  • All personal information in your account
  • Email content and metadata we've processed
  • Calendar information we've accessed
  • Usage history and preferences
  • Any voice/speech data that was processed

Limited Retention Exceptions

We may retain certain information only when legally required to:

  • Comply with legal obligations or court orders
  • Resolve disputes or enforce our agreements
  • Maintain records required by applicable law
  • Complete transactions you've initiated prior to deletion

We retain information only as long as necessary for:

  • Providing our Services
  • Meeting legal and regulatory requirements
  • Resolving disputes and enforcing agreements
  • Supporting legitimate business operations

Retention periods vary based on data type and purpose. We can provide specific retention details upon request.

10. Your Privacy Rights

You have the right in certain circumstances to:

  • Request access to your personal data (a "data subject access request")
  • Request correction of the personal data that we hold about you
  • Request erasure of your personal data
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms
  • Request restriction of processing of your personal data
  • Request the transfer of your personal data to you or to a third party

To exercise these rights, contact us at privacy@useodo.com. We'll respond to verified requests within applicable timeframes, typically within 30 days.

11. United States Privacy Considerations

California Residents

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These include enhanced disclosure, deletion, and opt-out rights. Contact us to learn more.

Other State Rights

Residents of Virginia, Colorado, Connecticut, and Utah may have additional rights under state privacy laws. Contact us to learn more about exercising these rights.

12. Children's Privacy

Our Services are designed for business and professional use. We don't knowingly collect information from individuals under 16. If we learn we've collected such information, we'll promptly delete it.

13. Third-Party Links

Our Services may contain links to external websites. We're not responsible for their privacy practices and encourage you to review their policies.

14. Questions and Concerns

We're committed to addressing your privacy concerns. Please contact us at:

Odo Labs, Inc. 2752 Clay Street, Unit 402 Denver, Colorado Email: privacy@useodo.com

This Privacy Policy is permanently available at https://app.useodo.com/policy/privacy