Privacy Policy

Oddyssey is operated by Commercer LLC, 33 N Gould St, Sheridan, WY 82801, USA. For data you give us about yourself and your account, we are the controller. For data you bring into the workspace about your own customers and visitors, you are the controller and we act as your processor under our Data Processing Addendum.

Questions, requests and complaints go to support@tryoddyssey.com.

• Account data: name, work email, password credentials, workspace name, role and team membership.
• Billing data: plan, subscription status, billing address and the last four digits and brand of your card. Full card numbers are handled by Stripe and never reach our systems.
• Connection data: tokens and identifiers for the services you connect, such as ad accounts, email and messaging providers, and your own payment gateway. Credentials are stored encrypted and used only to carry out your instructions.
• Product usage: pages viewed, features used, experiments created, actions taken by you and by agents on your behalf, and audit records of approvals and spend authorizations.
• Support data: the content of emails you send us.
• Technical data: IP address, device and browser type, and log data needed to keep the service running and secure.

• To provide the workspace, run the experiments you approve and execute the actions you authorize.
• To bill your subscription and prevent payment fraud.
• To keep the service secure, debug failures and maintain audit trails.
• To support you and answer your requests.
• To send service notices. Marketing email only where you have opted in, and every marketing email carries an unsubscribe link.

Where the GDPR or UK GDPR applies, we rely on contract performance for providing the service and billing, legitimate interests for security, abuse prevention and product improvement, consent for marketing email and non-essential cookies, and legal obligation for tax and accounting records.

When you upload a customer list, connect a store, run tracking on your funnels or send messages through the workspace, you decide what is collected and why. You are responsible for having a lawful basis and for publishing your own privacy notice to those people. We process that data only to deliver the service to you, under the terms of our Data Processing Addendum.

We do not sell personal data and we do not share it for cross-context behavioural advertising. We share it with the subprocessors listed on our subprocessors page, with services you explicitly connect and instruct us to send data to, with professional advisers under confidentiality, and with authorities where we are legally required to.

Agent features send the prompts, briefs and context you supply to model providers to generate drafts and analysis. We do not permit those providers to train their models on your content. See the AI Usage Policy for what the agents can and cannot do on their own.

We are based in the United States and our subprocessors operate in the United States and the European Union. Where personal data moves out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses together with the UK Addendum.

• Account and workspace data: for as long as your account is active, then deleted or anonymized within 90 days of closure unless we must keep it longer by law.
• Billing records: seven years, for tax and accounting.
• Security and audit logs: up to 12 months.
• Data you delete inside the workspace is removed from live systems promptly and from backups within 35 days.

Depending on where you live, you may request access, correction, deletion, a portable copy, restriction, or object to certain processing, and withdraw consent at any time. Email support@tryoddyssey.com and we will respond within 30 days. If you are an end customer of an Oddyssey user, contact that business directly; we will forward your request to them.

If you are in the EEA or the UK you can also complain to your local supervisory authority.

Data is encrypted in transit and at rest, access is restricted to staff who need it, and workspaces are isolated from one another. The security overview page has the detail.

Oddyssey is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

We will post any change here and update the date at the top. Material changes are emailed to account owners before they take effect.