Privacy Policy

Effective Date: January 1, 2025

Ouroboros AI (“we,” “us,” or “our”) is committed to respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or services.

1. What Data We Collect

We collect the following information when you use our services:

Account Information: Email address and any data you provide during signup or profile creation.
Authentication Data: We use a secure, HTTP-only cookie to keep you signed in.
Usage Data: We record activity logs (e.g., login timestamps, feature usage) to help us improve the service and ensure security.

We do not collect payment information directly; payments are securely handled by Stripe, our third-party processor.

2. How We Use Your Data

We use your data for the following purposes:

To provide, secure, and improve our service
To authenticate your account and manage sessions
To send important service-related notifications
To comply with legal obligations

We do not sell, rent, or share your personal data with advertisers or third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

We process your data under the following lawful bases:

Contractual necessity: To provide the service you signed up for
Legal obligation: To comply with applicable law (e.g., tax, fraud prevention)
Legitimate interests: To improve our service and protect our platform
Consent: Where required, such as for optional communications

4. Your Rights

Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you have the right to:

Access the personal data we hold about you
Request correction or deletion of your data
Object to or restrict certain types of processing
Request a copy of your data in a portable format
Not be discriminated against for exercising your rights (CCPA)

To exercise these rights, email us at support@ouroboros-ai.com. We will respond within 30 days.

5. Data Deletion & Retention

You can delete your account and data at any time from within your user dashboard. When you delete your account:

All data is immediately removed from our primary database
Encrypted logs may persist for up to 30 days, after which they are purged automatically

We retain certain data where required by law (e.g., tax, fraud prevention) or for security monitoring, subject to minimization and encryption.

6. Cookies & Tracking

We use only essential cookies:

Session Cookie: Secure, HTTP-only cookie for authentication

We do not use third-party tracking (e.g., Google Analytics, Facebook pixels).

7. Data Security

We use modern encryption, access control, and secure infrastructure to protect your data. All traffic is encrypted using TLS 1.2 or higher.

Our infrastructure is hosted in AWS us-east-2 (Ohio), availability zones a–c. We conduct periodic security reviews and retain a written Information Security Plan.

8. Data Transfers

Our servers are located in the United States. If you are located outside the U.S., your data may be transferred, stored, or processed in the U.S. or other countries.

Where required, we rely on Standard Contractual Clauses (SCCs) to ensure adequate protection of your personal data during such transfers.

9. Children’s Privacy

Our service is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via an in-app notice.

11. Contact Us

For any questions or concerns, contact:

Ouroboros AI
Email: support@ouroboros-ai.com
Address: 2515 Jay Avenue #B3
Cleveland, OH 44113