Privacy Policy

Who we are

Osmoti, Inc. is a company based in Atlanta, Georgia. In this policy, “Osmoti,” “we,” and “us” all mean Osmoti, Inc. You can email us at team@osmoti.com about anything on this page.

Two jobs we do with information

We handle personal information in two different ways. Which one applies changes what you should do.

The information is ours	For people who visit this website, and for the business owners who buy Osmoti, we decide what gets collected and why. This policy covers that.
We hold it for a business	When a business uses Osmoti, we handle their customers’ information for them. That business is in charge of it, not us. So if you contacted a business that uses Osmoti, ask that business first. We will help them answer you.

What we collect on this website

This site has no sign-up form and no contact form. When you visit, we collect:

• What you did here. Which pages you saw, what site you came from, roughly what city you are in, what kind of device you used, and whether you clicked the booking, checkout, or email links. We use PostHog for this.
• How many people came. Google Analytics (GA4) counts visits so we can understand website traffic. It uses the same Do Not Track and production-host rules as PostHog.
• Whether an ad brought you here. We advertise on Facebook and Instagram, so this site runs the Meta pixel. It tells Meta that a visit happened and which page it was, so we can see which ads lead to booked calls and show ads again to people who have been here. It does follow you to other sites. That is what it is for, and we would rather write it plainly than bury it. You can switch this off for every advertiser in your Meta ad settings, or with any tracker blocker. We still do not record your screen.

If your browser sends a Do Not Track signal, PostHog, Google Analytics, and the Meta pixel do not load at all. Nothing is sent to those three, and no cookie is set by any of them. Meta does not require us to honour that signal. We do it anyway, because we treat it as a real no, not a preference we note and ignore.

Cookies

PostHog saves one cookie so we can tell a repeat visitor from a new one. The Meta pixel saves one called _fbp so Meta can match a visit here to an ad you were shown there. That second one is an advertising cookie. Google Analytics saves its own cookies for the same repeat-visitor job. Vercel Web Analytics does not set a cookie. Blocking cookies will not break anything on this site, and a Do Not Track signal stops PostHog, Google Analytics, and Meta before any of those cookies is ever set.

What we collect when you buy Osmoti

• Your account. Your name, business name, email, phone number, and business address.
• Payment. Stripe handles this. Your card number goes straight to Stripe and never touches our servers. We only keep whether you are paid up, the last four digits, and your billing history.
• Accounts you connect. When you connect a supported account, we read the information needed for the features you choose and carry out changes you approve. Connections can include Google, Meta, LinkedIn, Pinterest, Threads, X, Amazon Ads, and scheduling or customer-management services. Available features depend on the provider's APIs, your account role, permissions and app approval. Connecting an account does not by itself approve publication, messages, ad activation or spending.
• Messages to us. Emails you send us and notes from calls.

Google accounts you connect

• Google Ads. We access connected ad account and campaign details, spending, and performance to report results, analyze campaigns, and carry out campaign changes you authorize.
• Google Business Profile. We access the business profiles you authorize us to manage, including profile details, reviews, and performance information, to report on your business presence, prepare replies, and carry out profile changes, review replies, and posts you authorize.
• Google Search Console. We access site and search-performance information for sites you can access, URL inspection, and supported site and sitemap management that you approve. Search Console access does not edit your website's source files.
• Google Analytics. We access reporting from selected GA4 properties and supported management of properties, data streams, key events, audiences, measurement settings and product links. Property access and permissions still apply.
• YouTube. We access selected video files and metadata, owned channels, videos and playlists, supported captions, thumbnails and branding, eligible comments, channel and video performance, and eligible creator-revenue reports. With your approval, Osmoti can upload, organize, edit supported information and delete specified owned content. The public API does not expose every YouTube Studio or channel-profile control.

Google products connect separately. Adding a feature does not expand an existing connection's permissions: we request its required access when you choose to connect it. Expanded features also require any applicable provider approval.

We encrypt stored connection credentials to keep authorized connections working. Disconnecting clears the product's stored credentials and disables its connected destinations. Disconnecting a Google connection attempts programmatic revocation; revocation can affect the same login's other Google connections in this project, which may then require reconnection. Disconnecting does not delete original user media or every saved workspace record. You can also revoke access in your Google Account connections. For deletion requests, email team@osmoti.com.

Osmoti's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the connected features described above.

Other marketing accounts you connect

Pinterest. Connections can read account, board and Pin information and organic or advertising performance, and send selected content and metadata for approved board and Pin changes. Authorized features can also manage supported advertising, catalogs, customer-list membership and conversion feedback. Trial objects are creator-only sandbox entities; customer-visible use depends on Standard approval. The public API does not provide general profile editing. Disconnecting stops the connection; you can also revoke Osmoti's access in Pinterest's app settings.

Threads. Connections can access owned content, eligible replies, mentions and insights, supported public search, profile and location information, and approved publishing, deletion or eligible engagement. They do not authorize unsolicited automated messages or arbitrary changes to someone else's content.

LinkedIn, Meta, X and Amazon Ads. Connections use the permissions and assets you authorize for their available content, engagement, advertising, reporting, lead, audience and conversion features. Some capabilities need separate applications or provider review. Lead retrieval alone does not authorize outreach, advertising reuse or CRM export. Reuse of contact information for audiences or conversion matching requires the relevant stored source and current purpose-specific permission.

What we handle for our customers

Running Osmoti for a business means handling information about the people who respond to the campaigns we run for that business, wherever those campaigns run:

• Name, email, and phone from a form or a booking page
• The click ID that ties a visit back to the ad that brought them
• Call records and the tracked phone number when someone calls an ad
• Appointments, reminders, and missed visits from the scheduling software
• Texts and emails sent through Osmoti, and the record of the person saying yes

Two promises about phone numbers

We do not buy contact information. Facebook and Google never tell anyone who clicked. The only way to get that is to buy it from data brokers. A phone number bought that way is one you can never legally text. So we do not buy it, and we do not work with companies that sell it.

We do not sell your information. We never have. We also do not hand it over so other companies can advertise to you. There is no opt-out button to give you here, because there is nothing to opt out of.

Text messages

Osmoti sends texts for the businesses that use it. We only text people who told that business they wanted to hear from them, by filling out a form, asking for a booking, or otherwise asking to be contacted. We save when they said yes and where they said it.

• Reply STOP to any message to stop. Reply HELP for help.
• Message and data rates may apply. How often you hear from us depends on what you do.
• When you say stop, you stop hearing from that business everywhere, not just in that one conversation.
• We never give your phone number to anyone else for their own advertising.

Who we share information with

The services below receive information to provide the features you use. The Meta pixel also sends website activity to Meta for advertising, as described above.

Connected marketing platforms	Google, Meta, Pinterest and other platforms receive information for the connected reporting and management features you authorize, as described above. Meta also receives website activity through the pixel described above and may use it for its own advertising.
Scheduling software	Zenoti, Boulevard, Vagaro, Mindbody, and Square, to keep appointments in sync
Stripe	Payments
PostHog	Website and product numbers
Google Analytics	Website visit counts, including the numbers Google Business Profile can show
Text and email companies	Sending the texts and emails Osmoti sends for you. If you use Osmo through iMessage, reply content and selected attachments pass through Spectrum/Photon for delivery. Replies can include findings derived from your connected Google or Meta accounts.
Cloud hosting	Cloudflare, Amazon Web Services, and Supabase provide hosting, storage, and database services for the product.
AI companies	Writing ad copy, making images, drafting replies, and analyzing connected-account information. OpenAI or Anthropic can process relevant account data to answer your requests, depending on the configured model. When configured, OpenRouter routes the request to the selected provider.

We may also share information when the law says we must, to enforce our agreements, or if another company buys Osmoti. If that happens, this policy still applies until you are told otherwise.

About the AI companies

To answer an Osmo request, the configured AI provider receives your question, relevant conversation history, business context, and results from the tools Osmo uses. This can include information from the accounts you connect, lead names, email addresses, notes, and information you include in your messages. OpenRouter can route this information to the configured provider. Generated answers and reports can be saved in your workspace. If you use paired iMessage, replies and selected attachments also pass through Spectrum/Photon for delivery.

How long we keep things

• Workspace records. Account and customer records, imported reports, conversations, and generated files are stored for use in your workspace. Disconnecting a platform stops the connection but does not automatically erase these records.
• Temporary provider data. Some provider data uses separate retention processes. For example, the Google Business Profile performance cache has a scheduled cleanup after 28 days, and reports exclude cached entries that are 30 days old.
• Tracked YouTube data. New tracked YouTube API-derived data is scheduled to expire at 29 days. Disconnecting queues cleanup for tracked connection-bound records, derived replies and private reports with a seven-day deadline; failed cleanup remains recorded for follow-up. Original user-uploaded media is separate. These processes do not promise automatic deletion of all older untracked records or copies already delivered to external processors, which require separate handling.
• Deletion requests. Email team@osmoti.com to request deletion and ask about the records involved. Records needed to honor opt-outs, document consent, or meet applicable recordkeeping requirements may need to be retained separately.

Your rights

Depending on where you live, you can ask to see your information, fix it, delete it, or get a copy you can take somewhere else. You can also push back if we say no. People in California have these rights under a law called the CCPA. People in Europe and the UK have them under a law called the GDPR. Several US states have similar laws.

Email team@osmoti.com and we will answer within 45 days. We will never treat you worse for asking. If you are asking about information held by a business that uses Osmoti, tell us which business. We will pass it on and help them answer.

Keeping it safe

Your information is scrambled while it travels and while we store it. Only the people who need to get into our systems can, and we keep a log of who does. No system is perfectly safe, and we will not pretend otherwise. If a break-in affects your information, we will tell you and the right authorities, as the law requires.

Where your information lives

Osmoti is based in the United States and uses the hosting, AI, messaging, and other services listed above to process information. Using Osmoti can involve transfers to the United States or other countries where those services process information. Privacy laws can differ between countries.

Children

Osmoti is a tool for businesses. It is not for anyone under 18. We do not knowingly collect information from children. If you think a child’s information reached us, email us and we will delete it.

Changes to this policy

If we change something important, we update the date at the top and email account holders before the change starts. If you keep using Osmoti after that date, the new policy applies to you.

Contact

Osmoti, Inc.
Atlanta, Georgia, United States
team@osmoti.com