We govern systems, not people. That is a design decision, not a policy position — and this page says plainly what it means in practice.
This policy covers odau.io and the Odau platform. It explains what we collect from visitors to this site and from customers who use the product.
We collect the minimum needed to know whether the site works: pages viewed and roughly where in the world the visit came from. We do not run advertising trackers and we do not build profiles of visitors.
The estimator on our pricing page runs entirely in your browser. Your answers are never sent to us, and nothing is stored. That is why it does not ask for your email.
If you email us, we keep that correspondence so we can reply and follow up. Nothing more.
Odau reads from systems your company already owns — finance and ERP, identity and SSO, HRIS, contracts, procurement and vendor records. Access is read-only and least privilege, and your administrator grants and revokes it.
From those systems we hold records about the technology your company owns: applications, contracts, costs, renewal dates, owners and entitlements. Where a person appears in that data it is because they hold a license, own a tool or approved a request.
We do not install browser extensions or endpoint agents. We do not track which websites your employees visit, what they type, or how long they spend in an application. We do not monitor individual productivity, and we do not build behavioural profiles of your staff.
We do not sell data, and we do not share it with advertisers or data brokers. We do not use your company data to train models for anyone else.
Data is stored with reputable cloud infrastructure providers, encrypted in transit and at rest. We keep customer data for as long as the account is active. When an account closes we delete it, or return it first if you ask.
You can ask what we hold about you, ask us to correct it, or ask us to delete it. Write to info@odau.io and we will respond within thirty days. If you are covered by GDPR, CCPA or a comparable law, those rights apply and we will honour them regardless of where you are.
We use a small number of third parties for hosting, email and error monitoring. We will name them on request and we notify customers before adding one that touches customer data.
If we change this policy materially we will say so here and tell customers directly. We will not quietly broaden what we collect.
Questions about any of this? Write to info@odau.io and a person will answer.