Privacy
Privacy Policy
Osparna provides a decision-intelligence platform for professional investors. This policy explains what information Osparna (Osparna Inc, “Osparna,” “we,” “us”) collects, how we use and share it, and the choices you have. It covers our website and the Osparna platform (together, the “Service”).
The short version
- We collect account information from the customers who use Osparna.
- We compile business-context information about companies and the people associated with them — founders, operators, and investors — to build the universe our customers analyze. Many of those people are not Osparna customers.
- We use only the cookies needed to keep you signed in and secure. We don't run advertising trackers, and we don't sell personal information for advertising.
- Whether or not you're a customer, you can ask us to access or delete the information we hold about you. Email info@osparna.com.
Information we collect
Account and customer data
When you create an account or contact us, we collect your name, work email address, employer or firm, a hashed password, and the contents of messages and support requests you send. If your plan involves payment, billing is handled by our payment processor; we don't store full card numbers.
Information you provide or connect
We collect the content you enter, upload, or otherwise make available to the Service, including when you connect a data source or mailbox. That content may itself contain personal information about other people; you're responsible for having the right to share it with us.
Universe data (information about companies and people)
To provide the Service, we collect and maintain information about companies and the individuals associated with them — names, professional roles, affiliations, public professional activity, and similar business-context information. We obtain it from public and publicly available sources, from information our customers are permitted to provide, and from communications sent to us. Many of these individuals are not Osparna users and did not provide their information to us directly.
Usage, device, and log data
When you use the signed-in platform, we record standard log and device information — such as IP address, browser type, timestamps, and actions taken — to operate, secure, and improve the Service.
Cookies
On the signed-in platform we use only the cookies needed to run the Service: to keep you logged in, protect security, and remember basic preferences. We do not use third-party advertising cookies and we do not track you across other websites. Our public marketing pages set no cookies at all.
How we use information
- operate, maintain, and secure the Service and your account;
- build, maintain, correct, and improve the universe of companies and people our customers analyze;
- respond to you and provide support;
- communicate with you about the Service, and — if you've opted in — about updates;
- detect, prevent, and address fraud, abuse, and security issues;
- comply with our legal obligations.
We do not use your information for third-party advertising.
Legal bases for processing
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with customers; our legitimate interests in operating the Service and maintaining business-context information about companies and the professionals associated with them, balanced against those individuals' rights and interests; your consent, where we ask for it; and compliance with legal obligations.
How we share information
We share information only:
- with the service providers that host and run the Service on our behalf, including our cloud hosting and database providers (for example, Vercel and Supabase), under contracts that limit their use of the information to providing services to us;
- within your organization's workspace, as part of how the Service operates;
- for legal reasons — to comply with applicable law, enforce our terms, or protect the rights, property, or safety of Osparna, our customers, or others;
- in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
We do not sell personal information for advertising, and we do not share it for cross-context behavioral advertising.
If you appear in our universe data
Because we compile business-context information about individuals from sources other than those individuals themselves, some privacy laws treat aspects of this activity as those of a “data broker.” [Confirm data-broker registration obligations with counsel.]
Whether or not you are an Osparna customer, you can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email info@osparna.com and we will handle your request as the law requires. We may need to verify your identity before we act.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent.
- EEA / UK (GDPR): rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your supervisory authority.
- California (CCPA/CPRA): rights to know, delete, and correct, and to opt out of the “sale” or “sharing” of personal information — though we do not sell or share personal information for advertising. We will not discriminate against you for exercising your rights.
To exercise any right, email info@osparna.com.
Data retention
We keep account data for as long as your account is active and as needed to provide the Service, and then for a reasonable period as required for legal, accounting, or security purposes. We retain universe data for as long as it remains relevant to the Service, and we honor deletion requests as described above.
Security
We protect information with encryption in transit, access controls, and tenant isolation designed so that each customer's private data stays separated from other customers' data. No system is perfectly secure, but we work to safeguard your information and review our controls.
International transfers
We may process information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers of personal information. [If serving EEA/UK, confirm transfer mechanism and any required representative with counsel.]
Children's privacy
The Service is intended for businesses and professionals. It is not directed to children, and we do not knowingly collect information from anyone under 16.
Changes to this policy
If we update this policy, we'll post the new version here and revise the date above. We may notify you of significant changes through the Service.
Contact
Osparna Inc
478 Elden St, PMB 112
Herndon, VA 20170
info@osparna.com
For any privacy question or request, email info@osparna.com.