Privacy
Privacy Policy
Your work stays yours. We collect what we need to run Odalo, we don't sell it, we don't use it for ads, and we don't train AI on it. Here is the full detail.
1. Who we are
Odalo is made by EveryDolla, LLC, a Delaware limited liability company (“EveryDolla”, “we”, “us”). For the personal information described here, we are the controller, except where we process information on behalf of an organization's workspace (see section 10). You can reach us about privacy at privacy@odalo.app.
2. What this policy covers
This policy covers odalo.app, the Odalo app for Mac, and the online services the app connects to. It does not cover services you connect to Odalo or your AI provider, which have their own policies.
3. Information we collect
Information you give us
- Account details. When you sign in with Google, we receive your name, email address and profile picture. We ask Google for nothing else at sign-in.
- Your workspace. The messages, tasks, projects, files, documents and comments you and your team create, and the workspaces and people you work with.
- Messages to us. What you send when you email us for support or feedback.
Information collected automatically
- Website requests. Like most websites, our hosting provider records standard request details, such as IP address, browser, the page requested and the time, to deliver the site and keep it secure.
- Downloads. When you press Download, our server notes that a download started, which build it was, and the page you came from.
- App and device details. The app version, macOS version and similar technical details needed to sync your workspace, deliver updates and fix problems. The update check sends your app version, not your work.
- Notification token. If you allow notifications, Apple gives the app a token that lets us send notifications to your Mac.
Information from services you connect
When you connect a service such as Google Drive, Gmail, GitHub, Notion or Asana, Odalo reads from it, and acts in it, only as needed for what you ask. For example, importing your Asana projects, or letting your agent find a file you asked about.
Your AI agent
Your agent runs on your Mac using your own account with an AI provider, such as Anthropic (Claude) or OpenAI. The sign-in for that account is stored in your Mac's Keychain. When your agent works, the instructions you give it and the content it needs are sent from your Mac to that provider under your account, and the provider's privacy policy applies. Answers your agent posts in Odalo, and the sources it shows, are stored in your workspace like any other content.
4. How we use information
- to provide the Service: sign you in, store and sync your workspace, show content to the people you share it with, and run the agent and connector actions you start;
- to send notifications you have turned on, and service messages about your account, security or changes to these policies;
- to keep the Service secure, prevent abuse and enforce our Terms;
- to understand, in aggregate, how Odalo is used and downloaded, so we can fix problems and improve it;
- to answer you when you contact us;
- to meet legal obligations.
We do not sell your personal information, we do not share it for cross-context behavioral advertising, we do not show you ads, and we do not use your workspace content to train AI models.
5. Legal bases (EEA, UK and Switzerland)
- Contract: to provide the Service you signed up for.
- Legitimate interests: to secure and improve the Service and understand downloads in aggregate, balanced against your rights.
- Consent: for notifications and for connecting other services, which you can withdraw at any time.
- Legal obligation: where the law requires us to keep or disclose information.
7. Where information is stored
Our servers and database run in the European Union, in Frankfurt, Germany. Some providers, and your AI provider and connected services, may process information in other countries, including the United States. Where personal information from the EEA, UK or Switzerland is transferred elsewhere, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses.
8. How long we keep information
- Account and workspace information: for as long as your account or workspace is active.
- After you delete your account, or content within it: removed from our active systems within 30 days, and from backups as they expire.
- Website and download logs: kept only as long as needed for security and aggregate counts.
- Support emails: for as long as needed to help you, and then deleted.
- Where the law requires us to keep something longer, we keep it only for that purpose.
9. How we protect information
We use encryption in transit for all connections, encryption at rest provided by our storage providers, access controls that keep each workspace's data separate, and permission checks on every request. Agents can only reach what you allow. No system is perfectly secure, so if you believe your account has been compromised, contact us right away. We do not describe Odalo as end-to-end encrypted, because our servers can read the content they store to provide the Service.
10. Workspaces run by organizations
If you use Odalo through an organization's workspace, that organization decides how the workspace is used and can access and manage the content in it. For that content, we process information on the organization's behalf and follow its instructions. Requests about it are best sent to the organization's administrators, and we will help them respond.
11. Your rights and choices
Depending on where you live, you have the right to:
- access the personal information we hold about you, and get a copy of it;
- correct information that is wrong;
- delete your information;
- receive your information in a portable format;
- object to, or ask us to restrict, certain uses;
- withdraw consent where we rely on it, such as notifications and connected services.
California residents have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we will not treat you differently for using your rights. You can use an authorized agent to make a request.
To make a request, email privacy@odalo.app. We will confirm your identity and answer within 30 days. If you are in the EEA, UK or Switzerland and are unhappy with our answer, you can complain to your data protection authority.
You can also turn notifications off in the app or in macOS, disconnect connected services at any time, and sign out of your AI provider in the app.
12. Children
Odalo is a work tool and is not meant for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
14. Changes to this policy
We will update this policy as Odalo changes or the law requires, post the new version here and update the date above. If a change is significant, we will tell you in the app or by email before it takes effect.
15. Contact
EveryDolla, LLC, Delaware, United States. Email privacy@odalo.app.