Privacy policy
effective 7 Oct 2026 ·
The short version
- We use Google Analytics to understand how people find and use this site. In the EU, UK, and Switzerland it only runs if you agree, and you can say no anywhere. There are no ads or advertising pixels.
- If you write to us, we use what you send to reply and to work with you. Nothing else.
- You can ask to see, correct, or delete what we hold about you at any time.
Who we are
Odara ("odara", "we", "us") operates odara.ai and is the controller of the personal information described here. For anything about privacy, write to privacy@odara.ai.
What this notice covers
This notice covers odara.ai and the conversations you start with us through it or by email. Experts who contribute knowledge and organisations that license data from us work under written agreements, which come with their own privacy terms. Where those terms differ from this notice, the agreement governs for that work.
What we collect
When you visit
Our hosting provider records standard server logs for each request: IP address, browser and device type, the page requested, the referring page, and the time.
We use Vercel Web Analytics to count page views. It sets no cookies, does not identify individual visitors, and does not follow anyone across other sites; we see only totals, such as pages viewed, referring sites, country, and device type.
We use Google Analytics to measure visits: which pages are viewed, how people arrived, roughly where they are (country and city, derived from IP address), their device and browser, and how they interact with the page. Google Analytics does not log or store full IP addresses. We have turned off Google's advertising features, including Google signals and ad personalisation. Fonts and the tokenizer vocabulary on this site are served from our own domain.
When you contact us
The message box on our homepage only opens your own email app. Nothing you type there leaves your device until you send it. When you do, we receive your name, email address, and whatever you choose to include, such as your role, organisation, or area of expertise.
From other people
If someone introduces you to us, we receive the details they share. We may also look at professional information you have made public, such as a published paper or a company profile, when we are evaluating a working relationship.
Please do not send us health, financial, or other sensitive personal information through email unless we have asked for it under an agreement.
How we use it, and why we're allowed to
- To understand how the site is used. Counting visits and seeing which pages work. In the EU, UK, and Switzerland we rely on your consent; elsewhere, on our legitimate interest in improving the site, which you can object to at any time.
- To reply and to explore working together. Taking steps at your request before entering a contract, and our legitimate interest in running our business.
- To keep the site running and secure. Detecting abuse and fixing faults, under our legitimate interest in a working, safe service.
- To meet legal obligations. Record keeping, tax, and responding to lawful requests.
We do not use personal information from this website or your messages to train AI models, and we make no decisions about you by automated means alone.
Who we share it with
- Service providers who process data for us under contract: our website host (Vercel), our analytics provider (Google), and our email provider. They may only use it to provide their service to us. You can read how Google handles analytics data in Google's own explanation.
- Professional advisers such as lawyers and accountants, under duties of confidentiality.
- Authorities when the law requires it, or to protect the rights and safety of people and of odara.
- A successor if odara is involved in a merger, acquisition, or sale of assets, subject to this notice.
We have not sold or shared personal information, as those terms are defined under California law, in the past twelve months, and we do not do so for cross-context behavioural advertising.
International transfers
We and our providers operate in the United States. When personal information from the UK, EU, or Switzerland is transferred there, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where our provider participates.
How long we keep it
- Server logs: for the short period our hosting provider retains them, typically days to weeks.
- Analytics: event-level data is kept in Google Analytics for 14 months, then deleted. Analytics cookies expire after at most two years.
- Correspondence: for as long as the conversation is active, then up to two years after our last contact, unless we start working together or the law requires us to keep it longer.
Cookies and your analytics choice
The only cookies this site sets are Google Analytics cookies, and only once analytics is allowed: _ga, which tells one visit from another, and _ga_<id>, which keeps track of the current session. Both expire after at most two years. We also remember your analytics choice in your browser's local storage so we don't ask again.
If you are in the EU, EEA, UK, or Switzerland, analytics cookies are not set unless you choose "okay". Elsewhere, analytics is on unless you choose "no thanks" or your browser sends a Global Privacy Control signal. When analytics is declined, Google Analytics sets no cookies; Google may still receive basic signals, such as the page and a timestamp, that carry no identifier and are not linked to you.
You can also block cookies in your browser, or install Google's opt-out add-on.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it if it is wrong;
- delete it;
- stop or limit how we use it, or object to our use based on legitimate interests;
- withdraw consent you have given, such as for analytics, without affecting what happened before;
- send it to you or another organisation in a portable format.
Write to privacy@odara.ai. We will confirm we received your request within 10 business days and answer within 30 days, or within 45 days where US state law allows, telling you if we need longer. We may need to verify your identity first. An authorised agent may make a request for you with your written permission. We will never treat you differently for exercising these rights.
If you are in the UK, EU, or Switzerland, you also have the right to complain to your local data protection authority. Residents of California and other US states with privacy laws have the rights above as their laws provide, including the right to opt out of sale or sharing. Because we do not sell or share personal information, there is nothing to opt out of, but we honour Global Privacy Control signals all the same.
Security
The site is served only over encrypted connections, and access to our systems and inbox is limited to people who need it. No method of transmission or storage is perfectly secure, and email in particular can be intercepted, so we cannot guarantee absolute security.
Children
Odara is for professionals. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has contacted us, tell us and we will delete what they sent.
Changes
If we change this notice, we will update the effective date at the top. If a change is significant, we will say so on this page before it takes effect.
Contact
Questions or requests: privacy@odara.ai.