Privacy Policy

1. Introduction

This Privacy Policy explains how Ossy ("Ossy," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our OSINT-based profiling service available at ossy.report (the "Service").

Ossy provides business-to-business ("B2B") prospect and buyer intelligence reports ("Portraits") compiled from publicly available information across the internet — including social media platforms, professional networks, video and podcast platforms, developer/community platforms, and public forums — to help our business customers ("Customers") personalize sales outreach.

This Policy describes two categories of individuals whose information we process:

• Data Subjects: individuals who are the subject of a Portrait (typically business prospects/contacts of our Customers), who generally have no direct relationship with Ossy.
• Customer Users: individuals who use the Service on behalf of a Customer organization (e.g., sales reps, account holders).

2. Our Role

With respect to Portrait Data (information about Data Subjects compiled from public sources), Ossy determines the purposes and means of collecting and compiling this information. With respect to Customer Account Data (information Customer Users provide to operate an account), Ossy processes this on behalf of the Customer under our Terms of Service.

3. Information We Collect

3.1 Portrait Data (about Data Subjects)

We compile Portraits using information that is publicly available at the time of collection, including but not limited to:

• Professional and social media profiles (e.g., LinkedIn, X/Twitter, Threads, Instagram, Telegram public channels)
• Public video and audio content (e.g., YouTube appearances, podcast interviews, public conference talks)
• Public developer and community platforms (e.g., GitHub comments, Reddit posts)
• Public forum posts and archived web content
• Licensed third-party data providers and public/commercial APIs

Portraits may include: name, professional role/employer, publicly stated interests, communication style indicators, public commentary, links to public content, and AI-assisted conversational "hooks" for outreach personalization.

We do not knowingly collect or infer:

• Racial or ethnic origin, religious or political beliefs, trade union membership
• Health data, sex life or sexual orientation, genetic or biometric data
• Precise geolocation
• Any information from non-public, login-gated, or access-restricted sources

3.2 Customer Account Data (about Customer Users)

When you create an Ossy account, we collect: name, business email, company name, billing information, and usage data.

3.3 Automatically Collected Data

Standard web/analytics data (IP address, browser type, device identifiers, cookies) collected via the Service.

4. How We Use Information

We use Portrait Data solely to provide B2B sales/buyer-intelligence personalization services to our Customers. We use Customer Account Data to operate accounts, process payments, and provide support.

Where we rely on legitimate interest as our legal basis for compiling Portraits (for individuals in the EEA/UK), we balance that interest against Data Subjects' rights and do not process any special category data about Data Subjects.

5. Prohibited Uses of Portraits

Portraits may not be used for:

• Employment, hiring, or personnel decisions
• Credit, insurance, or financial eligibility decisions
• Tenant, housing, or background screening
• Any purpose covered by the U.S. Fair Credit Reporting Act ("FCRA")
• Stalking, harassment, or any unlawful purpose

Ossy is not a "consumer reporting agency" as defined by the FCRA, and Portraits do not constitute "consumer reports" under the FCRA.

6. Your Rights

If you are a Data Subject who is the subject of an Ossy Portrait, you have the right to:

• Access — request confirmation of whether we hold a Portrait about you and receive a copy
• Rectification — request correction of inaccurate information
• Erasure — request deletion of your Portrait
• Objection — object to our processing, including for direct marketing purposes
• Opt-Out — opt out of any future collection about you

How to Exercise Your Rights

Email us at privacy@ossy.report. We aim to respond within 30 days. Upon a valid request, we add your identifiers to a suppression list to prevent future re-collection.

If you are located in California, Virginia, Colorado, Connecticut, or another U.S. state with a comprehensive privacy law, you have similar statutory rights; contact us at the email above to exercise them.

7. International Data Transfers

Ossy is based in the United States. Where we process personal data originating in the EEA, UK, or Switzerland, we take appropriate steps to ensure the transfer complies with applicable data protection law, including relying on Standard Contractual Clauses where required.

8. Data Retention

We retain Portrait Data for as long as reasonably necessary for the purposes described above, and delete or re-verify it periodically. Customer Account Data is retained for the duration of the Customer relationship and as required for legal, tax, or audit purposes thereafter.

9. Security

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. No system is completely secure; we cannot guarantee absolute security.

10. Accuracy

Portraits are compiled from publicly available sources and may contain inaccurate, incomplete, or outdated information. Ossy does not independently verify the accuracy of third-party public content.

11. Children's Privacy

The Service is not directed at, and we do not knowingly collect information about, individuals under the age of 18.

12. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date above reflects the most recent revision.

13. Contact Us

Email: privacy@ossy.report
Data Subject requests: privacy@ossy.report