隱私權政策

This Privacy Policy explains how Seasalt AI, Inc. ("Seasalt AI", "we", "us") collects, uses, and shares information in connection with OmniOcto (the "Service"). It applies to visitors of this website and to users of the Service.

Controller vs. processor. For account and website data, we act as the data controller. For the data our customers process through the Service about their own contacts and end users ("Customer Content"), the customer is the controller and we act as a processor on their behalf, subject to our Data Processing Addendum (DPA).

1. Information we collect

• Account data — name, email, organization, and authentication identifiers (we support sign-in via Google, Microsoft, and email).
• Billing data — plan, usage, and payment metadata processed by our payment provider (we do not store full card numbers).
• Usage and device data — log data, IP address, browser and device information, and product analytics.
• Customer Content — the agents, prompts, knowledge-base files, messages, contacts, call recordings, transcripts, and other data you submit or that your end users provide when interacting with your agents.

2. How we use information

• to provide, operate, secure, and improve the Service;
• to process AI requests and generate agent responses and actions;
• to bill for usage and prevent fraud and abuse;
• to communicate with you about the Service;
• to comply with law and enforce our terms.

We do not sell personal information, and we do not use Customer Content to train foundation models. Our AI sub-processors are contractually restricted from using data sent through their APIs to train their models.

3. AI processing and sub-processors

To deliver the Service we share the minimum necessary data with the following categories of sub-processors. This list may change; we will keep it current.

Provider	Purpose
OpenAI; Anthropic; Google (Gemini)	AI language models for agent responses and reasoning
Deepgram; ElevenLabs	Speech-to-text and text-to-speech for voice agents
Twilio; LiveKit	Telephony, SIP, and real-time voice transport
Google (Gmail/Workspace); Microsoft (Graph)	Email channel integration, at your direction
Meta Platforms	Messenger, Instagram, and WhatsApp messaging channels, at your direction
Resend; SendGrid	Transactional and outbound email delivery
Stripe	Payment processing and billing
Supabase	Database, authentication, and file storage
Hetzner	Cloud infrastructure hosting
Sentry; Axiom	Error monitoring and operational logging

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain cookies), and compliance with legal obligations.

5. Sharing

We share information with sub-processors as described above, with professional advisors, in connection with a corporate transaction, and where required by law or to protect rights and safety. We do not sell your personal information.

6. Retention

We retain account data for as long as your account is active and as needed for legitimate business and legal purposes. Customer Content is retained per your configuration and our data-retention settings (for example, call recordings are subject to a limited retention window). You can request deletion as described below.

7. Security

We use technical and organizational measures including encryption in transit, encryption of sensitive credentials at rest, access controls, and tenant isolation. No method of transmission or storage is completely secure, but we work to protect your information.

8. International transfers

We and our sub-processors may process data in the United States and other countries. Where required, we use appropriate safeguards such as the Standard Contractual Clauses for cross-border transfers.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Account holders can export or delete workspace data, or request it from us. Where we act as a processor, we will refer end-user requests to the relevant customer (controller). To exercise your rights, contact agent@omniocto.com.

10. Cookies and analytics

This website uses cookies and similar technologies (including Google Tag Manager) for functionality and analytics. You can control cookies through your browser settings.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

12. Changes

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.

13. Contact

Seasalt AI, Inc. — questions about this Policy or your data: agent@omniocto.com. Our Data Processing Addendum is available on request.