Privacy

Without an account

You can look up a pair of countries or calculate a whole file without signing in. Your file is read and calculated in your browser, and nothing is saved.

Odyss sets no cookies when you are signed out, with one exception: starting a sign-up or a Google sign-in sets a Supabase cookie that completes it when you come back from the email or from Google. If you never come back, it can stay in your browser for up to 400 days. Odyss also remembers one thing in your browser, and only if you choose it: whether you picked the light or dark theme.

The sign-in, sign-up and password-reset forms load a check from Cloudflare that tells people from bots. Cloudflare receives what any website receives from your browser, such as your IP address.

With an account

What we keep. Your email address, or your name, email and profile picture if you sign in with Google. Your projects: folder names and descriptions, the rows and columns of the files you save, the names you place by hand, and your tags. If you use the AI: what it read in a client's text (the routes, and the sentence each came from), the names you accepted, a client's document when you save it into a project, your questions and its answers, the methodology notes it drafts, and a record of each AI request (which feature, and when) for the daily allowance. Each time you sign in, Supabase also records your IP address and browser.

Where. In a database run by Supabase in Ireland, over an encrypted connection. No other user can read your data: the database itself refuses them. As the person running Odyss, Suhas Pala can reach the database to keep it working.

Cookies. Signing in sets Supabase's sign-in cookie, which keeps you signed in until you sign out. A password-reset link sets one more, for 15 minutes. Odyss uses no cookies that track you or show you ads, and no analytics.

Who else sees your data

Odyss uses these companies to run. Each sees only what it needs.

• Vercel hosts Odyss. The servers that build its pages are in Dublin, and your request first reaches the Vercel site nearest you, where Odyss checks whether you are signed in. It sees every request to the site, such as your IP address and the page you asked for. Vercel is a US company and may process this in the United States, under the EU's standard contractual clauses.
• Supabase stores your account and your work in Ireland, and sends the emails that confirm an account or reset a password.
• Cloudflare runs the check on the sign-in forms.
• Google, only if you choose Sign in with Google. It handles that sign-in, and your profile picture is shown from its servers.
• OpenRouter, and the AI companies it passes requests to, only when you use the AI. When you ask Odyss to read a client's text or PDF, the text goes to them. When you ask a question, they get the question, the row's facts and parts of the client's document you saved. The chat model is made by Anthropic and the one that indexes documents by OpenAI. OpenRouter may run the chat model through Anthropic or through another company that hosts it. These companies are in the United States.

How long we keep it

• Your work stays until you delete it. A deleted folder or lookup waits 30 days in Recently deleted, then goes for good the next time you open My Projects or Recently deleted.
• Your AI questions, answers and notes stay until you delete the lookup they belong to, or your account. What the AI read on Home, and anything it answered outside a saved lookup, stays until you delete your account.
• If you sign up to keep unsaved work but never confirm your email, that account and everything in it are deleted 30 days after sign-up. Any other sign-up you never confirm keeps only its email address, until you write to privacy@odyss.work to delete it.
• Deleting your account deletes everything it holds, at once.
• The companies above keep their own records, such as request logs, under their own policies.

What you can do

• See and download your work at any time. Every lookup and every folder exports as a spreadsheet.
• Correct or delete your work in the app. To change your email, write to privacy@odyss.work.
• Delete your account in the app. Everything goes with it.
• Ask anything else, or ask for a copy of what Odyss holds about you, at privacy@odyss.work.
• Complain to your country's data protection authority if you think your data is mishandled.

Why we may use it

• To give you the service you signed up for: your account, your saved work and the AI.
• To keep Odyss safe (a legitimate interest): the human check, and the records that hosting and sign-in keep.

Contact

Suhas Pala, privacy@odyss.work.