Privacy Policy

Effective Date: January 1, 2025 Last Updated: April 22, 2026

ODIA Solutions Inc. ("ODIA," "we," "us," or "our") values your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the ODIA SaaS platform and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Name
Email address
Company name and role
Billing and payment information (processed by our payment provider; we do not store full card details)

1.2 Usage Data

We collect anonymous usage data to monitor and improve the performance of the Service. This data does not include personal information and cannot be used to identify you individually.

1.3 Gmail and Email Data

When you connect your Gmail account to ODIA, we access your Gmail data through Google's OAuth 2.0 authorization framework. Depending on the permissions you grant, we may:

Read email threads relevant to your travel operations (subjects, bodies, senders, recipients), retrieved in real-time and displayed within the ODIA interface
Modify your Gmail account in limited ways: marking emails as sent after dispatch through ODIA, and applying or updating Gmail labels you use to organize travel-related threads
Send emails on your behalf to travelers and suppliers directly from the ODIA interface

ODIA does not store email message body content in its own databases. Email content is retrieved in real-time from Gmail via Nylas (our email infrastructure provider) and displayed within the ODIA interface. Only metadata required for operational purposes — such as thread IDs, sender and recipient addresses, and timestamps — is stored to enable features like inbox organization and lead tracking.

Write operations (marking as sent, applying labels) are performed directly via the Gmail API through Nylas and do not result in email content being stored in ODIA's systems.

You can disconnect your Gmail account at any time from your account settings or by visiting myaccount.google.com/permissions.

1.4 AI-Assisted Processing

ODIA uses artificial intelligence features powered by Anthropic's Claude API to enhance the Service. This may include improving or translating user-provided text descriptions, classifying incoming communications, and extracting structured data (such as pricing or invoice information) to support operational features.

Data processed through these AI features — which may include user-typed content, email metadata, and document content you upload — is transmitted to Anthropic, Inc. solely to provide the Service. Anthropic does not use this data to train its AI models. ODIA does not use AI processing to make automated decisions that produce legal or similarly significant effects on users.

1.5 Customer-Provided Content

We store content you actively input into the Service, including itinerary details, supplier records, traveler contact information, and documents you upload for operational purposes.

2. How We Use Your Information

We use the information collected for the following purposes:

To provide, operate, and maintain the Service
To process transactions and manage your subscription
To respond to inquiries and provide customer support
To analyze Service performance and enhance user experience
To send administrative communications (security alerts, billing notices, policy updates)
To comply with legal obligations

We do not use your data for advertising purposes and do not sell your data to third parties.

3. Sharing of Information

We do not sell your personal information. We work with the following trusted service providers who process data on our behalf:

Nylas, Inc. — email connectivity infrastructure. When you connect your Gmail account, email data is relayed through Nylas's servers to display within ODIA. Nylas processes this data solely to provide the Service and does not use it for independent purposes.
Anthropic, Inc. — AI infrastructure provider. User-provided content and operational data may be processed by Anthropic's Claude API to power AI-assisted features within ODIA. Anthropic processes this data solely to return results to ODIA and does not retain or train on it.
Payment processors — to handle billing and subscription management securely.
Cloud infrastructure providers — to host, store, and operate the Service.

All sub-processors are contractually bound to protect your data and use it only as directed by ODIA. We may also disclose information when required by law, court order, or to protect the rights and safety of ODIA, our users, or the public.

4. User Rights

You have the following rights regarding your personal information:

Access and Correction: You may request a copy of your personal data or ask us to correct inaccuracies.
Data Deletion: You can request deletion of your data at any time by contacting us. We will fulfill deletion requests within 30 days, subject to legal retention obligations.
Data Portability: You may request your data in a structured, machine-readable format.
Objection and Restriction: You may object to or request restriction of certain processing activities.
Gmail Disconnection: You can disconnect your Gmail account from ODIA at any time from your account settings, or by visiting myaccount.google.com/permissions and revoking access to ODIA.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at customer@odia.app.

5. Data Retention

We retain your personal information for as long as you maintain an active account with ODIA. Upon account closure, personal information will be deleted within 30 days, except where retention is required by applicable law.

Email data: ODIA does not store email message body content. Email metadata (thread IDs, sender/recipient addresses, timestamps) required for operational features is retained for the duration of your account. When you disconnect your Gmail account or close your ODIA account, all associated email metadata will be deleted within 30 days.

AI-processed data: Content submitted to AI-assisted features is not retained by ODIA or Anthropic beyond the processing of each request.

6. Data Transfers

ODIA operates with service providers that may be located outside your jurisdiction, including in the United States. When you connect your Gmail account, email data transits through Nylas's servers. When AI features are used, data is processed by Anthropic's infrastructure. Both providers are contractually bound to process data only as directed by ODIA and in compliance with applicable data protection law.

Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) for international data transfers.

7. Data Security

We prioritize the security of your data. ODIA uses:

SOC 2 Type 2 certified tools and infrastructure
Encryption in transit (TLS) and at rest
Access controls limiting data access to authorized personnel only
Industry best practices to ensure data integrity and protection

No method of transmission or storage is 100% secure. If you have concerns about the security of your data, contact us at customer@odia.app.

8. Cookies and Tracking Technologies

ODIA uses only essential cookies required for the Service to function (authentication sessions, security tokens). We do not use tracking cookies for advertising or behavioral profiling. Anonymous usage analytics may be collected to monitor Service performance.

9. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately at customer@odia.app.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date, and where appropriate, by email. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data practices, contact us at:

ODIA Solutions Inc. Email: customer@odia.app

12. Google API Services — Limited Use Disclosure

ODIA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Notwithstanding any other provision of this Privacy Policy, ODIA's use of data received from Google APIs will not be used to:

Develop, improve, or train generalized AI or machine learning models
Transfer or sell the data to third parties except as necessary to provide the Service to the user
Allow humans to read your Gmail data unless you have given explicit permission, it is necessary for security purposes, or it is required by law