Privacy Policy

Odexa is a reputation management platform for marketing agencies. This policy explains what we collect and how we use it. It applies to visitors to our website and users of the product.

• Account data: name, email, agency name, hashed password, avatar.
• Customer data: the client businesses, reviews, contacts, and campaigns you add to the platform.
• Usage data: pages viewed, features used, and basic device/browser info for security and product analytics.
• Payment data: billing details handled by our payments provider — we do not store card numbers.

• Provide, secure, and improve the Service.
• Draft AI review replies and campaign copy at your request.
• Send transactional and (with consent) marketing email.
• Comply with legal obligations.

We share data with sub-processors that help us run the Service (hosting, database, email, AI providers, payments). We do not sell personal data. A list of current sub-processors is available on request.

You can access, correct, export, or delete your data at any time. Email privacy@odexa.ai and we will respond within 30 days. If you are in the EEA/UK you have rights under GDPR; California residents have rights under the CCPA/CPRA.

We retain data while your account is active and for a limited period after deletion for backup and legal compliance.

Data is encrypted in transit and at rest. We use least-privilege access controls and audit sensitive operations. No system is perfectly secure — please use a strong, unique password.

We may process data in the United States and other countries. Where required, we use Standard Contractual Clauses or equivalent safeguards.

Data controller: Odexa, Inc. — privacy@odexa.ai.