Privacy Policy
effective september 2026 · draft, pending counsel review
What we collect from you
Account data (name, email, workspace settings) via our auth provider (Clerk). Billing data via Stripe, we never see full card numbers. Product usage (signals you create, feedback you give on matches). Feedback labels are used to tune your own signals.
What we collect from public sources
We ingest publicly available posts from social platforms: post text, author handle and public profile fields, timestamps, and engagement counts. We store excerpts and link back to the original post. We do not access private accounts, direct messages, or closed communities. On platforms where users are pseudonymous (e.g. Reddit), we deliberately do not attempt to unmask identities.
Contact enrichment
For paying customers, we resolve public professional identity (e.g. job title, company) and business contact information via third-party data providers, only for post authors whose content qualified as a match for a customer. We never enrich on platforms whose norms are pseudonymous.
Processors we use
Clerk (authentication), Stripe (payments), Vercel (hosting and analytics), Neon/Supabase (database), Trigger.dev (background jobs), OpenRouter (automated post classification), social-data gateways for ingestion (e.g. UnifAPI), RB2B (website visitor identification, see below), and Slack/Resend for the delivery channels you configure.
Website visitor identification
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.
Our vendor for this is RB2B. It runs on our marketing pages, not inside the product, and by RB2B's own design resolves individual identities for United States visitors only. Identified visitors are used by our own team to follow up with companies that looked at Oetzi. We do not sell this data.
Cookies
We set one first-party cookie of our own, oetzi_vid, an anonymous visitor id (one year) that lets us connect a signup to the pages that led to it. Our auth provider (Clerk) sets session cookies while you are signed in. RB2B sets the following first-party cookies on our marketing pages, all used for visitor identification:_reb2bgeo · location-based identification and matching · 20 days_reb2bloaded · prevents duplicate script executions · 1 second_reb2bref · visit attribution · 15 days_reb2sessionID · active session management · 30 minutes_reb2buid · persistent visitor identification · 360 days_reb2bfxf · internal identification framework · 1 month_reb2btd · identity resolution · 1 month_reb2bli · session-to-identity linking · 1 month_reb2bresolve · temporary identity resolution buffer · 2 days_reb2butk · long-term cross-session identification · 1 year
Where your jurisdiction requires consent for cookies of this kind, these are classified as functional. You can block or clear them in your browser at any time, and opt out of identification at the links above.
If your post appears in our system
We index public posts to help businesses find relevant conversations. If you'd like your content or profile removed from our systems, email privacy@oetzi.ai with a link to the post or profile, we process deletion requests within 30 days and suppress re-ingestion going forward.
Retention & deletion
Workspace data is retained while your account is active and deleted within 90 days of account deletion on request. Public-post corpus data is retained while relevant to active signals.
Your rights
Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. Contact privacy@oetzi.ai. EU/UK customers: a Data Processing Agreement is available on request.