Legal

Privacy Policy

Last updated: March 2026

What we collect

Osora collects only the data you explicitly provide or authorize access to:

  • Account information — email, name, and profile photo via Clerk authentication
  • Recorded sessions — the screen and voice you record when capturing an expert, plus the transcript and the apprentice's questions and answers
  • Integration data — messages, calendar events, and files from tools you connect (Slack, Gmail, Teams, etc.)
  • Usage data — page views, feature usage, and performance metrics

How we use your data

  • Transcribe and analyze recorded sessions to capture the expert's reasoning
  • Let the apprentice ask “why” at each decision and record the answer
  • Compile the reasoning into a governed skill, with provenance on every rule
  • Govern the agents that run a skill and log every action they take

We never use your data to train shared AI models. Your recordings and the skills built from them are yours alone.

AI processing

Osora uses Anthropic's Claude API to analyze your recordings and compile skills. Data is sent to Anthropic for processing under zero-retention terms and is subject to Anthropic's privacy policy. Anthropic does not use API inputs to train models. Enterprise plans support bring-your-own-key, keeping inference within your own provider account and infrastructure.

Data storage & security

  • Data stored on Neon PostgreSQL (AWS) and Vercel Blob (AWS)
  • All connections encrypted via TLS 1.3
  • Integration credentials encrypted at rest (AES-256)
  • Audit logging of all data access and modifications
  • SOC 2 Type I audit in progress (Type II targeted Q4 2026)

Data retention

Your data is retained for as long as your account is active. Upon account deletion, all recordings, skills, provenance records, and integration data are permanently deleted within 30 days. Enterprise plans can configure custom retention policies.

Your rights

You can:

  • Export all your data at any time (Markdown, CSV, or PDF)
  • Delete your account and all associated data
  • Disconnect integrations and revoke access
  • Request a copy of all data we hold about you

Third-party services

Osora uses the following third-party services:

  • Clerk — authentication
  • Anthropic (Claude) — AI extraction and analysis
  • Deepgram — audio transcription
  • Stripe — payment processing
  • Vercel — hosting and edge functions
  • Neon — PostgreSQL database

Contact

For privacy questions or data requests: privacy@osora.ai