Privacy
Policy
How Osmium collects, uses, and protects your information. We believe in transparency — this policy explains our practices in plain language.
Introduction
This Privacy Policy describes how Osmium Labs ("we," "us," or "our") collects, uses, and protects information when you use the Osmium Platform and related services.
By using the Platform, you consent to the practices described in this policy. If you do not agree, you must not use the Platform.
Information We Collect
- ›Account registration details (name, email, organization).
- ›Payment and billing information processed through third-party payment providers.
- ›Vendor submissions, including capability metadata, descriptions, and pricing.
- ›Communications you send to us, including support inquiries and contact form submissions.
- ›Nexus messages and other platform interactions.
- ›Usage data: pages visited, features used, time spent, and interaction patterns.
- ›Device data: browser type, operating system, screen resolution, and device identifiers.
- ›Log data: IP address, access times, and referring URLs.
- ›Cookies and similar tracking technologies as described in Section 5.
- ›OAuth provider data if you authenticate via a third-party service.
- ›Payment processor data for transaction verification.
- ›Lab result data generated through Platform testing (Helios, Astatine, Nebula).
How We Use Your Information
We use collected information to: (a) operate and maintain the Platform; (b) process transactions and manage your account; (c) run lab tests and generate Aegis records; (d) communicate with you about your account, the Platform, and our services; (e) detect, prevent, and address technical issues and security threats; (f) comply with legal obligations; (g) improve the Platform through analytics and aggregate data.
We do not sell your personal information to third parties.
How We Share Your Information
We may share information in the following circumstances:
- ›With service providers who assist in operating the Platform (hosting, payment processing, analytics), bound by contractual obligations to protect your data.
- ›As required by law, regulation, or valid legal process.
- ›To protect the rights, safety, or property of Osmium Labs, our users, or the public.
- ›In connection with a merger, acquisition, or sale of assets, subject to the continued protection of your information.
- ›Vendor capability metadata (title, description, pricing, Aegis scores) is displayed publicly on the Platform by design.
Cookies & Tracking Technologies
The Platform uses essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how the Platform is used.
You can control cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.
We do not use advertising cookies or share cookie data with third-party advertisers.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Platform's services.
Aegis records and lab results are retained permanently as part of the Platform's public record by design.
Account data is retained until you request deletion, subject to legal retention requirements.
Communications and support records are retained for a reasonable period to maintain service quality.
Data Security
We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security audits.
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
You are responsible for maintaining the security of your account credentials.
Your Rights
Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate data; (c) request deletion of your personal information, subject to legal exceptions; (d) data portability; (e) opt out of certain data processing activities.
To exercise any of these rights, contact us at labs@osmium.dev. We will respond to verified requests within a reasonable timeframe.
International Data Transfers
The Platform is operated from [JURISDICTION TO BE DETERMINED]. If you access the Platform from outside this jurisdiction, your information may be transferred to and processed in a location with different data protection laws.
We take appropriate measures to ensure your information receives an adequate level of protection in any jurisdiction where it is processed.
Children's Privacy
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by email. The "Last updated" date at the top reflects the most recent revision.
Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
Contact
Questions about this Privacy Policy should be directed to: labs@osmium.dev