Privacy Policy

Overview

OJOs.life ("OJOs," "we," "us") operates ojos.life. This policy explains what data we collect, why we collect it, how it's used, and your rights. We are committed to transparency, especially about our behavioral analytics and AI-powered features.

This policy applies to all users worldwide, with additional rights described below for users in the European Union (GDPR) and California (CCPA).

1. Data We Collect

Account and profile data

• Email address, display name (from Google OAuth)
• Date of birth and parental consent status (for age verification)
• Profile fields you choose to complete: name, headline, bio, education, work history, company, location, photo, LinkedIn/portfolio URLs, tags, hourly rate

Behavioral and interaction data

• Profile views: Every profile you visit, the timestamp, and your time on that page (in milliseconds)
• Search queries: Every search term you enter, including partial queries
• Intent signals: Whether you viewed a meeting request page, began filling out a request and left without submitting ("abandoned request"), or successfully submitted a request — logged per target user
• Recommendation impressions: Every recommendation we show you — rank, score, explanation

Meeting content

• Meeting request notes
• Chat messages sent during video sessions
• Code shared in the in-meeting code editor
• Whiteboard drawings from video sessions
• AI-generated meeting summaries (see Section 3)

Payment data

• Stripe Connect account ID (for hosts)
• Meeting price and payment status
• We never store full card numbers — Stripe handles all payment credentials

Technical data

• Session authentication cookies (required for login; no third-party tracking cookies)
• Rate-limit counters (for resume parsing: 5 parses/hour)

2. Why We Collect It — Legal Basis

• Contract performance: Account data, meeting scheduling, payment processing — required to deliver the service you signed up for.
• Legitimate interests: Behavioral tracking (profile views, searches, intent signals) to power recommendations and improve the platform.
• Consent: AI features you explicitly trigger (meeting summaries, resume parsing); population-level analytics; parental consent for minors.

3. AI Processing

OJOs uses Claude (by Anthropic) for three features, each user-initiated or system-operated transparently:

• Meeting summaries: Your chat transcript is sent to Anthropic's API. The raw transcript stays in our database; the summary is also stored and shown to meeting participants.
• Resume parsing: Resume text you paste is sent to Anthropic's API. Only the structured output (job titles, companies, dates) is stored; the raw text is not.
• Recommendation tag expansion: We send anonymized tag names (not user identities) to generate semantic synonyms, which are cached in our database.

Anthropic acts as our data processor and does not train models on data submitted via the API. See Anthropic's Privacy Policy.

4. Population-Level Analytics

OJOs aggregates anonymized behavioral data to generate cohort-level insights — for example: "Students from [University] in [Major] frequently connect with professionals in [Industry]." These insights may be shared with or licensed to educational institutions, employers, or research partners.

Our commitments:

• Insights are generated only from cohorts of at least 15 users to prevent re-identification
• No individual user's data is ever sold or shared in an identifiable way
• We do not infer health, religion, political views, or other sensitive attributes
• You may opt out by emailing leebloob@ojos.life

5. Data Sharing

We share data with the following service providers as data processors:

• Supabase — database and authentication hosting
• Daily.co — video/audio streaming (streams are not recorded or stored by OJOs)
• Stripe — payment processing
• Anthropic — AI processing (Claude API)
• Resend / Gmail SMTP — transactional email delivery

We do not sell your personal data to advertisers or data brokers. Profile information you make public on OJOs (name, headline, photo, tags) is visible to other logged-in users by design.

6. Data Retention

All data is retained indefinitely while your account is active. When you delete your account, all your data is deleted immediately and permanently — including your profile, meetings (and their messages, code, and whiteboard content), behavioral signals, and authentication record.

You may request a data export by emailing leebloob@ojos.life. We fulfill verified requests within 30 days.

7. Cookies

We use only session authentication cookies required for login (managed by Supabase). We do not use advertising cookies, third-party tracking cookies, or analytics scripts (e.g., Google Analytics, Mixpanel).

8. Your Rights

All users

• Access: Request a copy of your data — email leebloob@ojos.life
• Deletion: Delete your account via your dashboard (immediate) or request deletion by email
• Correction: Update your profile data directly in the app
• Opt-out of population analytics: Email leebloob@ojos.life
• Opt-out of automated profiling: Email leebloob@ojos.life

EU / EEA users (GDPR)

You have additional rights: data portability, restriction of processing, and the right to lodge a complaint with your local supervisory authority. Our legal basis for each processing activity is described in Section 2. For data processed under legitimate interests, you may object by contacting us.

California users (CCPA / CPRA)

You have the right to know what personal information we collect and how it's used, to delete your information, to opt out of the sale or sharing of your information (we do not sell personal data), and to non-discrimination for exercising these rights. To submit a verifiable consumer request, email leebloob@ojos.life.

Users aged 13–17

Parents or guardians of users under 18 may request review, correction, or deletion of their child's data at any time by emailing leebloob@ojos.life.

9. Security

OJOs uses Row Level Security (RLS) on all database tables, server-side authentication verification on all API routes, tokenized email links for meeting approvals, and Stripe for PCI-compliant payment handling. We do not store passwords — authentication is handled by Google OAuth via Supabase.

10. Changes to This Policy

When we update this policy we will increment the version number and update the effective date. Material changes will trigger re-acceptance at your next login.

11. Contact and Data Controller

Data controller: OJOs.life
Address: 9058 Stockton Ct, Orlando, FL 32817
Email: leebloob@ojos.life