Privacy Policy

1. Scope

This Privacy Policy applies to the Oi website, product, APIs, and related services. It covers information we collect directly from users, from organizations using Oi, and from connected third party services such as source control, product and design tools, billing, and identity providers.

Oi is built and operated by Carhaix Au Pty Ltd (ABN 30 693 733 354, ACN 693 733 354).

Oi is operated by an Australian business, and customer data and product traffic are currently hosted and served from infrastructure in the United States.

If you use Oi through an organization account, that organization may control your workspace, integrations, and some account-level settings, and may have access to workspace activity and content associated with your use of the service.

2. Information We Collect

We may collect the following categories of information:

• Account information such as name, email address, login method, and organization membership.
• Workspace and product data such as organizations, groups, Contexts, prompts, repository links, product metadata, and settings.
• Usage data such as feature interactions, Context usage counts, recent activity, device or browser metadata, and operational logs.
• Connected service data returned through authorized integrations such as GitHub, Linear, Figma, Stripe, and similar providers.
• Billing data such as subscription status, Stripe customer IDs, invoices, and webhook events. Payment card details are handled by Stripe and are not stored by Oi.
• Customer content that users choose to store in Oi, including Context definitions, instructions, examples, markdown, and organization-specific context.

3. How We Use Information

We use information to:

• Provide, operate, secure, and improve Oi.
• Authenticate users and manage organizations, permissions, and access.
• Power Context discovery, private customization, publishing, collaboration, MCP access, and related product functionality.
• Process subscriptions, manage billing, prevent abuse, and maintain service reliability.
• Support users, troubleshoot issues, monitor performance, and investigate misuse or fraud.
• Communicate important product, account, security, or legal updates.

4. Customer Content and Prompts

Oi stores customer-provided content needed to deliver the product, such as Context instructions, private instructions, connected context, and exported markdown. Organizations are responsible for the content they choose to store or process through the service.

Oi may store product usage metadata to support collaboration, product analytics, operations, and billing. Prompt body storage, if offered for a workspace, is controlled by product settings and customer choices.

Organization administrators and authorized users may be able to view, manage, export, or delete workspace content and usage records based on their roles and product configuration.

5. AI Clients and Connectors

Users may access Oi through third-party AI clients and connector surfaces such as ChatGPT, Codex, Claude, and other MCP-compatible clients. When users connect Oi through those services, prompts, tool inputs, tool outputs, authentication details, and related usage metadata may be processed by both Oi and the client provider under their own terms and privacy policies.

Oi may return Contexts, tool results, usage metadata, and account or organization information needed to fulfill the connected request. Organizations are responsible for choosing which external clients they connect to Oi and what content they send through those clients.

6. Sharing of Information

We do not sell personal information. We may share information with:

• Service providers that help us operate the service, such as hosting, infrastructure, analytics, email, and billing providers.
• Connected third-party platforms when users explicitly authorize an integration or invoke functionality that depends on it.
• Organization administrators or affiliated workspace owners when necessary to administer accounts, manage permissions, review usage, or respond to support and security issues.
• Professional advisers, legal authorities, or counterparties when reasonably necessary to protect rights, enforce terms, comply with law, or address security incidents.
• A successor entity in connection with a merger, acquisition, restructuring, or sale of assets.

7. Data Retention

We retain information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and audit records. Retention may vary by data type and workspace settings.

We may also retain limited information for fraud prevention, backup, business continuity, legal compliance, and enforcement purposes after account closure or deletion requests where permitted or required by law.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure, and we cannot guarantee absolute security.

9. International Processing

Oi and its service providers may process information in multiple countries. By using the service, users understand that data may be transferred to and processed in jurisdictions other than their own.

At this time, Oi data and product traffic are primarily hosted and served from the United States.

10. Your Choices

Depending on role and workspace configuration, users and organizations may access, update, export, or delete certain information from inside the product. For privacy requests or questions, contact support@oioioi.ai.

If your account is managed by an organization, you may need to direct certain requests to your organization administrator first.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and provide additional notice where appropriate.

12. Contact

Questions about this Privacy Policy can be sent to support@oioioi.ai.