Legal

Privacy Policy

Last updated: June 2026

1. Who We Are

Ozren ("we", "us", "our") operates the knowledge continuity platform available at ozren.io. We are committed to protecting your personal data and processing it in accordance with UK GDPR and the Data Protection Act 2018. For any privacy-related queries, contact us at hello@ozren.io.

2. What Data We Collect

We collect the following categories of personal data: • Account information: your name and email address when you register • Organisation information: your organisation name and description • Content data: documents, knowledge entries and handover interview responses you upload or create • Usage data: chat messages, queries, activity logs and feature usage within the platform • Payment data: billing information processed securely by Stripe — we do not store card details • Technical data: IP address, browser type, and device information collected automatically

3. Lawful Basis for Processing

We process your personal data on the following lawful bases: • Contract: processing necessary to provide the Service you have signed up for • Legitimate interests: improving the Service, preventing fraud, and ensuring security • Legal obligation: where we are required to process data to comply with applicable law • Consent: where you have explicitly consented, such as for marketing communications

4. How We Use Your Data

We use your data to: • Provide, maintain and improve the Ozren platform • Process payments and manage your subscription • Send service-related communications including receipts and security alerts • Respond to support requests • Monitor and analyse usage to improve the Service • Comply with legal obligations

5. AI Processing

Ozren uses artificial intelligence to power its features, including document indexing, handover interviews and chat responses. Your uploaded documents and knowledge entries are processed by AI models to generate embeddings and responses. We use Anthropic Claude for AI responses and OpenAI for document embeddings. Your data is not used to train these models. Please refer to Anthropic's and OpenAI's privacy policies for their data handling practices.

6. Data Storage and Security

Your data is stored securely with third party cloud infrastructure providers. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. All data is encrypted in transit using TLS. Access to personal data is restricted to authorised personnel only.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your data will be permanently deleted within 30 days. Document content and knowledge entries are deleted immediately upon your request or account deletion. We may retain certain data for longer where required by law or for legitimate business purposes such as fraud prevention.

8. Third Party Processors

We share your data with the following categories of third party processors who act on our behalf: • Cloud infrastructure providers for hosting and storage • Anthropic for AI response generation • OpenAI for document embedding • Stripe for payment processing • Email service providers for transactional emails All third party processors are bound by data processing agreements and are required to handle your data securely and in accordance with applicable law.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data: • Right of access: request a copy of the data we hold about you • Right to rectification: request correction of inaccurate data • Right to erasure: request deletion of your data ("right to be forgotten") • Right to restriction: request that we limit how we process your data • Right to portability: receive your data in a structured, machine-readable format • Right to object: object to processing based on legitimate interests To exercise any of these rights, contact us at hello@ozren.io. We will respond within 30 days.

10. Cookies

Ozren uses essential cookies to maintain your login session and ensure the platform functions correctly. We do not use third party tracking or advertising cookies. By using the Service, you consent to the use of essential cookies.

11. Children's Privacy

Ozren is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@ozren.io and we will delete it promptly.

12. International Transfers

Your data may be processed by our third party service providers in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The date at the top of this page indicates when it was last updated.

14. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to address your concerns directly first — please contact us at hello@ozren.io.

For any privacy queries contact us at hello@ozren.io