Legal
Privacy Policy
Last updated: July 3, 2026
What we collect
When you create a OSPG account, we collect: name, work email, organization name, organization type, location (city, state), approximate population, and any photos or documents you upload for PRAESIDIUM analysis. When you contact us, we collect the information you provide (name, email, phone, message). We log standard server information (IP address, user agent, request timing) for security and performance.
How we use information
We use account information to provide the service, deliver AI-generated assessments, process payments through Stripe, send transactional email (assessment delivery, course completion, subscription receipts), and communicate about service updates. We use aggregate, de-identified usage data to improve the platform.
What we don't do
We do not sell your data. We do not share your photos, assessments, or organizational details with third parties for marketing. We do not use customer data to train AI models. We never use customer data to identify or surveil specific individuals beyond the explicit purpose of the engagement.
Photos and PRAESIDIUM
Photos uploaded to PRAESIDIUM are processed by Anthropic's Claude API for vulnerability analysis. Anthropic does not retain customer API content for model training (per their no-retention business terms). Photos are stored in your private Supabase Storage bucket accessible only to authenticated members of your organization. You can delete photos and assessments at any time from your dashboard.
Cookies and analytics
We use session cookies for authentication (Supabase) and product analytics cookies through PostHog and Vercel Analytics. PostHog captures page views, button clicks, and form interactions to help us understand how the site is used and improve it. PostHog also records anonymous session replays of public site visits, with all form inputs masked by default so personal information typed into forms is never recorded. We do not use advertising cookies or third-party tracking pixels, we do not share analytics data with advertisers, and we honor your browser's Do Not Track signal. You can clear cookies at any time through your browser settings, or request deletion of your analytics history through the contact below.
Data retention
We retain account information for as long as your account is active, plus 90 days after deletion (in case you change your mind), then purge. Assessments and photos are retained per your account's retention setting (default: keep until deleted). Lead inquiries from contact forms are retained for two years from the date of inquiry.
Children's privacy
OSPG services are intended for organizations and adults. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected a child's information, contact Oceanstateprotectiongroup@gmail.com.
Your rights
You can access, correct, export, or delete your personal information at any time through your dashboard or by contacting us. EU/UK residents have rights under GDPR including portability, restriction, and the right to be forgotten. California residents have rights under CCPA including disclosure and deletion.
Contact
Privacy questions: Oceanstateprotectiongroup@gmail.com. Postal: Ocean State Protection Group, Rhode Island.