Privacy Policy

Last updated: 10 March 2026

Who we are

Oskuo is operated by Measured Collective Ltd, a company registered in England and Wales. If you have any questions about this policy or how we handle your data, please contact us at hello@oskuo.com.

What data we collect

We collect the following categories of personal data when you use Oskuo:

• Account information — name and email address
• Authentication data — login sessions, IP addresses, and MFA enrolment status
• Usage data — token counts and feature usage counters, anonymised and aggregated
• Content you create — conversations, documents, and memory notes, stored in your account
• Connector credentials — encrypted with AES-256-GCM, never logged or exposed
• Payment information — processed by Stripe; we never store card details

How we use your data

• To provide and improve the Oskuo service
• To authenticate your identity and secure your account
• To enforce usage limits and billing
• To respond to support requests
• We do not sell your data to third parties
• We do not use your conversations to train AI models

Third-party services

We use the following third-party services to deliver Oskuo. Your data is shared with these services only as needed to provide the relevant functionality:

• OpenRouter — LLM inference; your prompts are sent for processing
• Stripe — payment processing
• Firebase / Google Cloud — authentication and infrastructure
• Serper / Brave — web search; queries only, when you use web search
• OpenAI — audio transcription; when you use voice input
• Late — social media scheduling; when you use social connectors

Data retention

We retain your data for as long as your account is active. Conversations and credentials are deleted when you delete your account. Usage data is retained for billing reconciliation for up to 12 months after account closure.

Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise any of these rights, please contact hello@oskuo.com.

Security

We take the security of your data seriously. Our measures include AES-256-GCM encryption for connector credentials, server-side sessions with IP binding, optional multi-factor authentication with TOTP, and comprehensive audit logging for team accounts.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification.

Contact

If you have any questions about this privacy policy or our data practices, please get in touch at hello@oskuo.com.