Legal

Privacy Policy

Last updated: October 28, 2026

Who we are

oyyo, Co. is a Delaware corporation. We make oyyo, an AI assistant for commercial insurance. This policy covers the oyyo service and this website. In it, “we” means oyyo, Co.

Questions go to privacy@oyyo.ai. A person answers.

What we collect

  • Account details. Your name, work email and company.
  • Documents. The files you email, forward or upload, and the values we read from them.
  • Usage data. How you and your team use the service.
  • Mobile numbers. Numbers that opted in to texts, and the messages sent and received.
  • Invite-code requests. Your work email, and the agency, role and note you choose to add.

How we use it

We use your data to provide the service to you. We use usage data to improve the service.

We never use your data to train public AI models.

How we keep it

Each company’s data is kept apart from other companies. Data is encrypted at rest and in transit. We host the service on Microsoft Azure. Your data is stored in Azure data centers in the United States.

Enterprise desks can run on a dedicated instance in our cloud, or on-premises.

Who else sees it

We use service providers for cloud hosting, AI models, email delivery and text message delivery. They process data to run the service for us.

Invite-code requests go to the build partner who reviews them.

We do not sell personal data.

How long we keep it

We keep your data while you subscribe. After you delete your account, we delete its data within 30 days.

Files sent to try@in.oyyo.ai

A file you email to try@in.oyyo.ai is used only to prepare your reply. Your read-only link closes after 7 days. We delete the file within 30 days after the link closes.

The website check

On our AI page, you can type a website address. On Start, we use the domain of your work email. Our server then reads that site’s public home page, its robots.txt and its llms.txt. It reads them as a search engine would. We show you the results. When you run it on our AI page, the address and site name go to our team by email. We do not store the results.

Ask oyyo

The questions you type into Ask oyyo are sent to our AI model on Microsoft Azure. The model writes the answer. If you ran the website check in this tab, a short summary of it goes along. We do not keep your questions with your identity. We count questions, not their text. Do not type personal or client data.

On this website

  • Your work email. When you type it, we keep it in this browser tab’s session storage. We offer it back in other email fields on this site.
  • Campaign tags. For this tab only, we keep the campaign tags of your first visit. We also keep its landing page and referring site.
  • Readiness answers. Your answers to the readiness questions stay in this browser tab. They go to Start in this tab’s session. When you finish the check, your answers go to our team by email.
  • Forms. When you send a form on this site, we email what you typed to our team. That includes Start, invite code requests, the sample Send and demo call requests. We use it to follow up with you. A phone number left for a demo call is used only to call you. We do not text it.
  • The hand-off to app.oyyo.ai. The link to app.oyyo.ai carries your role, invite code, package credits and campaign tags. It never carries your email.

Text messages (SMS)

We text only people who agreed to get texts. Staff verify their own number in oyyo with a one-time code. Clients link their phone by texting a join code from their broker. A broker may also send that code after the client agrees.

We use your mobile number only to send and receive messages about your insurance case. Our SMS provider receives it only to deliver those messages.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text message opt-in data and consent are never shared with any third parties.

Reply STOP to any text to opt out. Reply HELP for help. See the text message terms.

Analytics and cookies

  • Plausible Analytics counts page views, referrers, country and device. It sets no cookies and keeps no personal data.
  • Microsoft Clarity records session replays and heatmaps. We use them to find what is hard to use. Clarity sets the cookies _clck and _clsk on our site. Microsoft may also set its MUID cookie. Your readiness answers may appear in a replay unless they are masked.

Turn on Global Privacy Control or Do Not Track, and Clarity stays off. Plausible still counts the visit, without personal data.

Your rights

You can ask to see, correct or delete your personal data. Email privacy@oyyo.ai.

If you live in California, you have these rights too. You can also opt out of the sale or sharing of your personal data. We do not sell it. To opt out of sharing, turn on Global Privacy Control, or email us. We will not treat you differently for using these rights.

Children

oyyo is for work. It is not for anyone under 18. We do not knowingly collect data from children.

Changes

We may update this policy. We will post the new version here, with a new date. We will email you before material changes take effect.

Contact

oyyo, Co. Email privacy@oyyo.ai.