Privacy Policy

Last updated: 1 October 2026. This page explains how Odisage handles the personal data of people who visit the site or use its features, in line with Regulation (EU) 2016/679 ("GDPR"). Odisage is free: we do not sell services and we do not collect payment data.

Data controller

Odisage, a project run personally by its founder (not yet incorporated as a business). For any request about your data you can write to support@odisage.com.

What data we process and why

  • Account: when you sign up we process your email and password (stored only in encrypted form). In settings you can optionally add your name, date of birth and gender. If you sign in with Google we receive the name and email of your Google account. You can enable two-step verification. Legal basis: providing the account you requested; for optional data, your consent.
  • AI assistant chats and Brush Tool Creator: we save the messages you write and the replies, with date and time, and count daily requests to enforce usage limits. Legal basis: providing the service you requested; for usage limits, our legitimate interest in preventing abuse. Do not write sensitive data or other people's data in the chats.
  • Contact form: name, email and message, used only to reply to you. Legal basis: your request.
  • Newsletter: if you subscribe, we send you an email to confirm the address and only after confirmation do we send the newsletter. We keep the address, language, subscription status and the dates of confirmation and any cancellation. Legal basis: your consent, which you can withdraw at any time with the “Unsubscribe” link in every email.
  • Visit statistics: we count in aggregate how many times each page is opened and from which site or link you arrive (for example Instagram or Google). We use no cookies and do not store your IP address or anything that identifies you: we keep only a daily counter per page and per source. Browsing is not tracked if your browser sends “Do Not Track”. Legal basis: our legitimate interest in understanding how the site is used.
  • Technical data: IP address and technical logs processed by our infrastructure for security and to limit abuse. Legal basis: legitimate interest in the security of the service.

We do not use your data for advertising or profiling. Purchases made through buy links happen on the retailer's site, which has its own privacy notice.

Who receives the data

To run the site we rely on providers that process data on our behalf:

  • Cloudflare: hosting, network and database of the site.
  • Resend: sending emails (account verification, password recovery, newsletter confirmation and delivery, notifications).
  • Google (Gemini) and OpenRouter: generate the replies of the AI assistant and the brush creator: the text of your messages is sent to these services to produce the reply.
  • Google: sign-in with your Google account, if you choose it.

Some of these providers are based in the United States or process data outside the European Union: transfers take place with the safeguards provided by the GDPR (such as standard contractual clauses or adequacy decisions), according to the providers' own notices.

How long we keep data

  • Account: until you delete it. You can do so at any time from the account settings: deletion also erases your chats.
  • AI chats: 12 months from the last activity, then automatically deleted. You can delete them sooner, whenever you like.
  • Contact form messages: for as long as needed to handle the request.
  • Newsletter: until you unsubscribe; after that we keep only the address and the date, so we never write to you again.

Minimum age

You must be at least 16 to sign up. If we find that an account belongs to a younger person, we delete it.

Your rights

You can at any time ask for access, rectification, erasure, restriction and portability of your data, object to processing, and withdraw consent where we asked for it. You can do many of these yourself from the account settings; for the others write to the address above and we will reply as soon as possible. If you believe your data is not being handled properly you can lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali, www.garanteprivacy.it).

Cookies

How we use cookies and browser storage is explained in the Cookie Policy.

Changes to this page

If we change how we process data we will update this page and the date at the top.