Privacy Policy

This Privacy Policy describes how OptiU Inc., a Delaware corporation (“OptiU”, “we”, “us”), collects, uses, shares and protects personal data in connection with optiu.ai, its subdomains, the Opti Bot, the Free Sandbox, the Personalized Sandbox and the OptiU applications (together, the “Services”). OptiU is the controller of personal data collected through our website. Where we process data on behalf of a customer inside the Services, we act as that customer’s processor under the customer’s agreement with us.

• Information you give us: name, work email, company, role and sector submitted in forms, and messages you send through the Opti Bot or to our team.
• Account data: login credentials and user profile details for users of the OptiU applications.
• Customer data: business data a customer uploads to or connects with a Personalized Sandbox or licensed application.
• Usage data: page visits, sandbox session activity, device and browser type, and IP address, used in aggregate to operate and improve the Services.
• Billing data: where you purchase a subscription, payment is handled by our payment processor; we do not store full card numbers.

The Free Sandbox runs on synthetic data only and must not be used to submit customer or regulated data.

• To provide, operate, secure and support the Services.
• To respond to enquiries and requests, and to manage customer relationships.
• To improve the Services using aggregated or de-identified usage data.
• To send product and service communications, which you can opt out of at any time.
• To meet legal obligations and enforce our agreements.

We do not sell personal data, and we do not use customer data to train AI models.

Where data protection law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and improving the Services, compliance with legal obligations, and your consent where we ask for it.

We share data only with providers that help us run the Services, under written terms:

• Microsoft Azure — application hosting, databases and storage.
• Cloudflare — website hosting, content delivery and security.
• AI model providers — a combination of OpenAI, Anthropic and Groq, accessed through enterprise or API services — to generate Opti responses. Data sent to these models is not used by the providers to train their models.
• Stripe — payment processing, where applicable.
• GitHub — source code hosting; no customer data is stored there.

We may also disclose data where required by law, or as part of a merger or acquisition subject to this Policy.

Customer data is kept for the duration of the engagement and deleted within 30 days after the engagement ends, or sooner on the customer’s written instruction. Enquiry and account data are kept while the relationship is active and as needed to meet legal obligations, then deleted or anonymised.

Customer data is encrypted in transit and at rest and isolated per customer workspace. Access is limited to personnel who need it to provide the Services.

OptiU is based in the United States and our providers may process data in other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses, and we offer region-specific hosting where a customer agreement requires it.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. To make a request, email contact@optiu.ai. We respond within 30 days and will not discriminate against you for exercising your rights. If you are a user of a customer’s application, we will route your request to that customer.

We use essential cookies to run the Services and analytics to understand site usage. You can control cookies through your browser settings.

The Services are for business use and are not directed to anyone under 16.

We will post updates on this page with a new effective date, and notify customers of material changes.

OptiU Inc. — privacy enquiries: contact@optiu.ai.