Privacy Policy

Ossa Privacy Policy

Effective Date: January 01, 2025

Ossa Collective, Inc., a Delaware corporation, having a business address at 24 Railroad Avenue, PMB 125, Tenafly, NJ 07670, (herein “Ossa,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy is part of our Terms of Service and explains how we collect, use, and share information about you when you communicate with us and/or access and use our platform, services, and tools (collectively, the “Services”). Capitalized terms that are not defined in this Privacy Policy have the meaning given them in our Terms of Service. By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

1.1 Definitions

“Personal Information” is information we obtain about you that can be used to identify you (whether alone or in combination) as defined under applicable laws of the United States.

“Anonymized Information” is information that may comprise Personal Information that has been processed, whether alone or by being aggregated with other information, so that it cannot be linked back to identify you, and is not subject to this Privacy Policy and we may treat it as non-Personal Information and use it without obligation to you except as prohibited by applicable law.

1.2 Information You Provide to Us

Account Information: When you register and/or sign up for an account to use our Services, we collect information such as your name, address, email address, password, and other details required to create an account.
Payment Information: If you make purchases or receive payments through the Services, we collect your payment-related information, including billing address and payment method details (e.g., a third party account information such as Stripe (www.stripe.com) or a financial institution). However, we do not collect or otherwise process your financial information (e.g., credit card numbers, or bank account numbers) that you provide directly to third parties.
Content and Campaign Information: Customers and Creators may upload or share content, campaign details, scripts, or other materials through the Services.

1.3 Information We Collect Automatically

Usage Data: We collect information about your use of the Services, such as IP address, device type, browser type, and operating system (“Usage Information”), including for examples:
Your Internet Protocol (IP) address, which is the number automatically assigned to your computer whenever you access the Internet and that can sometimes be used to derive your general geographic area;
Geolocation information;
Other unique identifiers, including mobile device identification numbers;
Sites you visited before and after visiting the Services;
Pages you view and links you click on within the Services;
Information collected through cookies, web beacons, and other technologies;
Information about your interactions with e-mail messages, such as the links clicked on and whether the messages were opened or forwarded; and
Standard Server Log Information.

Except to the extent required by applicable law, Ossa does not consider Usage Information to be Personal Information. However, Usage Information may be combined with your Personal Information that we collect. To the extent that we combine Usage Information with your Personal Information, we will treat the combined information as Personal Information under this Privacy Policy.

Cookies and Tracking Technologies: We or our third-party providers may use cookies (including necessary, statistics, marketing, and preference cookies), pixel tags, Local Shared Objects (sometimes referred to as “Flash Cookies”), and other and similar technologies to collect Usage Information about your interactions with our Services to improve functionality and provide a better user experience.

1.4 Information from Third Parties

We may receive Personal Information about you from third parties, such as payment processors, advertising partners, other u=Users of our Services, and publicly available sources, as allowed by applicable law.
If you give us Personal Information about someone else, you must do so only with that person’s authorization. You should inform them how we collect, use, disclose, and retain their personal information according to our Privacy Policy.

1.5. Other Information We Collect

We may also collect other information about you, your devices, or your use of our Services with your consent (where required by law).

2. How We Use Your Information

To Provide and Improve the Services

Provide you with our Services as described in our Terms of Service, including enabling our Users to engage with each other for advertising opportunities, including endorsement, creator-first advertising, and host-read ad campaigns.
Create and manage accounts.
Identify and authenticate you so you may use our Services.
Operate, monitor, evaluate, optimize and improve our Services, including developing new products and services, managing our communications, analyzing our Services, conducting market research, analyzing customer behaviors, generating reports, building up data usage patterns, performing internal financial processes, performing data analytics, auditing and other internal functions.
Market and advertise our Services, products, content, services and websites, including use of targeted advertising, count ad impressions to unique visitors; verify position and quality of ad impressions; conduct data analytics.
Manage our offers, programs, or promotions, including providing notifications and promotional offers.
Facilitate business opportunities amongst our Users including advertising campaigns and payments.
Offer customer support and troubleshoot issues.
Fix problems and bugs.

To Personalize Your Experience

Recommend content or features or opportunities tailored to you or your preferences.
Analyze trends to improve the functionality and usability of the Services.
Get your feedback on our ideas for products or features.

For Legal and Security Purposes

Comply with applicable laws, legal processes, or government requests, including (i) compliance with the laws or compulsory legal processes (such as a search warrant or other court order), and (ii) compliance with the policies governing our Services to the extent that such disclosure is permitted by applicable data privacy laws.
Respond to requests from government or law enforcement.
Detect, prevent, and respond to fraud, abuse, spam, illegal activities, security risks, and technical issues.
Protect our rights, property, or safety, or, comply with data protection laws, ensure the rights, property or safety of us, business partners, or our customers.
Monitor and improve the information security of our communications and Services.
Comply with legal obligations and enforce our Terms of Service.
Investigate potential violations of our Terms of Service, verify your identity; and for other customer service and support purposes.

Aggregated Statistics

We may use aggregated and anonymized data for analytics, research, or marketing purposes. This data does not identify you or other individuals.

Sensitive Personal Information

Sensitive personal information is a subcategory of personal information defined by applicable law that might include information like precise geolocation, government ID information, citizenship, certain health-related data, racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and certain other data concerning potentially sensitive subjects.
We only process sensitive personal information for one of the following purposes: (i) To perform the services reasonably expected by an average consumer who requests services; (ii) To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information. (iii) To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions; (iv) To perform services for or on behalf of the Customer; (v) To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the Services that are provided or controlled by us; (vi) To collect or process sensitive personal information where the collection or processing is not for the purpose of inferring characteristics about our Users.

3. How We Share Your Information

3.1 With Your Consent

We may share your Personal Information with other Users of our Services and/or third parties when you provide explicit consent.

3.2 With Contractors and Service Providers

We share Personal Information with our contractors and trusted third-party service providers who perform functions on our behalf in connection with our providing the Services, such as payment processors, hosting providers, and analytics partners. These entities are limited by contractual provisions in their ability to use your Personal Information for purposes other than providing the relevant services. These services’ use of your data is governed by their privacy policies.

3.3 Legal Obligations

We may disclose your Personal Information as and when required:

to comply with applicable laws or respond to compulsory legal processes (such as a search warrant or other court order);
to verify or enforce compliance with the policies governing our Services to the extent that such disclosure is permitted by applicable data privacy laws;
to protect our rights, property, or safety, or, in compliance with data protection laws, the rights, property or safety of us, business partners, or our customers;
to manage and improve the performance of our Services, as well as to develop new products and services, including enhancing the reliability of the Services;
to analyze and advertise our Services, and related improvements;
to respond to inquiries, delivery of notices, and provision of customer support;
to enabling network and information security throughout our Services; and
to share of your information among our affiliates (if any).

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our business related to the Services to a successor individual or legal entity (a “Successor”), you agree that your Personal Information may be transferred to the Successor as part of that transaction.

4. Your Rights and Choices

4.1. Overview of Your State-Specific Privacy Rights

Depending on where you live, you may have different scope of data privacy rights. Certain states have unique requirements regarding the disclosure of data practices, while other states offer extra personal data rights and protections. As of February 2025, the states that have specific data privacy or disclosure laws are as follows: California, Colorado, Connecticut, Delaware, Indiana (effective 01/01/2026), Iowa, Kentucky (effective 01/01/2026), Maryland (effective 10/01/2025), Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island (effective 01/01/2026), Tennessee (effective 07/01/2025), Texas, Utah and Virginia. For a current guide of state-specific data privacy laws, you can review regularly updated materials available here. If you are a resident of any of these states, you may have additional privacy rights available to you that are not expressly outlined in this document. This list of states with specific privacy laws is constantly changing, and we may not reflect the current list of states with such laws.

Residents of the states listed above may be entitled to the rights to:

Confirm whether we process your personal information.
Know what personal information we have collected about you.
Know whether your personal information is sold or disclosed and to whom.
Access and delete certain personal information (i.e., you can ask us for a copy of the personal information we have collected, and you can ask us to delete certain personal information).
Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa and Utah).
Be informed about third parties with which your personal information has been shared.
Data portability (i.e., ask us to share (port) your personal information to another entity, where technically feasible).
Either limit (opt-out of) or require consent to process sensitive personal data.
Opt-out of personal data processing for: (i) sales; (ii) targeted advertising (excluding Iowa); (iii) profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
Request the review of decisions taken exclusively based on automated processing if these decisions could affect your rights under applicable data privacy laws.

We will not discriminate against you for exercising your rights. However, these rights may be limited, for example if fulfilling your request would reveal personal information of another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Certain state laws may not apply to our operations. We will inform you of relevant grounds and exemptions we rely upon when responding to any request you make.

4.2. Exercising Your State-specific Privacy Rights

You can exercise your other state-specific privacy rights at any time by contacting us at support@weareossa.com referencing to specific law in subject matter. To verify your identity, you will need to provide us with the following information with your request:

Full Name;
Email address;
Postal address;
Phone number;
State of residence.

Please note that we may be unable to process your request if you do not provide us with the above information. You may also designate an authorized agent to exercise your rights on your behalf. You may designate an agent via any of the ways used to submit requests on your behalf. We will request the agent to verify that he or she has the authority to submit requests on your behalf. We will do so by asking the agent to submit the following information:

Valid power of attorney;
The requester’s valid government-issued ID; and
The authorized agent’s valid government ID.

Please note that we may not be able to process your request if your designated agent and/or you do not provide us with the above information.

We will respond to most consumer requests within 30 to 45 days of receipt, depending upon where you reside. However, some requests may take longer. We will notify you in writing if we need more time to respond. We have the ability to deny your request(s) if certain exceptions in the law apply. If we do deny your request, we will provide you with the reasons for such denial. You have the right to appeal a refusal to take action on your request. You may file an appeal to us at the contact information provided above. We will respond to most appeal requests within 45 days to 60 days of receipt, depending upon where you reside. However, some requests may take longer. We will notify you in writing if we need more time to respond (up to 90 days total). In our response to your appeal, we will inform you of any actions taken or not taken and the reason(s) as to why. Normally, we do not charge a fee to process or respond to consumer requests. However, we may charge a fee for a second or subsequent request within a 12-month period.

4.3. Notice to California Residents

Pursuant to California’s “Shine The Light” law, California Civil Code Section 1798.83, California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of Personal Information to third parties for their own direct marketing purposes in the preceding calendar year. You may request this disclosure information at support@weareossa.com referencing “California Shine The Light Request” in the subject matter line so that we can process your request. Please include your full name, mailing address, phone number, state of residence and email address with your request. You also may opt-out of any future sharing of such Personal Information with third parties for their direct marketing purposes by contacting us by email as above or by mail at our mailing address: ATTENTION: California Shine The Light Request, Ossa Collective, Inc., 24 Railroad Avenue, PMB 125, Tenafly, NJ 07670.

4.4. Access and Update Information

You can access and update your account information through your account settings.

4.5. Opt-Out of Communications

You can opt out of receiving promotional emails by following the unsubscribe instructions in those messages. Note that you may still receive administrative messages.
You can opt out of our other uses by us but doing so may result in your not being able to use some or all of our Services.

Users who opt out may continue to receive services-related and other non-marketing emails. We do not control the communications that you might receive from our clients who use our Services, and if you would like to opt-out of receiving communications from our clients using our Services, you need exercise your rights with our clients.

4.6. Manage Cookies

You can manage cookie preferences through your browser or devise settings. You may consult the “Help” section of your browser for more information (e.g., Google Chrome; Mozilla Firefox; Internet Explorer; or Safari)

5. Other User’s Information

In the course of using our Services, we may enable you to obtain, or we may provide you with Personal Information of another User who is a natural person (such as their name, email address, contact details, and business particulars) to enable you to consider and possibly complete a transaction using our Services. Independent from us, you are a controller of such natural person User’s data (i.e., you determine the purposes and means of the data processing taking place), and we encourage you to inform such Users about your privacy practices and policies and respect their privacy. In all cases, you must comply with the applicable data protection and privacy laws, and determine the applicability of such laws, and you must give such natural person User(s) a chance to remove his or her Personal Information from your database and provide him or her with a chance to review what information you have collected about him or her, or exercise other data privacy rights under applicable data privacy laws. Using Personal Information of others that you have access to for any purpose other than that provided for in our Terms of Service constitutes a violation of our Terms of Service.

6. Third Party Sites and Services

The Services may contain links to other websites or online services that are operated and maintained by third parties and that are neither under the control of nor maintained by Ossa. In addition, when you are on our Services you may be directed to other services that are operated and controlled by third parties, some of whom may be Users of our Services, that we do not control. For example, if you “click” on a link, the “click” may take you off the Services onto a different website. Such links do not constitute an endorsement by Ossa of those other websites, the content displayed therein, or the persons or entities associated therewith. This Privacy Policy does not apply to such linked third-party websites, communications and content. Such third-party operators may collect information from you including your Personal Information, and may employ tracking technology and advertising technologies, particularly when content is served to you, and may share your Personal Information with others and/or us or our other Users. Our inclusion of links to such websites or services does not imply any endorsement of the material on such websites or any association with their operators. We encourage you to note whenever you leave the Ossa website and to review the privacy policies of these third-party websites or services and exercise caution in connection with them and before submitting any Personal Information to them.

7. Data Storage

Your Personal Information is stored on servers of our U.S.-based provider, Google LLC, with the following privacy policy: https://cloud.google.com/terms/cloud-privacy-notice. We encourage you to carefully review this privacy policy.

8. Data Security

We implement reasonable, industry-standard security measures to protect your Personal Information from unauthorized access, alteration, disclosure, or destruction as described in our Terms of Service. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You use our Services and provide us with your Personal Information, at your own risk. You are responsible for maintaining your privacy settings and the confidentiality of your account password, answers to any security questions we may employ, and for any access to or use of the Services using your password, whether or not authorized by you. Please notify us immediately of any unauthorized use of your password or account or any other breach of security in accordance with our Terms of Service.

9. Data Retention

We retain your Personal Information for as long as necessary to provide the Services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

10. Children’s Privacy

Our Services are not directed to children as outlined in our Terms of Use, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 13, please contact us and we will take steps to delete it.

11. Jurisdiction

If you choose to use the Services from outside the United States, you do so on your own initiative. If you access our Services from outside the United States, you consent to the transfer of your Personal Information to and the processing, usage, sharing, and storage of your information, including your Personal Information, in the United States and other countries where we or our third-party providers might operate, which may have data protection rules that differ from those of your country. Regardless of your location, if you have a request or complaint regarding the processing of your Personal Information we request that you first contact us as described in the section “Contact us” below, and we will reply on a timely basis.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes and indicate the effective date at the top of the policy, and any use of our Services subsequent to the effective date shall indicate your agreement to the updated Privacy Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@weareossa.com

Address: Ossa Collective, Inc., 24 W. Railroad Ave. #125, Tenafly, NJ 07670

By using the Ossa platform and Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.