Privacy Policy

Effective date: 8 October 2026

This Privacy Policy explains what information OZO ("we", "us") collects when you use ozoapps.com and its tools (the "Service"), how we use it, and the choices you have. We have tried to keep it short and plain. If anything is unclear, email us at privacy@ozoapps.com.

Summary

• You can use every tool without an account. In that case, what you type into a tool is stored only in your browser and is not sent to us, except when you choose to send a document by email (which requires an account).
• If you create an account, we store your account details and the documents, clients and business profiles you save, so we can provide the Service to you.
• We show ads (Google AdSense) and use analytics (Google Analytics). In the EEA, the UK and Switzerland these only use cookies for personalisation or measurement if you consent.
• We do not sell your personal information.
• You can delete your account and its data at any time from your settings.

1. Information we collect

1.1 Information you enter into tools

When you use a tool without signing in, the information you enter (for example business and client details, line items, logos and signatures) is saved in your browser's local storage (IndexedDB) so you don't lose your work. It stays on your device. Clearing your browser data deletes it.

When you are signed in, documents and related data you choose to save are stored in your account on our servers so you can access them from any device.

Documents you create may contain personal information about other people, such as your clients. You are responsible for having a lawful basis to include that information, and we process it only on your instructions to provide the Service.

1.2 Account information

If you create an account we collect your email address, a password (stored only as a secure hash by our authentication provider) or, if you sign in with Google, your name, email address and profile picture as provided by Google. You may also add business profiles (business name, address, tax ID, logo and similar details) and saved clients.

1.3 Emails you send through OZO

If you send a document by email, we process the recipient addresses, subject, message, the generated PDF and a secure link to view the document. We keep a log of sends (time, recipients, delivery status) to operate the feature, prevent abuse and handle complaints. When a recipient opens the document link, we record that it was viewed so we can show the status to you.

1.4 Contact form

When you contact us, we collect your name, email address, subject and message, plus a one-way hash of your IP address and your browser's user-agent to prevent spam.

1.5 Usage, device and cookie data

Like most websites, our servers and providers automatically receive technical data such as your IP address, browser type, device type, pages visited and the date and time of requests. We use this for security, troubleshooting and aggregated statistics. Raw IP addresses are not stored with your account; where we need one for abuse prevention we store a salted one-way hash.

We also use the cookies and similar technologies described in section 4.

2. How we use information

We use information to:

• provide, maintain and improve the Service, including saving and syncing your documents when you are signed in;
• create your account, sign you in and keep it secure;
• send the documents you ask us to send, and show you whether they have been viewed;
• reply to your messages and send essential service notices (for example password resets);
• measure usage and fix problems;
• show ads that help keep the Service free;
• detect, prevent and respond to fraud, spam, abuse and security incidents; and
• comply with legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (providing the Service you asked for), legitimate interests (security, abuse prevention, improving the Service, and contextual advertising), consent (personalised advertising and analytics cookies where required) and legal obligation.

3. How we share information

We share information only as needed to run the Service, with providers that process it on our behalf under contract:

Provider	Purpose
Supabase	Database, authentication and file storage
Vercel	Website hosting and delivery
Resend	Sending emails (documents you send, password resets, contact notifications)
Google (AdSense, Analytics)	Advertising and usage statistics, subject to your consent choices
Sentry	Error reporting so we can fix bugs

We may also disclose information if required by law, to protect the rights, property or safety of our users, the public or us, or as part of a merger, acquisition or sale of assets (in which case this policy will continue to apply to your information).

We do not sell personal information, and we do not share it for cross-context behavioural advertising except through Google's advertising services as described below, which you can control.

4. Cookies, ads and analytics

We use:

• Essential cookies and storage to keep you signed in, remember your preferences and save drafts in your browser. These are necessary for the Service to work.
• Analytics (Google Analytics 4) to understand how the tools are used, in aggregate.
• Advertising (Google AdSense). Google and its partners may use cookies or device identifiers to show ads and measure their performance. Ads are never shown inside your documents, PDFs or emails.

Visitors in the EEA, the UK and Switzerland are asked for consent through a consent banner certified under the IAB Transparency & Consent Framework. Until you consent, Google Consent Mode keeps analytics and ad storage turned off and only non-personalised ads may be shown. You can change your choice at any time using the "Privacy settings" link in the footer.

You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and manage ad personalisation at adssettings.google.com.

5. Data retention

• Browser drafts stay on your device until you delete them or clear your browser data.
• Account data (documents, clients, business profiles, logos and signatures) is kept while your account is active and deleted when you delete your account.
• Email send logs are kept for up to 12 months for abuse handling and then deleted or anonymised. After account deletion they are anonymised.
• Contact messages are kept for up to 24 months.
• Server logs are kept for a short period by our hosting providers for security.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. You can:

• edit your profile and saved data in your dashboard;
• delete your account from Dashboard → Settings, which permanently deletes your saved documents, clients, business profiles and uploaded files;
• change cookie and ad choices through "Privacy settings"; and
• contact us at privacy@ozoapps.com for any other request.

We will respond within the time required by applicable law. If you are in the EEA or UK you also have the right to complain to your local data protection authority.

7. Security

We use encryption in transit (HTTPS), access controls that ensure each account can only access its own data, and reputable infrastructure providers. Shared document links use long random tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Children

The Service is not directed to children. You must be at least 16 years old to create an account. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date and, for significant changes, let signed-in users know by email or in the Service.

11. Contact

Questions or requests about privacy: privacy@ozoapps.com.