Privacy Policy

Last updated: September 22, 2026

This notice explains how OXiBLUE LLC, operating as OXI.blue, processes information when you visit this website or use Rent My Ox. For privacy requests, contact Email Tim.

Information processed

• Your requests and content: text you enter, transcripts submitted after Standard voice speech input, raw microphone audio during an explicitly accepted GPT Live test session, relevant conversation context, and generated responses.
• Support information: your email address and information you choose to send when asking for help.
• Subscription records: customer and transaction identifiers, subscription status, and related order information supplied by Stripe when you purchase.
• Technical information: request and error logs, IP address, browser information, and other data processed by hosting and security systems.

Customer accounts

We use Supabase to verify sign-in emails and store subscription and usage records. Your browser stores a sign-in session so you can use your account; signing out clears that session. We keep short-lived usage counters to enforce request limits.

How information is used

We process information to generate responses, provide and maintain the service, support customers, manage subscriptions, investigate errors and misuse, and meet legal obligations. Where applicable, the basis is performing our service agreement, legitimate interests in operating and securing the service, legal obligations, or consent for optional functions.

AI processing and speech input

Requests and relevant context may be sent to external AI providers through the service’s configured AI routing. Those providers process the information under their applicable terms and privacy practices. Only submit information you are comfortable sharing for AI processing. Do not enter passwords, full payment-card details, or sensitive information about other people without permission.

Standard voice uses your browser’s speech-recognition feature. Depending on your browser, audio may be processed by its speech-service provider. The recognized text is placed in the question field and sent to The Ox only when you submit it.

For enabled, allowlisted GPT Live testers, the app explains the audio provider before starting. When you start voice, raw microphone audio streams directly to OpenAI while the Live session is active and is processed without transcript review before transmission. OXI.blue does not intentionally store raw audio by default. You can stop the session, mute the microphone, revoke browser permission, or use Type or Standard voice instead. OpenAI processes this audio under its applicable terms and privacy practices.

Saved conversations and internet lookup

On the signed-in homepage and Talk with The Ox page, starting a saved voice conversation streams microphone audio directly to OpenAI. When “Save and recall my conversations” is on, completed text transcripts are stored in Supabase under your signed-in account. Recent saved excerpts are sent to OpenAI as context for later conversations. The app does not store voice recordings. Transcripts can contain errors, and unfinished speech or interrupted replies may be missing. You can review and delete saved conversations in Settings or on the conversation page. Signed-in text conversations also use this private history when saving is on. Public web lookup sends the search question to OpenAI and returns source links. Shared Ox product knowledge is curated separately from private customer history. Turning history off prevents saving and recall for the next conversation; it does not delete earlier saved conversations. Deletion removes the app’s saved conversation and excludes it from future recall, but does not withdraw information already processed by a provider.

Service providers and payments

We use infrastructure providers, including Vercel for hosting and AI routing and Supabase for configured data storage, along with AI and communication providers needed to deliver requested functions. Payment details are entered on Stripe’s hosted checkout. Stripe and Link process billing information under the Stripe Privacy Policy. We may also disclose information when legally required or necessary to protect rights and security.

Storage, retention, and transfers

Information may be processed in countries other than your own. We retain information as needed to deliver the service, support you, resolve disputes, maintain security, and comply with recordkeeping obligations. Retention varies by data type and service provider. Contact us to request deletion of your content or account-related information; some billing, security, or legally required records may need to be retained.

Site analytics

We use Vercel Web Analytics for aggregate visits and fixed events such as demo clicks, checkout-link clicks, guest voice connections and completed guest replies. Analytics does not receive conversation text, voice recordings, account identifiers, payment details, URL query strings or fragments. It does not record your screen. Account pages, private conversation mode and browsers with a saved sign-in are excluded from this tracking. Some visits are omitted when a referring URL might contain private information. A completed reply event does not establish that audio was heard; a checkout-link click is not a completed order.

Turn off site analytics for this browser · Turn it back on. We also honor supported Global Privacy Control and Do Not Track signals. The preference is stored in this browser; hosting and security logs are separate.

Cookies and browser storage

This public page does not add advertising trackers. Hosting, security, browser speech services, and payment pages may use their own cookies or technical storage. Their privacy notices and browser controls apply to those functions.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, object to or restrict processing, withdraw consent, or complain to a data-protection authority. Contact Email Tim to make a request. We may need to verify your identity before acting on it.

Children and changes

The service is intended for adults aged 18 and older. Contact us if you believe a child has provided personal information. We will update this notice when practices change and identify the latest revision date above.