Privacy Policy

When you use Oswego, we collect information you provide directly — such as your business name, email address, phone number, and website URL when you request a free audit or sign up for a plan. We also collect usage data including pages visited, features used, and interactions with our AI agents.

In the course of providing services, Oswego may process information submitted by your customers through channels such as website chat, contact forms, text messages, email, or phone — for example, a name, contact information, or the content of a message or inquiry. This information is collected on behalf of, and at the direction of, your business, and is used to help you respond to and serve your own customers, and to improve the quality of the automated services we provide.

We use your information to provide and improve our services, generate your AI Visibility Score and audit reports, build and optimize your website, send you monthly intelligence reports, and communicate with you about your account. We do not sell your personal information to third parties. Where information relating to your customers is used to improve our broader service quality, we apply data minimization and de-identification safeguards designed to prevent any individual from being identified from that use.

Our AI agents access your business data — including your name, vertical, services, city, and brand tone — to generate content, answer customer questions, and make recommendations specific to your business. This data is stored securely in Google Firestore and is never shared with other Oswego clients.

Your data is stored on Google Cloud Platform infrastructure in the United States. We use Google Cloud Secret Manager for all credentials and API keys. All data in transit is encrypted via HTTPS/TLS. We follow industry-standard security practices to protect your information, including access controls and isolation of each client's data from other clients.

We retain information for as long as necessary to provide our services and fulfill the purposes described in this policy, after which it is deleted or de-identified in accordance with our internal retention practices.

Our marketing websites (oswego.io and ezwp.io) do not run Google Analytics and do not set analytics or advertising cookies. Google Analytics 4 runs only on a client's own WordPress site when that client enables it through our Pro plugin, and it uses the client's own GA4 property ID. For that client-site analytics the client is the data controller and is responsible for any cookie consent required on their site; Oswego does not receive or store that GA4 data.

Oswego integrates with the following third-party services: Google Cloud Platform (infrastructure and Vertex AI / Gemini models), Cloudways (WordPress hosting), Stripe (payment processing), Resend (email delivery), Apify (web scraping and search data), and DataForSEO (SEO data). To generate content and measure AI visibility we also send queries to AI model providers: OpenRouter (model gateway), OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), and Perplexity. Each service has its own privacy policy governing their use of your data.

When you run an audit, or when our operators use the prospecting tools in Mission Control, the Service fetches and analyzes the publicly available content of the website being assessed — both sites you submit and other local-business sites we evaluate. From a site's published pages we may identify the technology and vendor it uses and extract publicly listed business-contact details, such as a business email address, phone number, and a contact name and role. We record only what is actually found on the page; fields with no match are left blank and never fabricated. To measure AI visibility we send buyer-intent search queries (for example, "best [trade] in [city]") to third-party AI engines — Google AI Overview (via Apify) and Perplexity, ChatGPT, and Google Gemini (via OpenRouter) — and analyze whether the business is named or cited in the answers; we do not send the extracted contact details to those engines. The page content we fetch is processed transiently to produce these results, and the derived output — scores, the technology/vendor profile, any extracted contacts, and audit reports — is stored in Google Firestore and Google Cloud Storage under the relevant account.

You have the right to access, correct, or delete your personal information at any time. To exercise these rights, contact us at hello@oswego.io. We will respond within 30 days. If you are a customer of one of our client businesses and wish to exercise these rights, please contact that business directly, or contact us at hello@oswego.io and we will coordinate with the relevant business.

Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children.

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

We may update this privacy policy from time to time; material changes will be reflected by an updated "Last updated" date above. If you have questions about this privacy policy, contact us at hello@oswego.io — Oswego, Portland, Oregon, United States.