Version 2026-11-06 · Effective 2026-11-06
Prior versions
Effective Date: November 6, 2026
This Privacy Policy applies to our websites, applications, services, and other offerings that link to this policy (collectively, the “Services”). It explains how Oasive, Inc. (“Oasive,” “we,” “our,” or “us”) collects, uses, and protects your personal data. In this Privacy Policy, “Personal Data” means information that identifies or reasonably can be linked to a particular individual. By using our Services, you accept the practices described in this Privacy Policy.
This Privacy Policy does not apply to information we process on behalf of our business customers while providing the Services to them. In those cases, our use of data is governed by our agreements with those customers (including our Data Processing Agreement, available at https://oasive.ai/data-processing-agreement). If you have concerns about data we process on behalf of a business customer, please contact that business directly. This Privacy Policy also does not cover the practices of companies we don’t own or control.
Personal Data We Collect
This chart details the categories of Personal Data that we collect and have collected over the past 12 months:
| Category of Personal Data | Examples of Personal Data We Collect |
|---|---|
| Account and Profile Information | First and last name Business email address Employer or firm name Job title or role Login credentials Information we request to confirm that you are eligible to receive the market data available through the Services |
| Billing Information | Billing contact details and transaction history Payment card details, which are collected and stored by our payment processor rather than by us |
| Research and Chat Content | Questions and prompts you submit to the chat and research features Portfolio holdings, position lists, security identifiers and other content you enter or upload Reports you request or schedule |
| Usage Data | Reports opened and downloaded, features used, query volumes and timing Chat and report history associated with your account |
| Device and Connection Data | IP address Browser type, operating system and device type Approximate location derived from IP address |
| Cookies | Cookie and session identifiers Cookie types (session and persistent) Advertising identifiers and ad click IDs set by the advertising technologies described in Cookies and Tracking Technologies Pages you visit on our websites, the ad that brought you there, and actions you take, such as submitting a request-access or contact form |
| Communications | Support inquiries and correspondence with us Responses to surveys or feedback requests Email delivery and open information for the research emails we send you |
Where We Get Your Data
We collect Personal Data directly from you (when you sign up for research emails, create an account, use the chat and research features, enter or upload portfolio information, or contact us), automatically through your use of the Services (including via Cookies), from your employer when it gives you access to the Services, from our payment processor, email delivery provider and analytics provider, and from advertising platforms. Advertising platforms give us the details you submit in an ad-platform lead form (for example, the name, work email address, company and job title you submit in a LinkedIn Lead Gen Form when you ask to hear from us) and report how our ads perform, such as clicks and conversions.
How We Use Your Data
Providing, Customizing and Improving the Services. Creating and managing your account, delivering research reports to you, generating responses to your chat and research requests, processing subscriptions and billing, providing support, improving the Services through research and analytics, and fraud prevention and security.
Complying with Our Data Licenses. Confirming that you are eligible to receive the market data available through the Services, and keeping and reporting the user and usage records our data licensors require.
Marketing. Sending you research reports, product updates and other marketing emails, which you can opt out of at any time using the unsubscribe link or by contacting hello@oasive.ai.
Advertising and Measuring Our Ads. Measuring how our ads on Google, LinkedIn and Reddit perform (for example, whether a visit that started with an ad click led to a request for access), showing our ads to people who have visited our websites (retargeting), and limiting how often you see the same ad.
Corresponding with You. Responding to your inquiries, contacting you when necessary, and sending communications according to your preferences.
Meeting Legal Requirements. Fulfilling legal obligations, protecting the rights and safety of you and others, enforcing our agreements, responding to third-party claims, and resolving disputes.
We will not use your Personal Data for materially different or unrelated purposes without providing you notice.
How We Share Your Personal Data
We disclose your Personal Data to the categories of service providers and other parties listed in this section. We do not sell Personal Data for money. The advertising technologies described in Cookies and Tracking Technologies let our advertising partners collect information about your visits to our websites. California law treats this as “sharing” for cross-context behavioral advertising, and some other state laws may treat it as a “sale” or as targeted advertising. You can opt out as described in the Do Not Sell or Share My Personal Information section below.
Service Providers. These parties help us provide the Services or perform business functions on our behalf, including our cloud hosting provider, email delivery provider, payment processor, analytics provider and customer support tools. We require service providers to protect Personal Data and to use it only to provide services to us.
AI Model and Web Search Providers. Content you submit to the chat and research features is transmitted to third-party AI model providers to generate a response, and related search queries are transmitted to a web search provider. Our agreements with our model providers prohibit them from using your content to train their models. For business customers, our handling of content submitted to AI features is governed by our customer agreements and Data Processing Agreement. A current list of sub-processors is available by contacting hello@oasive.ai.
Data Licensors. The market data in the Services is licensed from third parties whose agreements with us require us to report user counts and, on request, the identity and usage records of the individuals who access their data. We disclose that information to a data licensor only as those agreements require.
Analytics Partners. These parties provide analytics on web traffic or usage of the Services, including how users found or were referred to the Services, such as through one of our ads, and how they interact with them.
Advertising Partners. Google, LinkedIn and Reddit receive information through the advertising technologies on our websites, described in Cookies and Tracking Technologies, to measure our ads and to show our ads to people who have visited our websites. These partners may combine this information with other information they hold about you and use it under their own privacy policies, including to improve their own advertising services.
Parties You Authorize. Third parties you authorize, access, or authenticate through the Services.
Legal Obligations. We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under Meeting Legal Requirements in the How We Use Your Data section above.
Government and Law Enforcement Requests. We may disclose Personal Data to government authorities or law enforcement in response to valid legal process such as a subpoena, court order, or search warrant.
Business Transfers. Your Personal Data may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you of the transfer.
Aggregated and Anonymous Data. We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not share such data in a manner that could identify you.
YouTube API Services
Oasive Munis uses YouTube API Services. Public bodies that issue municipal bonds post recordings of their board meetings on their own YouTube channels. We use YouTube API Services to find those recordings and to show them, with a short summary, on the research page of the body that held the meeting. By using these features, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). How Google handles data is described in the Google Privacy Policy (https://policies.google.com/privacy).
What we access. Public data only, read with an API key: the recent uploads of public bodies’ official channels, a channel’s public description and its list of uploads, and public video details. We do not use OAuth. We never ask you to sign in to YouTube or Google, and we do not access any YouTube account or any data about you or other viewers. To read what was said at a meeting, we give the public video’s YouTube link to a Google AI model, which returns a text transcript of the speech. We do not download, copy or re-host YouTube video or audio, and we do not read YouTube web pages or feeds.
What we store. The video id, channel id, title, publish date and the link back to YouTube, as the citation for a meeting entry; and our own summary points, timestamps and topic tags. The text transcript of a YouTube meeting video is kept in our own cloud storage only while a processing run checks and ranks it to write the summary, and the text is deleted when that pass ends. We do not store video or audio files, thumbnails, comments, or any data about viewers or users.
What we show and share. The meeting date, a link labeled “YouTube” that opens the video on YouTube, and the summary points, each linking to its moment in the video on YouTube. Videos play on YouTube. We do not show the full transcript. We do not sell this data. When you ask a question in Oasive Munis, we send the relevant meeting passages to OpenAI, which answers it for us under a zero-data-retention agreement: OpenAI does not keep the passages or use them for training.
How long we keep it. We refresh the YouTube API data we store, such as titles and publish dates, at least every 30 days. Data we cannot refresh within 30 days, for example because a video was removed or made private, is deleted.
Your Google account. Oasive Munis does not access your Google or YouTube account. You can review and revoke any app’s access to your Google account at any time on the Google security settings page (https://security.google.com/settings/security/permissions).
Contact and deletion requests. To ask us to delete data, or with any question about this section, write to hello@oasive.ai.
Cookies and Tracking Technologies
The Services use cookies, pixels, tags and similar technologies (collectively, “Cookies”) to keep you signed in, remember your preferences, understand how the Services are used, and measure and deliver our advertising. We use three kinds: essential Cookies, which the Services need in order to work and which cannot be switched off; analytics Cookies, which help us measure traffic and usage; and advertising Cookies, which let our advertising partners measure how our ads perform and show our ads to people who have visited our websites. Most browsers let you block or delete Cookies through their settings; blocking essential Cookies will prevent you from signing in.
We load our analytics and advertising Cookies on our websites through Google Tag Manager. The advertising Cookies we use are:
| Technology | What it collects | Why we use it |
|---|---|---|
| Google Ads tag and conversion tracking (Google LLC) | Cookie identifiers (for example, _gcl_au and _gcl_aw), the Google ad click ID, IP address, browser and device information, the pages you visit on our websites, and conversion events such as submitting a request-access or contact form | To measure which Google ads lead to visits and requests, and to show our ads on Google services and partner sites to people who have visited our websites |
| LinkedIn Insight Tag (LinkedIn Corporation) | Cookie identifiers (for example, li_fat_id and bcookie), the LinkedIn ad click ID, IP address, browser and device information, the pages you visit on our websites, and conversion events such as submitting a request-access or contact form | To measure our LinkedIn campaigns, to see aggregated reports about the professional characteristics of our visitors (such as industry and job function) that do not identify individual visitors, and to show our ads on LinkedIn to people who have visited our websites |
| Reddit Pixel (Reddit, Inc.) | Cookie identifiers (for example, _rdt_uuid), the Reddit ad click ID, IP address, browser and device information, the pages you visit on our websites, and conversion events such as submitting a request-access or contact form | To measure our Reddit campaigns and to show our ads on Reddit to people who have visited our websites |
Your choices about advertising Cookies. You can block or delete third-party Cookies in your browser settings. You can change your ad settings with each advertising partner: Google My Ad Center (https://myadcenter.google.com), LinkedIn ad settings (https://www.linkedin.com/help/linkedin/answer/a1342443) and Reddit ad settings (https://support.reddithelp.com/hc/en-us/articles/12731820767764). You can also use the Digital Advertising Alliance’s WebChoices tool (https://optout.aboutads.info). You can turn on a Global Privacy Control signal in a browser or extension that supports it (https://globalprivacycontrol.org); when we receive that signal, we do not load our advertising Cookies in that browser and we treat the signal as a request to opt out of the sale and sharing of your Personal Data. You can also email us as described in the Do Not Sell or Share My Personal Information section below. Opting out does not stop you from seeing ads, but the ads you see will be less relevant to you. Opt-outs that rely on Cookies apply only to the browser and device you use, and stop working if you delete your Cookies.
Each advertising partner describes how it uses this data in its own privacy policy: Google (https://policies.google.com/technologies/partner-sites), LinkedIn (https://www.linkedin.com/legal/privacy-policy) and Reddit (https://www.reddit.com/policies/privacy-policy).
Data Retention and Deletion
This section explains how long we retain your Personal Data and the factors that determine retention periods.
We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account Data, Research and Chat Content | Duration of account + 60 days | To provide the Services and allow a reasonable account recovery period |
| Billing Information | 7 years after account closure | Tax, accounting, and legal compliance requirements |
| Research Email Subscriptions | Until you unsubscribe | To deliver the reports you signed up for |
| Marketing Opt-Out Records | Indefinitely | To honor your opt-out and keep you on our suppression list |
| Support Correspondence | 3 years after resolution | Customer service quality and dispute resolution |
| Security Logs and Data Access Records | 3 years after account closure | Security monitoring, incident investigation, and record-keeping required by our data licenses |
| Aggregated/De-identified Data | Indefinitely | No longer identifiable; used for analytics and product improvement |
You may request deletion of your Personal Data by contacting hello@oasive.ai, except where retention is permitted or required by applicable law. For business customers, retention and deletion of customer data submitted through the Services is governed by your Data Processing Agreement.
Data Security
We use commercially reasonable technical and organizational measures to protect your Personal Data. No system is completely secure, and we cannot guarantee the absolute security of your information. In the event of a data breach, we will notify affected parties as required by applicable law.
For business customers, detailed security commitments—including encryption, access controls, incident response procedures, and sub-processor obligations—are addressed in our customer agreements and Data Processing Agreement. To request security documentation, contact hello@oasive.ai.
Age Requirements
Our Services are designed for business use by adults. We do not knowingly collect or solicit Personal Data from individuals under 18. Business customers are responsible for ensuring their authorized users meet age requirements.
Your Privacy Rights
Where we act as a service provider or processor on behalf of a business customer, that customer controls how your Personal Data is processed. If you are an employee or end user of one of our business customers and wish to exercise your privacy rights regarding data submitted through the Services, please contact your employer or the organization that provides you access. We will assist our business customers in responding to such requests as required by our agreements and applicable law.
The rights below apply to Personal Data we collect and control directly—such as account information, website usage data, and marketing communications.
California Resident Rights
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes. To submit such a request, contact us at hello@oasive.ai.
California Consumer Privacy Act. If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you the right to know what Personal Data we collect, use and disclose; to access, correct and delete your Personal Data; to opt out of the sale or sharing of your Personal Data; and not to be discriminated against for exercising these rights. We do not use or disclose sensitive personal information for purposes that would give you the right to limit its use. To exercise these rights, contact us at hello@oasive.ai. We will verify your request by matching information we already hold about you, and you may use an authorized agent to submit a request on your behalf.
Sale and Sharing. We do not sell Personal Data for money. We share the following categories of Personal Data with our advertising partners (Google, LinkedIn and Reddit) for cross-context behavioral advertising: identifiers, such as cookie identifiers, ad click IDs and IP address; and internet or other electronic network activity information, such as the pages you visit on our websites and the actions you take there. We do not knowingly sell or share the Personal Data of consumers under 16 years of age.
Do Not Sell or Share My Personal Information
You can opt out of the sale or sharing of your Personal Data, including for cross-context behavioral advertising and targeted advertising, in either of these ways.
Global Privacy Control. We honor the Global Privacy Control (“GPC”) signal (https://globalprivacycontrol.org) as a valid request to opt out of the sale and sharing of Personal Data for the browser that sends it. When your browser sends the signal, our websites do not load our advertising Cookies.
Email. Write to hello@oasive.ai with the subject line “Do Not Sell or Share My Personal Information.” We will apply your request to the Personal Data we can associate with you. Because advertising Cookies are set in your browser, also turn on GPC or use the browser and ad settings described in Cookies and Tracking Technologies in each browser you use.
Opting out does not affect your access to the Services.
Nevada Resident Rights
We do not sell Personal Data as Nevada law defines that term (an exchange of covered information for monetary consideration). If you are a resident of Nevada, you can still ask us not to sell your Personal Data in the future by contacting us at hello@oasive.ai with the subject line “Nevada Do Not Sell Request.” To opt out of the sharing of your Personal Data for advertising, see the Do Not Sell or Share My Personal Information section above.
Other U.S. State Privacy Rights
If you are a resident of Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia, you may have additional rights under your state’s privacy laws, including the right to access, correct, delete, and opt out of certain processing of your Personal Data, including targeted advertising. To opt out of targeted advertising, use GPC or the other choices described in the Do Not Sell or Share My Personal Information section above. To exercise your other rights, contact us at hello@oasive.ai.
Changes and Contact Information
We may update this Privacy Policy from time to time and will notify you of material changes by posting a notice on https://www.oasive.ai or sending you an email. Your continued use of the Services after changes are posted means you accept the updated Privacy Policy.
If you have any questions about this Privacy Policy or how we handle your data, contact us at hello@oasive.ai.