1. Who handles your information
o3o operates this service and determines how information is used for it. Contact hi@o3o.ai for privacy questions or requests. If you already have a direct contact with o3o, you can also use that channel.
2. Information processed and why
Conversations: messages you send, AI replies and session information are processed to provide and restore conversations and perform safety checks. Optional memory extraction processes conversation content to propose memories; only memories you confirm become saved memories.
Guest and technical data: random guest identifiers, hashed credentials, timestamps, session status, request identifiers and usage records support access control, reliability, quota enforcement and abuse prevention. Infrastructure providers may process IP addresses, request headers and connection or security records when delivering the site.
If you contact us, we process the information you choose to provide to respond and handle your request. Please avoid sending sensitive personal details or other people’s private information.
3. Test payments
Waffo hosts the test checkout and processes the email, billing information and test payment details you enter there. o3o sends a random checkout reference and selected plan; it does not send conversations or memories. o3o stores hashed browser credentials, order references, plan, status and dates, not card numbers, CVC, billing addresses or buyer email. Use synthetic information for testing.
The necessary __Host-o3o_billing_test cookie is Secure, HttpOnly and SameSite=Lax, with a 30-day lifetime. It links test orders to this browser and is separate from your chat identity. Local test order records and processed payment notifications are scheduled for deletion after 30 days; pending notifications may remain until resolved. Chat deletion does not delete these separate test records. Contact hi@o3o.ai for requests; deleting local records does not delete Waffo records.
4. Cookies and browser storage
The necessary __Host-o3o_guest cookie identifies your guest. It is Secure, HttpOnly and SameSite=Strict and currently lasts up to 7 days per issue. It is not an advertising identifier. Removing it does not delete server-side records and may prevent you from accessing them.
Local storage saves your language and Enter-key preference until you clear it. The application does not include advertising trackers or third-party behavioural analytics. Infrastructure security services may use their own necessary mechanisms.
5. AI and infrastructure providers
The current AI provider is DeepSeek. The server sends your messages and necessary conversation history for safety classification and replies. Relevant confirmed memories may be included in reply requests. A memory-suggestion request sends the conversation content needed for extraction.
Cloudflare handles delivery and security at the site edge. The application and database run on a VPS hosted by Contabo. These providers process the data needed for their respective services. HTTPS and server-side content encryption are used; conversations are not end-to-end encrypted, and the application must decrypt relevant content to serve you.
We do not promise that DeepSeek retains no API data or excludes it from training: the applicable API retention and training arrangements have not been verified for this test. Deleting data in o3o does not automatically delete any copies held by a provider. Please use non-sensitive content during testing.
6. Retention and deletion
Current content expiry periods are: chat messages and recent context, 7 days; unconfirmed memory suggestions, 1 day; confirmed memories, 7 days. Expired content is excluded from use; scheduled cleanup removes or clears it. Updating a memory can set a new expiry.
“Delete all data and guest identity” removes the current guest’s conversations, memories and credentials from the active database. Forgetting a memory invalidates its use in future context but does not itself erase old conversation text. Ending a chat or closing the browser does not delete data.
Backups are scheduled to expire within 7 days. Separate deletion receipts are retained so a restore can reapply deletions before data becomes accessible. Limited deletion, security, session and usage metadata can remain beyond content expiry; content expiry is not a promise that every technical record is erased. Hashed call records are retained for quota and duplicate-request protection and are not chat text.
7. Uses, sharing and international processing
The application has no advertising or data-sale feature and does not run a model-training pipeline on your conversations. This does not describe or guarantee a model provider’s practices. Information is processed to operate and protect the service, provide requested features and respond to your requests; lawful disclosure may also be necessary to comply with legal obligations or protect rights and safety.
Providers and servers may process information outside your country. Exact processing locations and applicable transfer arrangements depend on the provider and account configuration; they have not been fully verified for this public preview. We do not promise storage only in your home country.
Where applicable data protection law requires a legal basis, requested service delivery is based on performance of the service arrangement, essential security and reliability on legitimate interests, and required legal disclosures on legal obligations. Any additional use requiring consent will require a separate choice; viewing this policy is not blanket consent to new uses.
8. Your choices and rights
You can view the current conversation, manage memories and delete the current guest’s data in the interface. Depending on applicable law, you may also request access, correction, deletion, a portable copy, restriction or objection to processing, withdraw consent where processing relies on it, and complain to a competent privacy regulator.
Contact us to make a request. We may need proportionate verification to avoid exposing someone else’s data. Do not email your access password or browser cookie. Guest credentials are not a recoverable account, so losing them may limit our ability to identify your records.
9. Adults, security and changes
The service is for adults aged 18 or older. If you believe a child’s information was submitted, contact us so we can investigate and take appropriate action.
We use access controls, HTTPS and encryption of stored conversation and memory content. No system is perfectly secure. This policy is updated as the service changes; the date at the top identifies this version. Material new uses will be explained before they begin where required.