Legal
Privacy policy.
Last updated: July 2026
Information we collect
We collect the information you give us directly — your name, work email, and company when you create a workspace — plus the configuration of the workflows you build. Usage analytics are collected in aggregate to improve the product.
How we use your information
Your data is used to operate the service, route your workflows, and notify you when something needs attention. We never sell personal information and never use your customer data to train models.
Data retention and security
Data is encrypted in transit and at rest. Workflow run logs are retained for 90 days on Starter and Growth plans, and per your policy on Enterprise. You can export or delete your workspace data at any time.
Third-party services
When you connect an integration, we access only the scopes you grant and store credentials in an isolated vault. Disconnecting an integration revokes our access immediately.
Your rights
You may access, correct, export, or delete your personal data at any time from workspace settings. If you are subject to GDPR or CCPA, the same controls satisfy your access and deletion rights.
Contact
Questions about this policy? Write to privacy@oscar.com and we will respond within two business days.