Effective October 4, 2026

Privacy Policy

Osmo Budget is a collaborative production budgeting tool operated by Osmo (osmo.inc), San Francisco, California. This policy explains what we collect, why, and what you can do about it. It is written for a pilot program; it will be updated before general availability.

What we collect

• Account information. When you sign in with Google we receive your name, email address, and profile picture from Google. When you sign in with email we store your email address and a hashed password. We do not receive or store your Google password.
• Budget data. Everything you and your team enter: budgets, line items, rates, logs, comments, and notes. This is your data. We store it so your team can work on it together. When you confirm a Hot Budget import, we also preserve the original workbook privately with that budget for native file handoff. It can be downloaded by people who can view the budget, and is deleted when the budget is deleted.
• Usage records. An activity log inside each budget records who changed what and when, so your team can see it. We also collect first-party operational records: pages visited, named product actions, request status and timing, sign-in outcomes, connection status, browser errors, browser/OS family, and a random per-tab session ID. Signed-in records are associated with your account ID. We do not record keystrokes, form values, session video, or request and response bodies in these operational records. Error messages are filtered to reduce sensitive content. Infrastructure providers also keep ordinary server logs for security and debugging.
• Cookies. A session cookie keeps you signed in and a preference cookie remembers which company you last opened. A temporary cookie links a sign-in attempt to its outcome, and browser session storage holds a random diagnostics session ID. We do not use advertising cookies or third-party advertising analytics.

How we use it

To run the product: authenticate you, show your team the same live budget, enforce who can see and edit what, and send you the emails you ask for (sign-in links, invitations). We do not sell personal information, and we do not use your budget data to train models or for advertising.

Who can see your data

People in your company who have been given access to a budget, according to the role they were given (owner, editor, department, viewer). Osmo staff may access data when needed to operate the service or when you ask for help. Our infrastructure providers process data on our behalf: Supabase (database and authentication, hosted in the United States), Cloudflare (application hosting), Resend (transactional email), and Google (sign-in, if you choose it).

Retention and deletion

Operational events are automatically deleted after 90 days and are available only to authorized Osmo operators. Budget audit history is separate. We keep your budget data for as long as your account or company exists. Email will@osmo.inc to export or delete your data, or to close your account; we will do so within 30 days.

Security

Data is encrypted in transit and at rest. Access to every row in the database is enforced by row-level security tied to your account and role, not only by the interface.

Changes and contact

We will post updates to this page and note the effective date at the top. Questions: will@osmo.inc.