OD1 CRM
OD1 CRM · YOUR INFORMATION

Privacy Policy

This policy explains how OD1Studios handles information when people create or use OD1 CRM workspaces, account pages, service-request forms, and client portals.

Effective September 7, 2026Last updated September 7, 2026

The roles behind your workspace

OD1Studios (“OD1,” “we,” “us,” or “our”) develops and operates the OD1 CRM platform. The business that owns a CRM workspace decides what customer information belongs in that workspace and how it is used. For that business-controlled information, the workspace business is generally the controller or business, and OD1 generally acts as its service provider or processor. Contact the workspace business first about records it created or controls.

1. Information we collect

We collect information that you, a workspace business, or an authorized user provides, together with limited technical information needed to operate and secure the service.

  • Account and workspace information: names, business names, email addresses, telephone numbers, workspace addresses, passwords in hashed form, roles, permissions, subscription level, and account preferences.
  • CRM and client-portal content: client contact details, service requests, appointment information, jobs, notes, quotes, invoices, payment status, messages, signatures, form answers, Playbooks, and other records entered into a workspace.
  • Files: documents, images, spreadsheets, and other supported files uploaded by owners, teammates, prospects, or clients.
  • Billing and transaction information: plan, billing cycle, transaction status, invoice amounts, and payment references. When Stripe checkout is used, Stripe processes payment-card details; OD1 does not store complete card numbers or security codes.
  • Support and communications: messages sent through a workspace or to OD1 support, including attachments and delivery details.
  • Technical and security information: IP address, browser and device information, timestamps, authentication events, essential session-cookie data, error records, and security logs.
  • Product telemetry: if enabled for a workspace, limited event names and aggregate counts such as the number of records or storage used. This telemetry is designed not to include the contents of client records, messages, or documents.
  • AI feature information: prompts, selected CRM context, files, and generated responses when an authorized user chooses to use PMAN or another AI-assisted feature.

2. How we collect information

We receive information directly from users; from workspace owners and authorized teammates; through public service-request forms and client portals; automatically from browsers, servers, and essential cookies; and from service providers involved in authentication, hosting, email, notifications, payments, support, or optional integrations.

3. How we use information

  • Provide, personalize, maintain, and secure OD1 CRM and its portals.
  • Create accounts, authenticate users, recover workspaces, and manage permissions.
  • Process service requests, communications, quotes, invoices, payments, files, and notifications as directed by workspace users.
  • Provide customer support, diagnose problems, prevent abuse, and enforce our terms.
  • Administer subscriptions and communicate about service, security, billing, or policy changes.
  • Generate requested AI-assisted results when an authorized user activates an AI feature.
  • Understand aggregate product usage and improve reliability and features.
  • Comply with law and protect users, OD1, workspace businesses, and the public.

4. When information is disclosed

We disclose information only as reasonably needed for the service or as directed by the applicable workspace business. Recipients may include:

  • The workspace owner, authorized teammates, and the client or prospect associated with a portal or request.
  • Infrastructure, database, storage, email, notification, security, support, and analytics providers working for OD1.
  • Stripe or another payment provider selected by the workspace business.
  • AI service providers when an authorized user invokes an AI feature and approves the relevant context.
  • Professional advisers, regulators, law enforcement, courts, or other parties when required by law or reasonably necessary to protect rights and safety.
  • A successor in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

OD1 does not sell personal information or share it for cross-context behavioral advertising. We do not use workspace customer data to advertise to clients.

5. AI-assisted features

AI features are optional. When used, the prompt and the CRM context or file selected for that task may be sent to an AI provider to generate the requested result. Outputs can be inaccurate and should be reviewed before they are applied or shared. Workspace owners should avoid submitting information that is unnecessary for the task and should not use AI features for data they are not authorized to process.

6. Cookies and similar technology

OD1 CRM uses essential session cookies and local browser storage for sign-in, security, preferences, update recovery, and core application functions. We do not use these technologies to serve third-party behavioral advertising. Disabling essential storage may prevent the CRM or portal from working correctly.

7. Retention and deletion

Workspace content is retained while the workspace is active and as needed to provide the service. Owners may delete records and export available workspace data. Some information may remain temporarily in backups, security records, transaction records, or legal archives until the applicable retention period expires. We may retain information longer when required for fraud prevention, dispute resolution, tax or accounting duties, enforcement, or other legal obligations.

When a workspace business controls your record, requests to access, correct, or delete that record should normally be sent to that business. OD1 will assist the business where required and technically feasible.

8. Your privacy choices and rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, or deletion of personal information; receive a portable copy; object to or restrict certain processing; withdraw consent; or appeal a decision. You will not be discriminated against for exercising an applicable privacy right.

To make a request about an OD1 account or OD1-controlled information, email support@onlyday1.com. We may need to verify your identity and authority. For information controlled by a workspace business, contact that business through its normal contact method or client portal. OD1 does not sell personal information, so no sale opt-out is required for our current practices.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, encrypted connections, restricted file storage, hashed passwords, and protected server sessions. No service can guarantee absolute security. Keep credentials confidential, use a unique password, and notify us promptly if you suspect unauthorized access.

10. Sensitive and regulated information

OD1 CRM is a general business-operations service. Unless OD1 has agreed otherwise in writing, do not use it to store full payment-card data, medical records subject to specialized health-privacy laws, biometric identifiers, government identification numbers, or other highly regulated information. Workspace businesses are responsible for determining whether their use of the CRM meets industry-specific obligations.

11. Children

OD1 CRM is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Contact us if you believe a child provided information contrary to this policy.

12. International processing

Information may be processed in the United States and other locations where OD1 or its service providers operate. Where required, we use recognized safeguards for transfers across jurisdictions.

13. Changes to this policy

We may update this policy to reflect product, legal, or operational changes. We will revise the “Last updated” date and provide additional notice when a material change requires it. Continued use after an update is subject to the revised policy, as permitted by law.

14. Contact us

Questions or privacy requests can be sent to support@onlyday1.com.

OD1 CRM is developed by OD1Studios.