How o10 collects, uses, protects, and retains personal data on o10.io and in the inference spend control plane — including shadow mode, enforce mode, ledgers, and KYI governance.
This policy covers o10.io (the marketing site), the o10 control plane product (routing, shadow mode, enforce mode, evals, KYI, and ledger), and related sales or support communications. It explains what we collect, why, how long we keep it, and your choices.
No. o10 is an inference spend control plane — not a foundation model provider. We route and govern traffic above your gateways; we do not use customer prompts or completions to train third-party or o10-owned LLMs. Provider training practices are governed by your gateway and model provider terms.
No. o10 does not sell personal data or share it for cross-context behavioral advertising. We process data to operate the Service, meet legal obligations, improve security, and — with your agreement — deliver the control plane you configure.
Who we are, what this policy applies to, and how it relates to our Terms of Service.
Shen Pandi and the o10 team ("o10," "we," "us," or "our") respect your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal data when you access https://o10.io and related pages (the "Site"), use the o10 inference spend control plane (the "Service"), or interact with us for sales, support, or governance engagements.
Capitalized terms not defined here have the meanings in our Terms of Service. By using the Site or Service, you acknowledge this Privacy Policy. If you do not agree, do not use the Site or Service.
We may update this policy from time to time. Material changes to how we process personal data in the Service will be communicated to registered account holders by email or in-product notice where practicable. The 'Last updated' date at the top reflects the latest revision. Continued use after changes constitutes acceptance.
Personal data we collect from the Site, the Service, and your communications with us.
Personal data means information that identifies you or could reasonably be linked to you. We collect the categories below depending on how you interact with o10.
The public Site is largely static; collection is limited.
o10.io publishes educational content, calculators, and demos. You may browse without an account. Interactive demos (for example, the spread calculator and Book widget) run client-side in your browser unless you submit data to us separately.
When PUBLIC_GA_MEASUREMENT_ID is configured, we use Google Analytics 4 via googletagmanager.com for aggregate traffic measurement. GA4 may receive page URL, referrer, device category, and coarse geography. We configure IP anonymization where supported.
We do not operate an advertising network on o10.io and do not use Site analytics for cross-site tracking or sale of visitor lists.
What we process when o10 routes, shadows, or enforces inference spend.
The Service sits above your AI gateways and cloud accounts. It selects models and venues per your policies, records economics on every call, and produces CFO-grade ledgers and KYI governance outputs.
To deliver the Service, o10 must process routing metadata and — depending on your configuration — limited prompt or completion excerpts for eval replay and quality-floor verification. You control what workloads are in scope, which eval suites run, and whether enforce mode is enabled.
Shadow mode mirrors traffic without changing production responses unless you configure otherwise. Enforce mode applies routing in the request path. Both modes write to the immutable ledger you use for audit and board reporting.
You are responsible for ensuring you have lawful basis and any required notices to end users whose inference traffic flows through o10, including when you connect production systems.
o10 is a control plane, not a model trainer.
o10 does not use customer prompts, completions, embeddings, or other User Content to train foundation models for o10 or third parties. Our business is spend enforcement and governance — not data harvesting for model improvement.
Upstream model providers (OpenAI, Anthropic, Google, Amazon Bedrock, unified inference gateway, OpenRouter, and others) have their own data practices. You must review and comply with applicable provider terms. o10 routes traffic; it does not override provider retention or training policies except where your configured policies block a route.
How we use cookies on the Site and Service.
We use cookies and similar technologies for strictly necessary functions (security, session integrity), preferences (where offered), and analytics (GA4 on the Site).
You can control cookies through browser settings. Disabling cookies may limit Site functionality. For GA4 opt-out, see Google's tools at https://tools.google.com/dlpage/gaoptout and https://policies.google.com/privacy.
Purposes for which o10 processes information.
We use personal data only as described here or as disclosed when you provide it.
We do not sell personal data. We disclose it only as follows.
Service providers: cloud hosting provider, cloud infrastructure, analytics, payment processors, email delivery, and support tools — bound by contract to use data only for our instructions.
Your gateways and model providers: when you route inference through o10, necessary request metadata flows to the venues you authorize, under your agreements with those providers.
Professional advisors: lawyers, accountants, and auditors under confidentiality obligations.
Corporate transactions: merger, acquisition, financing, or sale of assets — with notice where required by law.
Legal and safety: when required by law or to protect rights, safety, and integrity of the Service.
With your consent or at your direction: for example, board packs or audit exports you explicitly request.
How long we keep information.
Immutable ledger entries and KYI audit trails may be retained for the life of your agreement plus periods required for finance, tax, and regulatory compliance — because customers rely on them for board and regulator assurance.
Shadow-mode baselines used for gainshare verification are retained per your contract and our data schedule.
Site analytics are retained per GA4 configuration and our internal logs policy.
When retention ends, we delete or de-identify data unless law requires longer storage.
Measures we use to protect information.
We implement administrative, technical, and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; you use the Service at your own risk for residual threats.
You are responsible for securing credentials, API keys, and access to your o10 organization. Notify us promptly at security@o10.io if you suspect unauthorized access.
Access, correction, deletion, and regional privacy rights.
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, port data, or withdraw consent. Email privacy@o10.io to exercise rights. We may verify your identity before responding.
Marketing emails include an unsubscribe link. Transactional and security messages may still be sent.
If you are in the EEA, UK, or similar jurisdictions, you may lodge a complaint with your supervisory authority. Our legal bases include contract performance, legitimate interests (security, product improvement), consent where required, and legal obligation.
California residents: we do not sell personal information as defined by the CCPA/CPRA. See our Terms for additional U.S. state disclosures.
Where data is processed.
o10 may process data in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.
The Service is not directed to children.
The Site and Service are intended for business and professional users. They are not directed to individuals under 16 (or the age required in your jurisdiction). We do not knowingly collect children's personal data. Contact privacy@o10.io if you believe we have.
Privacy inquiries and data subject requests.
Email: privacy@o10.io
Legal and contractual notices: legal@o10.io
Operator: Shen Pandi · o10.io · o10
No. o10 does not sell personal data or share it for cross-context behavioral advertising. We process data to operate the inference spend control plane, produce ledgers and KYI outputs you configure, and improve security — not to monetize visitor or customer lists.
No. o10 is a control plane above gateways — not a foundation model provider. We do not use your prompts or completions to train LLMs. Your upstream gateway and model provider terms govern their training and retention practices.
Routing metadata on every call: model, venue, token economics, policy applied, eval outcome, and ledger fields needed for CFO and board reporting. Prompt or completion content is processed only to the extent you configure eval replay or debugging features.
Mostly aggregate analytics if GA4 is enabled — page views, referrers, device type, coarse geography. Demos run client-side. No account is required to read content.
Email privacy@o10.io from your registered work address. Account deletion may be limited where ledger records must be retained for compliance, tax, or active contract disputes. We will explain what can be deleted versus what must be archived.
For the Service, o10 acts as a processor or controller depending on your deployment and contract. Enterprise customers receive a Data Processing Agreement specifying roles, subprocessors, and retention. Contact legal@o10.io for a DPA.
The Site may use analytics cookies when GA4 is configured. The Service uses strictly necessary session and security cookies. See the Cookies section above for categories and controls.
Use browser Do Not Track, block googletagmanager.com, install Google's GA opt-out extension, or decline non-essential cookies where a consent banner is shown.