Privacy Policy
Effective August 22, 2026
This policy describes how Ouray ("we", "us") handles information in connection with the Ouray platform, its web applications, and its integrations with third-party services such as Microsoft Teams, Microsoft Outlook, and email providers (together, the "Services").
Information we collect
- Account information — name, email address or phone number, and authentication identifiers used to sign in to the Services.
- Customer content — business data our customers store in or send through the Services, such as contacts, invoices, documents, messages, and email. When a customer connects a third-party account (for example a Microsoft or Google account), we access only the data needed to provide the feature the customer enabled, under the permissions that customer granted.
- Operational data — logs and diagnostics needed to run and secure the Services.
How we use information
We use information only to provide, secure, and improve the Services for the customer that supplied it. We do not sell personal information, and we do not use customer content for advertising or to train machine-learning models.
Tenancy and isolation
Ouray is a multitenant platform. Each customer tenant's data is stored in its own database under its own encryption keys, and is never shared across tenants.
Subprocessors
We host the Services on infrastructure providers, including Google Cloud and Cloudflare, and interoperate with providers our customers connect (for example Microsoft 365). These providers process data only as needed to deliver the Services.
Retention and deletion
Customer content is retained while the customer's account is active, and deleted or returned when the relationship ends or on the customer's verified request, subject to legal obligations.
Security
Data is encrypted in transit and at rest. Access to production systems is restricted and audited.
Contact
Questions or requests about this policy: support@ouray.ai.
Changes
We will post any changes to this policy on this page with an updated effective date.