Customer information
Privacy notice
Last updated September 24, 2026
What OASAS collects
We collect account identifiers, contact and organization details, billing country, assessment answers and scores, generated analyses, purchase, entitlement and cancellation-request records, and basic operational logs. OASAS does not receive or store full payment-card details; card entry is handled on SUMIT's hosted payment page.
How the information is used
Information is used to authenticate you, deliver and improve the assessment, generate and email reports, provide progress comparisons and book access, process and reconcile purchases, prevent abuse, respond to support requests, and meet accounting or legal obligations.
Service providers
OASAS may use Supabase for authentication, Neon for application data, SUMIT for payment processing, Resend for email delivery, an SMS provider configured through Supabase, Google when you choose Google sign-in, OpenAI for report generation, and LeadConnector for permitted customer follow-up. Each provider processes only the information needed for its role and is subject to its own terms.
Account privacy
New reports are private to the signed-in account. Previously issued legacy report links may remain accessible to anyone holding the link until revoked or expired. Do not forward private account credentials or legacy links. Organization engagements require a separate written sharing design; individual answers are not automatically shared with an employer or sponsor.
Retention and security
We use access controls, server-side authorization, encrypted provider connections, and minimal payment records. Assessment and purchase records are retained while needed to provide the service and for legitimate legal, security, and accounting purposes. No internet service can promise absolute security.
Your choices
You can decline marketing follow-up, use the service without a marketing subscription, and contact support to request access, correction, export, deletion, or restriction where applicable. Some purchase records may need to be retained for legal or accounting reasons. Identity verification may be required before a privacy request is completed.
Important scope
OASAS is an organizational screening and conversation tool, not a medical service or diagnosis. Do not enter unnecessary sensitive personal information into free-text support communications.