Privacy Policy

Last updated: March 12, 2026

1. Introduction

O-1 Assist (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our petition preparation service at o1assist.com (“the Service”).

2. Information We Collect

Account Information

When you create an account, we collect your email address and password (or Google OAuth credentials). During onboarding, we collect your full legal name, field of expertise, current job title, LinkedIn URL, location, and visa status.

Documents and Evidence

You may upload documents including award certificates, press articles, employment letters, publications, and other evidence. We extract text from these documents for AI analysis. Original files are stored securely.

Payment Information

Payment is processed by Stripe. We do not store credit card numbers or bank account details. We receive confirmation of payment status from Stripe along with a customer identifier.

Usage Data

We collect anonymized usage analytics through Vercel Analytics, including page views and general interaction patterns. This data does not include personal information or document content.

3. How We Use Your Information

We use your information to:

  • Provide the petition preparation service, including document classification and AI-powered assessments
  • Generate petition materials (support letters, exhibit packages, recommendation templates)
  • Authenticate your account and maintain session security
  • Process your payment
  • Send transactional emails related to your account
  • Improve the Service based on anonymized usage patterns

4. AI Processing

Your documents and evidence are processed by third-party AI services (Google Gemini) to provide document classification, evidence strength assessments, and petition material generation. Document content is sent to these services only for the purpose of providing the Service to you. We do not use your content to train AI models. Please review Google's AI data processing terms for additional information.

5. Data Storage and Security

Your data is stored in Supabase (PostgreSQL database and file storage) with row-level security enabled, meaning each user can only access their own data. All data is encrypted in transit (TLS) and at rest. Access to production databases is restricted and logged.

6. Data Sharing

We do not sell your personal information. We share data only with the following service providers, solely to operate the Service:

  • Supabase — authentication, database, and file storage
  • Stripe — payment processing
  • Google (Gemini AI) — document analysis and content generation
  • Vercel — application hosting and anonymized analytics
  • Inngest — background job processing for document analysis

We may also disclose information if required by law or to protect the rights, safety, or property of O-1 Assist or its users.

7. Data Retention

We retain your account data and documents for as long as your account is active. If you delete your account, we will permanently delete all associated data, including uploaded documents, assessments, and generated materials, within 30 days. Payment records may be retained as required for tax and legal compliance.

8. Your Rights

You have the right to:

  • Access your personal data stored in the Service
  • Correct inaccurate information in your account
  • Delete your account and all associated data
  • Export your data, including uploaded documents and generated materials
  • Withdraw consent for data processing by deleting your account

To exercise any of these rights, contact us at support@o1assist.com.

9. Cookies

We use essential cookies for authentication and session management. We use Vercel Analytics for anonymized usage data, which does not use cookies for tracking. We do not use advertising cookies or third-party tracking cookies.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice on the Service. The “Last updated” date at the top reflects the most recent revision.

13. Contact

For questions about this Privacy Policy or your data, contact us at support@o1assist.com.