Privacy Policy

The short version

Oko searches public sources for one person: you. We search from the email addresses and phone numbers you prove are yours, and from your name.
Your report is encrypted with a key that belongs to your account. Only you can read it in the portal. If your organization pays for your report, it sees a short summary of it, never your details or findings.
We never put findings in email. Reports are shown only after you sign in.
Screenshots and page copies behind your report are deleted 90 days after the report is delivered. The report itself stays until you delete it or your account.
You can delete any report, or your whole account, yourself at any time.
We don’t sell your information, use it for advertising, or put tracking cookies or analytics on our site or portal.

Who we are

Oko Security LLC, which runs Oko Intelligence (“Oko”, “we”, “us”), runs this website and the Oko portal, where people sign up, read their reports and manage their accounts. This policy covers both. Organizations that buy reports for their people may also have a separate agreement with us; where that agreement says something different about their members’ data, it applies to that organization.

Questions about this policy go to hello@okoint.com.

What we collect

When you request early access

The form on our access page asks for your name, email address, whether you’re an organization or an individual, your organization and sector, roughly how many people you’d cover, and anything else you want to tell us. We email that request to our own inbox so we can reply. We don’t store it anywhere else.

When you create an account

Your email address, which is also how you sign in. We email you a sign-in link; there is no password.
Your organization’s name, if you sign up to buy reports for a team.
If your organization invited you, the name and work email your administrator entered on the invitation.
When you agreed to search only for yourself and to these terms, and which version of them you saw.

What you add to be searched

Contact details: more email addresses and phone numbers. You confirm each email by a link and each phone by a code sent by text message, so we only search details that are yours. A confirmed email or phone can belong to only one Oko account at a time.
Past names and usernames you choose to give us. We never search for these directly. They only help us tell whether something we already found from your contact details is really you.
Your name. For an individual account, this is the cardholder name from your first payment. For an invited member, it’s the name on the invitation. We use it only to look you up on people-search sites.

When you pay

Payments are handled by Stripe on Stripe’s own checkout page. We never see or store your card number. We receive and keep the cardholder name, a Stripe customer reference, and a record of the credits bought.

What we find about you

A report is made from public sources (see the next section). For each result we keep what was found, where and when, a copy of the page or response it came from, and for web pages a screenshot. We also keep the links between results that show how one detail leads to another, and which fixes you have marked done.

When you use the portal

Sign-in sessions. Each time you sign in we record the session, the IP address it came from and your browser’s user agent. A session lasts 14 days.
Free check record. To keep the free exposure check to one per email address, we keep a one-way, keyed fingerprint of each email that has used it, taken from the address without any “+” tag (and, for Gmail, without dots). The fingerprint can’t be turned back into the address.
Usage and cost. For each report we record which searches ran, how much each cost us, and how long it took. We use this to price the service and keep it running.
Error logs. Our systems log errors by type. We take care not to write your details or findings into logs.

How a report is made

Reports are made by software, not people. No one at Oko reads your report before you do. An automated agent, using AI models, decides which searches to run, but every search passes through a set of rules enforced in code:

Searches start only from contact details you have confirmed, or from results linked back to them with good confidence.
Your name is used only on people-search sites.
Past names and usernames you give us are never searched.
Nothing more than three steps away from your contact details is collected.
We read only free, public pages. We never buy reports, log in to any site, or contact anyone.

Making a report never contacts anyone. If you have the removal plan, opt-out requests are sent separately, as described in The removal plan.

The sources a report can use are:

People-search sites, found through web search and read from their public listing pages.
Account checks: whether your email address is registered on popular sites.
Data breaches: the names, dates and kinds of data in breaches that include your email, from Have I Been Pwned. We never retrieve leaked passwords or breach records.
Public profiles on Gravatar, GitHub and Mastodon, and sites where your usernames are in use.
Web search results for your contact details and the results linked to them.
Archived copies of pages and profiles already found, from the Internet Archive’s public index.

AI models read the pages and results we collect, pick out the details that relate to you, and write the report. The report is then checked in code: a finding that doesn’t point to a stored source is dropped.

When a report is opened, we send a notice to every email address it searches from, saying a scan was started for that address. This is so that you’d know if someone else with access to your inbox started one.

Information about other people

Searching the web for you means reading some pages about other people, such as a results page full of people who share your name. Those pages are read by our software and then thrown away. They are never stored. A people-search listing is kept only if it contains one of your confirmed contact details, or matches your name and a place already linked to you.

A listing that is about you may still name other people, such as relatives or people who lived at the same address, because that is what the site publishes. Those names can appear in your report as part of that listing. If a page shows details about a child, the relatives from that page are left out of your report, and the report links only to the page’s own removal option.

How we use information

To run the searches you ask for and show you the report.
To confirm your contact details, sign you in, and warn you about new sign-ins.
To take payment and keep track of credits.
If you have the removal plan, to send opt-out and deletion requests to people-search sites for you.
To email you about your account and reports (see Emails we send).
To show your organization the limited information described below.
To measure what reports cost and which sources are working, and to fix problems.
To prevent abuse, such as someone trying to search for another person, and to meet legal obligations.

We don’t sell or rent personal information, share it for advertising, or build profiles of you for anyone else. We don’t use your contact details, findings or reports to train AI models. We test the quality of our searches only on people who have agreed in writing to take part.

Who can see your report

You. Only the person the report is about can read it, after signing in.

Your organization, if it paid for your report. Its administrators can see the name and email on your invitation, which kind of report it covers, whether you’ve accepted, and whether your report is finished. They also see a short summary of your latest report: your exposure level, which people-search sites list you, how many other sources we found you in, how many ways a stranger could reach your home address, pictures of your home, your family, your personal phone and your daily routine, how few steps the shortest way takes, and how many of the recommended fixes you’ve done. If you accepted your invitation when we said your organization sees only whether you finished, it doesn’t see this summary. Once at least five people in the organization have a finished report, administrators also see totals across the group, such as how many people have a home address that is easy to reach. The totals update only once five more people have finished, so one report finishing, or one recheck, doesn’t change them. They never see your report, your findings, your contact details or your past names, and they can’t unlock, open or download your report.

Oko staff. Staff pages show costs and which sources are working, and don’t name any member. The portal has no way for staff to open a member’s report. Our systems do hold the keys needed to decrypt reports, so that they can be shown to you; access to those systems is limited to the few people who run them.

Legal requests. We may disclose information if the law requires it, such as in response to a valid court order, or to protect someone from serious harm. Where we’re allowed to, we’ll tell you first.

Business transfers. If Oko is merged, acquired or sells its assets, information may pass to the new owner, who must keep to this policy for the information it receives.

We use these companies to run Oko. Each one receives only what it needs for its part.

Cloudflare: hosts the website and portal, runs our software, stores encrypted screenshots and page copies, and sends our emails.
Cloudflare Workers AI, and the providers of the models it runs, or Anthropic: the AI models that plan searches, read pages and write reports. They receive the pages and results collected for your report.
Neon: our database.
Twilio: sends phone confirmation codes.
Stripe: takes payments.
Brave Search: web searches. It receives search queries that can contain your name, email address or phone number.
Have I Been Pwned: breach lookups. It receives your email address.
A residential proxy provider: routes our requests to people-search sites.

The sites we search see the searches. To check a people-search site, a profile site or whether your email is registered somewhere, we send that site the detail we’re checking, just as a visitor would. Those sites, and GitHub, Gravatar, Mastodon servers and the Internet Archive, are not our service providers. Their own privacy policies apply to what they receive.

The removal plan

If you have the removal plan, Oko sends opt-out and deletion requests to people-search sites for you, as your authorized agent. You agree to this on its own before you pay. You can withdraw it on your account page, and we send no new requests until you agree again. We send requests only for listings about you.

What we send to the sites

For each listing, we send the site only:

the link to the listing;
your name, as the listing shows it;
your city and state, as the listing shows them;
your Oko removal address.

We send nothing else about you. A site that asks for more, such as a phone call, a copy of your ID or details the listing doesn’t show, isn’t sent a request: your report gives you the steps to do it yourself. We send these details so the site can find the listing and act on the request. Each site’s own privacy policy applies to what it receives.

Your removal address

Each plan has its own Oko email address for removal requests, so the sites get that address instead of yours. Their replies and confirmations go to it, and we use them to follow your requests through. After your plan ends, the address keeps receiving mail from the sites for 60 days, then stops.

Monthly scans

Each month we search people-search sites again for listings about you, and reopen the listings we sent requests for to see whether they came down. A scan searches your name in the states you’re linked to (from your listings, your reports and your phone numbers’ area codes), and your confirmed email addresses and phone numbers. We never search your past names. Pages about other people are read and discarded. Scan results are kept 90 days, then deleted.

Records of requests

We keep proof of each request we send for you, such as a screenshot or the email itself. We keep it while your plan is live and for 12 months after it ends, then delete it. The record that a request was made stays: the site, the dates, the method and the result. If you delete your account, we delete all of it at once.

Emails we send

Sign-in links, and a notice each time someone signs in to your account.
Links to confirm a new email address, and organization invitations.
A notice to each email address a report searches from, when the report starts.
A note when your report is ready. It contains a link, never findings.
A reminder 90 days after a report, when a recheck is due.
If you have the removal plan, a reminder 30 days before it renews.

We don’t send marketing email.

How long we keep it

Screenshots and page copies: deleted 90 days after the report they support is delivered. For a report that failed, 90 days after it was started.
Reports, the links between results, and fixes marked done: until you delete the report or your account. We keep them so a recheck can show what changed.
Contact details and past names: until you remove them or delete your account.
Sign-in sessions: deleted after they expire, 14 days after sign-in. Sign-in links expire after 15 minutes and are deleted within a day.
Credit and payment records: kept as business records, including after account deletion (see below).
Monthly scan results: deleted 90 days after the scan. Deleting your account deletes them at once.
Records of removal requests: proof of each request is kept while your plan is live and for 12 months after it ends, then deleted. The record that a request was made (site, dates, method and result) stays. Deleting your account deletes everything at once.
Free check fingerprints: kept so each email gets one free check, including after account deletion.
Early-access requests: in our inbox until we no longer need them to reply or follow up.

Deleting a report or your account

Delete a report from the report’s page once it’s finished. We delete its screenshots and page copies first, then the report, the links between results, your fixes and every stored result. We keep a short record that the report existed: when it ran, which kind it was, what it cost, and the overall exposure level and risk flags (such as whether a home address was easy to reach) that feed your organization’s totals.

Delete your account from your account page. It takes effect at once and can’t be undone. We delete the screenshots and page copies for all your reports, then your account, contact details, past names, reports, stored results, the encryption key for your reports, and your sign-in sessions. Afterwards:

The credit records stay, because they are part of an account’s billing history. They don’t contain your details.
If an organization invited you, the invitation stays in its count but your name and email are removed from it.
For an individual account, the Stripe customer reference and cardholder name are removed from our records. Stripe keeps its own payment records under its own policy.
The free check fingerprint stays, so a deleted account doesn’t get a second free check.
Copies in our database provider’s short-term backups expire on that provider’s schedule.

If you are the only administrator of an organization that has members, add another administrator before deleting your account.

Security

Contact details, past names, reports and stored results are encrypted with a key unique to your account.
There are no passwords to steal. You sign in by a single-use link, and we email you after every sign-in.
You can sign out of every device at once from your account page.
Screenshots and page copies are stored encrypted and are shown only to you, after you sign in.

No system is perfectly secure. If we learn of a breach that affects your information, we’ll tell you as the law requires.

Your choices and rights

See your information: your reports, contact details and past names are all in the portal.
Correct it: add or remove contact details and past names at any time.
Delete it: delete a report or your whole account yourself, as described above.
Stop emails: emails about sign-in and scans are part of keeping your account safe. Deleting your account stops them all.

Depending on where you live, you may have further rights, such as to get a copy of your information or to appeal a decision we make about a request. Email hello@okoint.com from the address on your account. We may need to confirm it’s you before acting, and we won’t treat you differently for asking.

If you’re not an Oko customer and think an Oko member’s report contains information about you, email us. Reports show only what public sites already publish, so the quickest fix is usually the site’s own opt-out.

Cookies

This website sets no cookies. The portal sets one cookie, which keeps you signed in. It is marked secure and can’t be read by scripts. We use no analytics, advertising or tracking cookies.

Children

Oko is for adults. You must be 18 or older to create an account or be invited. We don’t knowingly collect information from children, and our searches don’t pursue information about children.

Changes to this policy

If we change how we handle your information, we’ll update this page and its date. If the change is significant, we’ll email account holders before it takes effect.

Contact us

Oko Security LLC
1500 N Grant St, Ste N
Denver, CO 80203
hello@okoint.com