Privacy Policy

What we collect

Account and contact details you provide, and the ad, analytics and measurement data from the platforms you explicitly connect via OAuth.

We collect only what is needed to set up, run and report on campaigns you run.

How we use it

To draft, launch through scoped authorization and optimize campaigns, run policy checks, and generate the reports you ask for.

We do not sell your data.

Google & Meta data

Access is scoped to the exact assets you connect and governed by Google API Services User Data Policy and Meta Platform Terms. See our Google API Disclosure for exact Google scopes, purpose, storage, sharing, retention, deletion, and limited-use details.

For Google services, Ovaideu may process Google Ads, GA4, Search Console, Tag Manager, Business Profile, Merchant Center, OAuth profile, and optional Calendar data only for the workspace features you authorize. For Meta services, Ovaideu may process ad account, Page, Instagram, campaign, creative, lead form, comment, catalog, and conversion data only for connected user-facing features.

AI & machine learning

Ovaideu does not use Google user data — or any connected Google Ads, Google Analytics (GA4), Search Console, Tag Manager, Business Profile, Merchant Center, Google Calendar, or Google Workspace data — to train, fine-tune or develop generalized AI or machine-learning models.

When AI features are used, connected Google data is processed only to produce the user-facing recommendation, report, diagnostic, draft, or workflow the user requested for that workspace. Third-party AI providers are not permitted to use Google user data from Ovaideu to train their generalized models.

Storage, sharing & security

OAuth tokens are stored securely and never shared. Access is user-bound, workspace-bound, role-bound, and can be revoked at any time. Actions are logged and reviewable.

We do not sell Google or Meta user data. We share connected-platform data only with infrastructure, authentication, email, payment, monitoring, support, or security providers as needed to operate Ovaideu, follow user instructions, protect the service, or comply with law.

Connected-account contacts

Where you connect a third-party account (advertising, analytics, business profile, social, commerce or website), Ovaideu may store that account's administrator and user contact details — name, email, phone and role — as inert records, to operate your workspace, prevent abuse and provide continuity.

These contacts are never emailed or notified unless you, the workspace owner, explicitly enable notifications and add a specific contact to a send list. A cross-workspace record of connected-account and business identifiers is retained at the operator tier for abuse prevention and is accessible only to Ovaideu operators.

Google user data obtained this way is used only to operate your connected workspace, is never sold, and is never used for advertising — consistent with Google API Services User Data Policy (Limited Use) and Meta Platform Terms.

Support & administrative access

Authorized Ovaideu operators may access your account, workspace records and connected-account details to provide support, investigate suspected abuse, fraud or security incidents, keep the service running, and meet legal obligations. Where reasonably necessary to help you, an operator may temporarily act within your workspace on your behalf. This access is least-privilege (limited to what the task requires), is performed only by authorized personnel, and is logged.

This access is transparent to you: an entry recording when an operator enters your workspace appears in your workspace's own audit log, so members with audit access can see who accessed the workspace and when. Where you take Ovaideu on a white-label basis, the platform operator can additionally view white-label tenant and connected end-user account details for administration, billing, abuse prevention and support.

We rely on our legitimate interests in operating, securing and supporting the service and preventing fraud and abuse (GDPR / UK GDPR Article 6(1)(f)) and, where applicable, on performance of our contract with you and compliance with our legal obligations, as the lawful basis for this access. We do not sell data accessed this way, do not use it for advertising, and do not use it to train generalized AI or machine-learning models; any Google or Meta user data continues to be handled under the Google API Services User Data Policy (Limited Use) and Meta Platform Terms.

Retention & abuse prevention

To operate the service and protect it from misuse, Ovaideu retains a limited set of account and business-identity data — your name, business name, email, phone number, website domain and the account identifiers of the providers you connect. We use this to run and support your workspace, to send occasional trial, subscription or promotional messages you can opt out of, and to detect and prevent fraud and abuse — including repeated free-trial abuse (for example, creating, deleting and re-creating accounts to obtain repeat trials), enforcing suspensions or blocks, and protecting the platform and other customers from spam, misuse or unlawful activity.

Where data-protection law applies, we rely on our legitimate interests in securing the service, preventing fraud and abuse, and enforcing our Terms (GDPR / UK GDPR Article 6(1)(f)), balanced against your rights and freedoms; on the recognized exceptions that permit continued retention where necessary to establish, exercise or defend legal claims or to prevent fraud (including GDPR Article 17(3)); and, for California residents, on the business-purpose and fraud-prevention exceptions under the CCPA/CPRA. This is our lawful basis for limited retention, not a waiver of your rights: where your local law grants you stronger rights, those rights apply.

We keep only the minimal identifiers needed for suppression and abuse prevention, use them for no unrelated purpose, and never sell them. Any Google or Meta user data is handled under the Google API Services User Data Policy (Limited Use) and Meta Platform Terms, and is not used for these purposes beyond what those terms allow.

You can request deletion of your personal data at any time by emailing support@ovaideu.com or messaging us on WhatsApp at +91 98743 25165 (see also the Data Deletion page). On a valid request we delete your personal data, except a minimal suppression record — such as a hashed or truncated form of your email — that we retain solely to enforce a prior block or suspension and to prevent trial abuse, for as long as permitted and necessary under applicable law. We keep this record to protect the platform, not to profile you, and we disclose it here so the trade-off is transparent.

Account deletion & data retention

You can delete your account at any time from Settings. To protect against accidental or hostile deletion, we confirm the request with a one-time code sent to your account email. Once confirmed, the account enters a locked recovery state: you can reactivate it with one click, or delete it permanently. We never auto-delete your account — permanent deletion happens only when you return and explicitly confirm it. A minimum 90-day recovery window applies, and reactivating at any point resets it.

The moment you request deletion we revoke your connected Google and provider OAuth tokens and schedule the purge of your Google user data (Ads, GA4, Search Console, Tag Manager, Business Profile, Merchant Center, Calendar), tokens, profile, content and connected-account data — we do not wait for the recovery window to honor that revocation, consistent with the Google API Services User Data Policy (Limited Use) and GDPR right-to-erasure. When purge completes, the only thing we retain is a minimal, one-way-hashed abuse-signal record — a hash of your email, a hashed/truncated IP, an optional device fingerprint and fraud/trial flags — used solely to detect returning abusers and repeat free-trial fraud. It is not a profile, is never sold and is never used for marketing or AI training. Our lawful basis and full details are in the Anti-Fraud & Abuse Prevention Policy.

You can also temporarily pause your account instead of deleting it, and un-pause anytime with no data loss.

Your choices

You can disconnect accounts, request export, pause your account, or request deletion at any time — see the Data Deletion page and the Anti-Fraud & Abuse Prevention Policy.