Privacy Policy

1. Definitions

• Personal Data: Any information relating to an identified or identifiable individual.
• Usage Data: Data collected automatically from the use of the Services.
• Cookies: Small files stored on your device.
• Data Controller / Data Fiduciary: Ovalpod Technologies.
• Data Processor: Any third party processing data on our behalf.
• User / Data Subject / Data Principal: Any individual using our Services.

2. Information We Collect

As an AI automation platform, Ovalpod processes data only at your direction, based on the apps you connect and workflows you configure.

2.1 Personal Data

We may collect:

• Name
• Email address
• Phone number
• Address (City, State, Country, Postal Code)
• Account credentials
• Cookies and Usage Data

2.2 Account Information

When you create an account, we collect:

• Contact information
• Authentication credentials
• Subscription and transaction history

2.3 User Content

We collect data you directly provide, including:

• Prompts, instructions, and automation logic
• Workflow configurations
• Data accessed or processed via connected third-party services

2.4 Payment Information

Payments are processed by Razorpay. Ovalpod:

• Does not store card numbers
• Does not access full payment details

Razorpay Privacy Policy: https://razorpay.com/privacy-policy

2.5 Communication Data

We collect information when you:

• Contact support
• Submit feedback, surveys, or inquiries

2.6 Usage Data

May include:

• IP address
• Browser type and version
• Pages visited
• Time and date of access
• Device identifiers and diagnostics

3. Cookies & Tracking Technologies

We use cookies and similar technologies for Authentication, Preferences, Security, and Analytics. You may disable cookies in your browser, but some features may not function correctly.

4. Third-Party Integrations, Authentication & Scopes

Ovalpod connects to third-party services only with your explicit consent.

4.1 OAuth Applications & Scopes

4.2 Other Authentication Methods

All credentials and tokens are encrypted at rest and in transit.

5. How We Use Data

• Provide and operate the Services
• Execute automations configured by you
• Improve performance, reliability, and security
• Provide customer support
• Detect and prevent fraud or abuse
• Send service-related notifications

6. AI & Model Training Policy

We are committed to protecting your data.

• We do not use your data, workflows, prompts, or third-party service data to train generalized AI or machine learning models.
• We do not use Google Workspace APIs to develop, improve, or train generalized AI/ML models.
• We have contractual agreements with AI providers (including OpenAI and Anthropic) ensuring no training on Ovalpod customer data.

7. Google API Limited Use Disclosure

Ovalpod Technologies’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We access, use, store, and share Google user data only:

• To provide user-requested features and automations
• With explicit user consent
• In a secure and encrypted manner

We do not use Google user data for advertising or for training generalized AI/ML models.

8. Lawful Basis for Processing (GDPR)

We process personal data based on:

• Consent
• Contractual necessity
• Legal obligations
• Legitimate interests (security, reliability, improvement)

9. Data Retention

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Usage Data is retained for a shorter duration unless required for security or legal reasons.

10. Data Transfers

Your data may be processed outside your jurisdiction, including in countries with different data protection laws. We ensure appropriate safeguards are in place to protect your data.

11. Disclosure of Data

We may disclose data:

• To comply with legal obligations
• During mergers, acquisitions, or asset sales
• To trusted service providers
• With your explicit consent

We do not sell or rent personal data.

12. Security Measures

We implement industry-standard security practices including:

• Encryption at rest and in transit
• Role-based access controls
• Two-factor authentication
• Regular backups
• Strict credential isolation between users

No system is 100% secure, but we take reasonable measures to protect your data.

13. Your Rights (GDPR & DPDP Act)

You may have the right to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict or object to processing
• Data portability
• Withdraw consent

Requests can be made at support@ovalpod.com.

14. India DPDP Act (2023) Compliance

• You are the Data Principal
• Ovalpod Technologies is the Data Fiduciary
• You may withdraw consent or request deletion at any time

Grievance Officer:

Email: support@ovalpod.com

Response Time: Within 7 business days

15. Analytics

• Google Analytics – https://policies.google.com/privacy
• PostHog – https://posthog.com/privacy

16. Children’s Privacy

Our Services are not intended for users under 18. We do not knowingly collect data from minors.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

18. Contact Us

Ovalpod Technologies
Unnao, Uttar Pradesh, India – 209801
📧 support@ovalpod.com

🌐 https://ovalpod.com