Privacy Policy
Last updated 2026-07-23
This Privacy Policy explains how Ovanth (“Ovanth”, “we”, “us”) collects, uses, and protects information when you use our AI customer-conversation platform (the “Service”). By using the Service you agree to this policy.
Who controls your data
For your account and business data, Ovanth acts as the data controller. For the content of conversations your business handles through the Service (messages from your customers), Ovanth acts as a data processor on your behalf — you are the controller and remain responsible for your lawful basis to process your customers’ data.
Information we collect
- Account data: your name, email, and login, managed by our authentication provider.
- Business Brain: the business details, voice, policies, and FAQs you provide or that we extract from a website you give us.
- Conversations: messages exchanged with your customers on channels you connect (website chat, email, Instagram), and AI-drafted replies.
- Connected accounts: we store a reference to your connected accounts and a display label. We never store the passwords or OAuth tokens for those accounts — they are held by our OAuth vault provider.
- Billing data: plan and subscription status. Card details are handled by our payment processor; we never see or store full card numbers.
- Usage and diagnostics: logs, IP address (for rate limiting and abuse prevention), and error reports.
How we use information
We use information to provide and operate the Service, draft and deliver replies, learn your business voice, prevent abuse, process payments, provide support, and comply with law. AI replies are grounded in your Business Brain; we do not use your conversation content to train third-party foundation models.
Legal bases (EEA/UK)
We process personal data to perform our contract with you, for our legitimate interests (securing and improving the Service), to comply with legal obligations, and with consent where required.
Sub-processors
We share data with the following processors only as needed to run the Service:
- Clerk — Authentication and account management
- Neon (PostgreSQL) — Primary database hosting
- Upstash (Redis) — Queues, rate limiting, and caching
- Anthropic — AI model that drafts replies
- Stripe — Payment processing and billing
- Nango — Secure OAuth vault for connected accounts
- Meta Platforms — Instagram / Messenger message delivery
- Google — Gmail message access (when connected)
- Resend — Transactional email delivery
- Sentry — Error monitoring (when enabled)
Cookies
We use strictly necessary cookies for authentication and security (set by our auth provider) and to keep you signed in. We do not use advertising cookies. Because these cookies are essential to provide the Service you requested, they are used on that basis; you can block cookies in your browser, but the Service may not function without them.
Data retention
We retain account and conversation data for as long as your workspace is active. When you close your account, we delete or anonymize your data within 30 days, except where we must retain records to comply with legal, tax, or accounting obligations.
Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can export your workspace data from Settings → Data, and request deletion by emailing privacy@ovanth.ai. We will respond within 30 days.
Security
Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access is restricted, and credentials for connected accounts are held in a dedicated OAuth vault, not in our database.
International transfers
Your data may be processed in countries other than your own, including the United States and the EU. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.
Changes
We may update this policy; material changes will be posted here with a new “Last updated” date.
Contact
Questions or requests: privacy@ovanth.ai.