Privacy Policy

Who Data Oven is

Data Oven provides business technology, automation, consulting and software services, including the Data Oven Connect software-as-a-service platform. This policy uses “Data Oven”, “we”, “us” and “our” to describe the Data Oven business and its services.

Scope of this policy

This policy applies to the Data Oven website, Data Oven Connect, associated Data Oven web applications and services, support and contact interactions, and integrations that a customer explicitly authorizes. It does not replace the privacy terms of a customer, Meta, WhatsApp, Google or another independent service.

Information we collect and process

The information involved depends on which website, product and integrations you choose to use. Data Oven may process the following categories when they are relevant to that use:

• Account and profile details, such as name, business email and authentication-related records.
• Organization, team, membership, role and invitation information used to manage access.
• Customer-controlled contact records, consent records, tags, custom fields and related business information.
• WhatsApp Business Account, phone-number and Meta business or platform identifiers connected by an authorized customer.
• Conversation and message records, delivery status, media references, templates, campaigns and recipient status needed for messaging operations.
• WhatsApp Forms / Meta Flows configuration retrieved from or submitted to Meta, and Flow responses received as part of message or automation processing.
• Automation rules, versions, runs, webhook events, integration configuration and related operational results.
• Protected credentials or tokens required for customer-authorized integrations. Data Oven Connect stores supported Meta access tokens and reusable integration credentials in encrypted form and does not expose them through ordinary browser responses.
• Usage, audit, security, diagnostic, browser, device, timestamp and request-log information used to operate and protect the services.
• Support communications, project requirements, documents and other information you deliberately provide through forms, email, meetings or requested tests.
• Referral and campaign attribution, such as an original landing page, referral name and permitted UTM parameters.
• Browser-local demonstration records and requirement-form drafts. These remain on the device unless the user explicitly submits or invokes a server-side operation.

Meta and WhatsApp Platform data

Data Oven Connect may process information received through the Meta WhatsApp Business Platform after a customer authorizes access to that customer’s applicable business assets. Data Oven uses that platform data only to provide, secure, support and improve the Data Oven Connect functionality requested by that customer.

Data Oven does not sell personal information or Meta/WhatsApp platform data. We do not use Meta/WhatsApp platform data for unrelated advertising. Access and use are limited to purposes necessary to operate Data Oven Connect and the customer-authorized workflows. Meta and WhatsApp are independent third-party platforms and control their own infrastructure, policies and privacy practices.

Meta Privacy PolicyWhatsApp Privacy Policy

How information is used

Data Oven uses information for legitimate purposes connected with a user request, customer instruction, active service or platform operation.

• Operating the website, Data Oven Connect and associated services.
• Connecting authorized business assets and providing shared Inbox, contact, message, template, campaign and WhatsApp Flow functionality.
• Executing customer-configured automations, webhooks, API calls and third-party integrations.
• Delivering support, discovery, service communications and requested transcripts.
• Maintaining authenticated access, team permissions, security, rate limits, abuse prevention, diagnostics, audit records and service reliability.
• Understanding service usage and improving supported functionality.
• Meeting applicable legal, accounting and contractual obligations and protecting legal rights.

Customer-controlled data

A Data Oven Connect customer determines which authorized business assets, contacts, messages and workflows it connects or creates. That customer is responsible for having a lawful basis and appropriate authority to provide and use the data. If you are a contact of a Data Oven Connect customer, that customer may be the appropriate first point of contact for questions about its business communications and records.

Third-party services and integrations

Customers may connect Meta/WhatsApp, Google services or other integrations they choose. Data Oven may transmit or receive information as necessary to carry out the customer-authorized action. Those providers operate under their own terms and privacy policies and may independently retain information. Links, APIs, availability, pricing and policies are controlled by the relevant provider.

When information may be shared

Data Oven may share information only as reasonably necessary with customer-authorized integrations; providers that help operate hosting, email, security, analytics, AI or other requested service functions; professional advisers where necessary; or authorities and other parties when required by applicable law or reasonably necessary to protect rights, security, users and services. We do not publish customer support cases, transcripts or Data Oven Connect business data. Data Oven does not sell personal information or Meta/WhatsApp platform data.

Cookies and analytics

Necessary browser storage supports consent preferences, security verification, essential session handling, requirement-form drafts and active-session coordination. The optional Analytics category currently covers Google Analytics and Microsoft Clarity. Both remain disabled until a visitor enables Analytics through the consent controls.

Google Analytics measures traffic and website performance. Microsoft Clarity helps Data Oven understand page interactions through aggregate behavior, heatmaps and session recordings. Sensitive input content is masked by default in Clarity. Data Oven does not intentionally use Clarity to capture passwords, payment credentials or private form content. Data Oven does not currently deploy advertising pixels, retargeting tags or marketing-profiling cookies on this website. Visitors can choose Necessary Only or reopen Cookie Settings from the footer or floating privacy control to withdraw analytics consent. Consent records use a version and timestamp and may be requested again when they expire or purposes materially change.

Data Oven AI and human support

Data Oven AI requires a visitor name and accepts an optional email address. Conversation content may be sent to the configured AI provider to generate a response. Saving an email does not create a Support Case, notify the team, subscribe the visitor to marketing or send an automatic email. A transcript is emailed only after the visitor explicitly requests it.

A human Support Case is created only after the visitor confirms Connect with a Human. The case may contain the visitor name, optional email, conversation, handoff category and message, an operational summary, source page, permitted attribution, assignment, status and response timestamps. Authorised agents can read the conversation, send replies and add clearly separated internal notes. Internal notes are never shown in customer chat or included in customer transcript emails.

The active browser conversation is stored in versioned browser storage and synchronised across currently open Data Oven tabs. After all active Data Oven tabs have closed beyond the session grace period, a later visit starts a fresh visitor-facing conversation.

Security

Data Oven uses reasonable technical and organizational safeguards appropriate to the service, including authenticated access, organization and team scoping, role-based permissions, encrypted transport in production, protected credential and token storage, request and file checks, rate limiting, private storage where applicable, and operational logging and audit mechanisms. The Agent Portal requires authentication and is excluded from public search indexing. No online service can guarantee absolute security.

Retention

Data Oven retains information only for as long as reasonably necessary to provide services, complete customer-authorized operations, maintain security and fraud or abuse prevention, support backup and recovery, resolve disputes, and meet legitimate contractual or legal obligations. Retention depends on the information, its purpose, customer instructions and applicable requirements.

Existing website support controls are more specific: anonymous Data Oven AI conversations may be retained for up to 24 hours when they have no email and no Support Case; human Support Cases and related communications may be retained for up to 365 days by default, subject to legitimate operational, security, legal and dispute-resolution needs. Browser-local drafts are retained for up to seven days and can be cleared on the device. Deletion from active systems may not immediately remove limited copies held in protected backups or records that must be retained for legitimate purposes.

Your choices and rights

Depending on the circumstances and applicable law, an eligible person may request access to, correction of or deletion of personal information held by Data Oven, or ask for account-related assistance. Requests are subject to reasonable identity or authority verification and lawful retention requirements. Send a request to shubham@dataoven.com and include only the information reasonably needed to locate the relevant account, organization or support case.

Read the Data Deletion Instructions

International processing

Data Oven serves customers and may use authorized providers or integrations operating in more than one country. Information may therefore be processed outside the requester’s location, where permitted and subject to appropriate contractual, technical and organizational safeguards. This policy does not claim a specific data-center location.

Children

Data Oven services are intended for authorized business and professional use and are not directed to children. Customers must not use Data Oven Connect to collect or process children’s information unless they have the authority, safeguards and lawful basis required for that activity.

Policy changes

We may update this policy when services, integrations or legal requirements change. The current version and Last Updated date will remain available on this page.

Contact

Questions, privacy requests and account-related assistance may be sent to shubham@dataoven.com. Do not send passwords, access tokens, full payment credentials or unnecessary sensitive information by email.

Email shubham@dataoven.com