Privacy Policy
1. Who we are
Ogwa ("Ogwa," "we," "us") operates ogwa.ai and the Ogwa application — a marketing platform for spa and hot-tub dealers that creates and runs landing pages, email, social posts, and Google & Meta advertising, with cost-per-lead reporting. Ogwa is a business-to-business service: our customers are dealers, and this policy covers both dealer users of the platform and consumers who interact with marketing pages our dealers run through Ogwa.
You can reach us about anything in this policy at admin@ogwa.ai.
2. Scope of this policy
This policy applies to:
- the ogwa.ai website;
- the Ogwa application (hosted under ogwa.ai);
- landing pages and marketing campaigns that dealers create and run through Ogwa.
3. Information we collect
3.1 Dealer account information
When a dealer creates an Ogwa account: name, business name, email address, and login credentials (passwords are stored only as secure hashes).
3.2 Dealer business and marketing data
Information the dealer provides or authorizes to run campaigns: business locations, offers and promotion details, campaign settings and schedules, and connected-account data described in §4 (Google) and §5 (other connected services).
3.3 Consumer lead data (collected on behalf of dealers)
When a consumer submits a form on a dealer's Ogwa-powered landing page: the information the consumer enters (typically name, contact details, and their inquiry) plus campaign attribution context (which campaign and channel the inquiry came from). This data belongs to the dealer; Ogwa processes it to deliver the lead to the dealer and to compute the dealer's reporting.
3.4 Usage and log data
Standard service logs (IP address, browser type, pages viewed, timestamps) used for security, debugging, and service operation.
4. Google user data
This section describes how Ogwa handles data received from Google APIs when a dealer chooses to connect a Google account. Connections are always initiated by the dealer, and the dealer can disconnect at any time from the Ogwa dashboard or from their Google account permissions page.
4.1 What we access, and why
| Google service | What Ogwa accesses | Why |
|---|---|---|
| Google Business Profile | Business listing information: name, address, phone, hours, attributes, and reviews. | To keep the dealer's landing pages and local business information accurate to their verified listing, and to display their reviews on their own pages. |
| Google Ads | Campaign structure and spend/performance data; ability to create ad drafts. | To create ad drafts in the dealer's own account — always paused until the dealer approves them — and to read spend data to compute the dealer's cost-per-lead reporting. |
| Google Analytics | Website analytics reports (read-only). | To include the dealer's traffic and conversion data in their reporting dashboard. |
4.2 Limited Use disclosure
Ogwa's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google user data to provide and improve the user-facing features described in §4.1, which are visible and prominent in the Ogwa interface.
- We do not transfer Google user data to third parties except as necessary to provide those features (see subprocessors, §6), to comply with applicable law, or as part of a merger or acquisition with prior explicit user consent.
- We do not sell Google user data.
- We do not use Google user data for advertising purposes, including retargeting, personalized, or interest-based advertising.
- We do not use Google user data to determine creditworthiness or for lending purposes.
- We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models. Ogwa's AI advisory feature reads a dealer's own data to explain it to that dealer; it is not trained on that data.
- Humans at Ogwa do not read Google user data except with the dealer's explicit consent (for example, a support request), where necessary for security or abuse investigation, to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.
4.3 How Google user data is stored and protected
Google OAuth tokens are encrypted at rest using industry-standard authenticated encryption (AES-256-GCM). All data is transmitted over TLS. Fetched Google data (listing information, spend figures, analytics reports) is stored in Ogwa's production database, access-controlled per dealer — one dealer can never see another dealer's data.
4.4 Deleting Google user data
When a dealer disconnects a Google account, Ogwa stops accessing it and deletes the stored OAuth tokens. Stored copies of Google-derived data are deleted on account deletion per §8, or earlier on request to admin@ogwa.ai.
5. How we use information
We use the information described above to:
- provide, operate, and secure the Ogwa service;
- create and run the marketing campaigns a dealer configures and approves;
- deliver consumer leads to the dealer they contacted;
- compute and display the dealer's reporting (including cost-per-lead);
- power the AI advisory feature, which reads the dealer's own data and our marketing knowledge base to explain results — it never writes published marketing copy and never takes billed actions;
- communicate with dealers about their account and the service;
- comply with legal obligations.
We do not sell personal information.
6. Sharing and subprocessors
We share information only with service providers that help us run Ogwa (subprocessors), with the services a dealer explicitly connects (e.g., the dealer's own Google or Meta accounts), or as required by law. Current subprocessor categories:
| Provider | Purpose |
|---|---|
| Render | Application hosting and database |
| Cloudflare | Object storage for imagery and generated assets (R2) |
| Stripe | Billing and payments |
| Anthropic | AI processing for the advisory/summary feature |
| [Transactional email provider — TBD] | Lead notifications and service email |
7. Data retention
We retain dealer account data for as long as the account is active. Campaign and reporting data is retained for the life of the account so dealers keep their marketing history. Consumer lead data is retained on the dealer's behalf subject to the consent the consumer gave at collection.
8. Your data when you leave — export and deletion
Dealers can export their data — including their contacts and leads — in a portable format (CSV at minimum) before or upon leaving Ogwa. On account deletion, we delete the dealer's data, including stored Google user data and OAuth tokens, except where retention is required by law (e.g., billing records).
To request export or deletion, email admin@ogwa.ai.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information. Contact admin@ogwa.ai to exercise them. Consumers who submitted an inquiry on a dealer's page may also contact that dealer directly — Ogwa processes that data on the dealer's behalf and will support the dealer in honoring the request.
10. Security
Ogwa uses industry-standard safeguards: encryption in transit (TLS) and at rest for sensitive credentials (AES-256-GCM for OAuth tokens), per-dealer data isolation enforced at the application and database layer, audit logging, and least-privilege access. No method of transmission or storage is perfectly secure; we work to protect your information but cannot guarantee absolute security.
11. Children
Ogwa is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact admin@ogwa.ai and we will delete it.
12. Changes to this policy
We will post any changes to this policy on this page and update the effective date. For material changes affecting how we handle Google user data or dealer data, we will notify dealers by email before the change takes effect.
13. Contact
Questions about this policy or our data practices: admin@ogwa.ai.