Privacy Policy

What OGEN is

OGEN is an operating system for teams: tasks, projects, calendar, chat, calls, meeting notes, budget and journal, with an AI assistant. People and companies use it around the world. Your workspace data belongs to your company.

Who is responsible for what

For your account, billing and the security of the service, YGC Ventures decides how your data is used. For the content a company puts into its workspace (its tasks, messages, files, meetings and the people it invites), the company decides, and we process that content on its behalf, under our terms and, on request, a data processing agreement.

What we store

Account details (name, email, and the profile details you add) and the content your company creates: tasks, projects, files, messages, journal entries, meeting recordings, transcripts and briefs you start with everyone's consent, voice messages (the recording and its transcript, kept in the chat they were sent to, where the same people can hear and read them; a recording that is never sent is deleted), and work-proof stamps. Your workspace is stored in the European Union. Each company only ever sees its own data, and inside it each person sees what their role allows.

Why we use it

• To provide OGEN to you and your company, under our contract with you: storing and showing your workspace, calls, notifications, email and the features you use.
• AI features you use (answers, meeting notes, transcripts, voice-message transcripts, dictation, summaries), as part of that contract.
• Security and abuse prevention, and keeping the service running, in our legitimate interest.
• Billing and accounting, under our contract and our legal obligations.
• Things you switch on, such as Google Calendar, a meeting recording, your own AI account or an AI app you connect, with your consent, which you can withdraw at any time.

AI features

When you use an AI feature, OGEN sends the providers that run the AI models only what that feature needs: the question and the workspace content OGEN looked up for it, a meeting's transcript for its brief, or audio to turn into text for captions and dictation. They return the answer to OGEN. A voice message's recording goes to a speech-to-text service, which turns it into the transcript saved with the message; when that service is busy, a backup service of the same kind may make the transcript instead, and the recording then goes to it. If you connect your own AI account or a local model, those requests go there instead, under your agreement with that provider. An answer in a shared chat uses only what everyone in that chat may see.

AI apps you connect

You can connect an AI app of your own, such as Claude or ChatGPT, to work with OGEN from inside it, once an owner or admin of your company allows it. The app acts as you, with your rights, and only on the kinds of content you choose to share when you connect it (and that your company allows). What it reads goes to your account with that app, under your agreement with its maker. What it creates or changes in OGEN is recorded under the name of its connection, so your team sees which app did what. You can disconnect it in Settings at any time, and an owner or admin of your company can disconnect it too.

Service providers

We use carefully chosen providers, each bound by contract to process data only to provide its service to us:

• cloud hosting and content delivery;
• data and file storage (in the European Union);
• payments (card details go straight to the payment provider; we never see them);
• voice and video calls;
• email delivery and push notifications;
• AI models, speech-to-text and web search, for the AI features above;
• Google, for the calendar and mail connection you choose to enable (see below).

Business customers can ask for the current list of these providers by name, with their locations, at the address below.

International transfers

Your workspace is stored in the European Union. Some providers (for AI, speech-to-text, calls, email, payments and content delivery) process data in the United States and other countries where they operate. Where those countries are not recognised as giving adequate protection, we rely on safeguards such as the European Commission's Standard Contractual Clauses, with the UK and Swiss addenda, or the provider's certification under the EU–U.S. and Swiss–U.S. Data Privacy Framework. You can ask us for a copy of the safeguards that apply.

Google Calendar access

If you connect Google Calendar, OGEN uses the calendar.events and calendar.readonly scopes to (1) create and update calendar events for the tasks, meetings and milestones your team schedules in OGEN, and (2) display your calendar events inside OGEN's calendar. Tokens are stored on our servers and are available only to authorized server processes. Personal calendars and mail are visible only to their owner; a company connection is shared with full workspace members. Disconnecting removes the stored connection tokens and its cached calendar and mail records. OGEN's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. We never sell Google user data, never use it for advertising, and never let humans read it except with your permission, for security, or where required by law.

Meta Ads reporting

When your company uploads an export from Meta Ads Manager, OGEN stores the report rows you choose to import: reporting dates, campaign, ad-set and ad names, currency, ad spend, impressions, reach, clicks, reported purchases and purchase value, landing-page views, cart and checkout events, video-play and completion counts where included, account-level reach and frequency reports, and the time and person associated with the import. We use these records to show your company its advertising results, trends and calculated measures such as return on ad spend. Reports are linked to the relevant company and store and are visible to people permitted to see that store's numbers.

Where enabled for your company, the optional direct Meta connection uses Meta's own authorization screen. We receive an access credential and store it encrypted, together with its permissions and expiry, an app-specific Meta user identifier and client-business identifier, and the identifiers, name, currency and time zone of the ad account you select. We use this authorization to retrieve recent advertising reports, including the reporting measures listed above and the attribution information needed to interpret them. Authorization credentials are not shown to colleagues or supplied to AI assistants. Report data remains subject to the store's access permissions and the AI-processing choices described in this policy.

The connection is for reporting. It does not create, edit, pause or delete campaigns, change budgets or targeting, or send conversion events. OGEN does not ask for your Facebook password. The direct connection must be enabled and authorized separately; uploading a file does not grant access to Meta.

Disconnecting the direct connection in OGEN stops its updates and removes its credential and downloaded reports from the active service. Separately uploaded reports remain until you remove them or request deletion. You can also revoke authorization in Meta's connected-app settings. OGEN stops using a revoked authorization when Meta notifies us or a reporting request detects the revocation, and removes the associated credential and downloaded reports. An expired authorization cannot be used for further reporting. Pending sign-in attempts are usable for ten minutes and are cleared by scheduled hourly maintenance. Direct reports cover a rolling recent window of up to sixty days and are replaced on a successful refresh; there is no continuing import after disconnect.

For deletion requests submitted through Meta, OGEN can return a private confirmation link, available for thirty days after completion. We retain a hashed revocation marker for ninety days before scheduled cleanup to prevent delayed messages from restoring deleted access. Removal from the active service does not immediately remove infrastructure backups; those copies expire under the backup retention settings. Contact us for assistance with retention or a deletion request.

You can ask us to delete Meta-related data held by OGEN, including imported reports, by following our data-deletion instructions. Deleting an OGEN copy does not delete an account, campaign or report held by Meta.

Product and ad media

When you request product images or ad creatives, OGEN uses the store's existing Shopify or Meta connection to read current product and ad identifiers, titles, ad copy, image links, video links and preview images where available. This helps your company identify the products and ads alongside its costs and performance reports. The same store-number permissions apply. Connected AI tools can make these reads only under the company's existing Numbers sharing choices.

These are requested live reads, not a historical media archive. OGEN does not save a separate copy of the media files for this feature. Your browser loads images and videos directly from the provider's media service, which receives the network information needed to deliver them. Media links can expire and may need to be refreshed. Reading media does not change products, inventory, ads or campaign delivery, and OGEN does not automatically request additional provider permissions when an original file is unavailable.

What we deliberately don't do

No screenshots of your screen are ever taken automatically. No keystroke logging, no activity tracking, no behavioural surveillance — OGEN's work-proof features record only what a person deliberately stamps or shares. We don't sell or share personal data for advertising, and we don't use it to profile you.

How long we keep it

As long as your account or your company's workspace exists. Some things go sooner: disconnecting Google removes its tokens and cached records at once. Deleting your account removes your profile and personal content; content you created in a company stays with that company. Billing records are kept as long as the law requires.

Your rights

Wherever you are, you can ask us to access, correct, export or delete your personal data, and to stop using it for a purpose you consented to. Depending on where you live you have further rights: in the EU, the UK and Switzerland, to object to or restrict some processing and to complain to your data protection authority; in California and other US states, to know what we collect and why, and not to be treated differently for using your rights. We never sell personal data. For content in a company's workspace, we will pass your request to that company, which decides on it, and help it answer.

You do not need to sign in to request deletion. Our data-deletion instructions explain what to send, how we verify a request and what deletion affects.

Contact

Questions or requests: contact@ygcventures.com. We answer within 30 days.