Privacy Policy
Oodesy provides connected software experiences for children, parents and guardians, and organizations that serve children. This policy explains what information Oodesy collects, why, how long it is kept, and how to have it deleted. It covers the Oodesy website and Oodesy applications, including features that connect to third-party advertising platforms.
1. Clinical and family information
Clinical information handled on behalf of a clinic is Protected Health Information under HIPAA. Oodesy processes it only as a Business Associate of that clinic, under a Business Associate Agreement, and only as the clinic directs. The clinic is the data controller for that information; requests about it should go to the clinic, which can act on them in the Oodesy application.
2. Website visitors
The public website at oodesy.com sets no advertising or analytics cookies and loads no tracking scripts. It does collect information in two ways:
- Early-access sign-up. If you submit the early-access form, Oodesy stores your email address, the audience category you selected, the time you submitted it, and the fact that it came from the website. It is used only to tell you about Oodesy's launch and availability. It is stored on Google Cloud (Firestore) and is not shared or sold. To have it deleted, email privacy@oodesy.com from that address.
- Fonts and hosting. The site's typefaces are served by Google Fonts, and the site is hosted on Google Cloud (Firebase Hosting). To serve a page or a font, Google's servers receive your IP address and standard request details (user agent, page requested). Google's handling of that data is described in Google's privacy policy. Standard server logs are retained by the hosting provider for security and operations for a limited period.
3. Connected advertising accounts (Google Ads, Meta)
A clinic administrator may choose to connect the clinic's Google Ads or Meta (Facebook / Instagram) advertising account to Oodesy so the clinic can see the results of its own advertising next to the enquiries it produced. When an administrator does this:
- What we ask for. Google: the
adwordsscope. Meta: theads_readpermission. We ask for nothing else, and we do not request access to personal profiles, friends, posts, or Pages. - What we store. An access token (and, for Google, a refresh token) issued by the platform; the identifier and display name of the single advertising account the administrator chose; and, once reporting is enabled, aggregate campaign performance figures (spend, impressions, clicks, and similar metrics by day). Tokens are stored encrypted at rest on Google Cloud in a project used only for marketing data, and are never sent to a browser.
- What we do not store. We do not store audience lists, customer lists, or any personal information about people who saw or clicked an advertisement. We do not use a connected account to run advertising for anyone other than that clinic.
- How it is used. To show the clinic its own advertising results and to relate advertising spend to the enquiries the clinic received. Platform data is not sold, shared with other clinics, or used to build profiles.
- How to disconnect. In the Oodesy application, open Operations → Integrations, choose the platform, and select Disconnect. Oodesy then asks the platform to revoke the grant and deletes the stored token and account details. A clinic can also revoke Oodesy's access from within its Google or Meta account settings, which has the same effect on the platform side.
Oodesy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Clinic staff accounts
To sign in, Oodesy stores a staff member's name, work email address, and role at the clinic. These are kept for as long as the clinic keeps that person's account active and are removed when the clinic removes the account.
5. Retention and deletion
Information is kept for as long as the clinic's account is active or as the clinic's agreement with Oodesy requires. A clinic can delete connected-account data at any time using Disconnect (section 3). To request deletion of any other information, or to ask what Oodesy holds, email privacy@oodesy.com from the clinic's administrator address; requests are actioned within 30 days. Requests concerning clinical information go to the clinic, as described in section 1.
6. Security
Oodesy runs on Google Cloud. Data is encrypted in transit and at rest, access is limited to the services that need it, and access to sensitive data is logged and audited. No system is perfectly secure; if Oodesy becomes aware of a breach affecting your information, it will notify the affected clinic as the law and our agreements require.
7. Children
Oodesy's products are used by clinics and by parents and guardians. Information about children is entered and controlled by the clinic and the child's parent or guardian; Oodesy does not knowingly collect information directly from children, and does not use information about children for advertising of any kind.
8. Changes
If this policy changes materially, the effective date above is updated and clinics are notified in the application. The current version is always at oodesy.com/privacy.
9. Contact
Oodesy · privacy@oodesy.com