Who is responsible
Ovydo is operated by LITTLAB PRAXIS LLC, a limited liability company formed in Wyoming, United States. The company’s public registration details and contact information are listed in the Legal notice.
For any question about your data, write to donnees@ovydo.com.
LITTLAB PRAXIS LLC operates Ovydo. We determine how account administration, service communications, security and support data are used. For personal data in customer workspaces processed on the customer’s instructions, the customer determines the purposes and Ovydo acts as a processor. An agency may itself act for its clients. Requests concerning their content may need to be handled with the organisation responsible for that workspace.
What we collect
Only what the product uses. We collect nothing for advertising and buy no data about you.
- Your account
- Name, email address, password (stored only as a hash), language, time zone, sign-in sessions and, if you turn them on, second-factor and passkey settings.
- Sign-in with Google or Facebook
- If you choose it: your name, email address and profile picture, as shared by that provider.
- Your workspace
- Posts, drafts, captions, images and videos, brand kits, calendars, comments, approvals and team roles that you and your team create or upload.
- Connected social accounts
- The access granted by each network, the identifiers and names of your accounts and pages, and what the network returns for the features you use: publishing results, public comments and mentions, private messages for Inbox, and statistics about your own accounts.
- Security and diagnostics
- Technical logs (IP address, browser, requests, errors) and an audit log of the actions taken in each workspace.
Data from social networks and Google
Ovydo only accesses the accounts you connect, and only uses the access each network grants to provide the features you use: publishing and scheduling your posts, reading comments, mentions and messages so that you can answer them, and reading statistics about your own accounts. Networks you can connect include Facebook, Instagram, Threads, LinkedIn, TikTok, YouTube, Google Business Profile, X, Pinterest, Mastodon, Discord.
You can disconnect an account in Ovydo at any time, and revoke Ovydo’s access from the network’s own settings (for Google: myaccount.google.com/permissions).
Ovydo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use the YouTube API Services: by connecting a YouTube channel you also agree to the YouTube Terms of Service (youtube.com/t/terms) and the Google Privacy Policy (policies.google.com/privacy).
We do not sell data received from social networks or Google, we do not use it for advertising, and we do not use it to train artificial-intelligence models.
Why we use it
For processing whose purposes we determine, the applicable basis depends on the operation: performance of the requested contract, legitimate interests in service administration, support and security subject to your rights, legal obligations, or consent where required for optional processing. Necessary account data enable the requested service. The customer determines the basis for processing personal data in its workspace on its instructions.
- To provide Ovydo
- Your account and workspaces, creating and publishing content, Inbox and Community, Analytics, and team collaboration.
- To keep it secure
- Sign-in protection, checking new passwords against known data breaches, blocking abusive traffic, and investigating incidents.
- To write to you
- Sign-in and verification codes, invitations, and notifications about your workspace.
- To answer you
- Support, questions about your data, and requests you send us.
Ask
When an AI feature uses an external provider, the inputs and context necessary for that feature are sent for processing. Providers’ retention and training rules can differ; a promise about Ovydo’s own use does not establish the practices of every third party. Contact donnees@ovydo.com for information about the processing applicable to the feature before submitting personal or confidential data.
AI suggestions can be inaccurate, incomplete, biased or similar to content supplied to others. Check their facts, rights and suitability before using or publishing them. Only submit material you are entitled to use. AI assistance is not a substitute for professional advice and must not be used for unlawful or high-impact automated decisions about people. Your rights in inputs remain yours; any rights in outputs depend on applicable law and third-party rights.
Who processes data for us
Our own services run on the infrastructure below. Each provider processes data only to deliver its service to Ovydo.
- Contabo
- Hosting of the Ovydo application and its databases, on servers in Germany (European Union).
- Cloudflare
- Delivery and protection of the website and the application, storage of media files, bot protection on forms, and cookieless visit statistics on the website.
- Zoho (Zoho Mail, ZeptoMail)
- Our email addresses, and transactional emails such as sign-in codes, invitations and notifications.
- Have I Been Pwned
- When you choose a password, only the first five characters of its hash are checked against known breaches. Your password never leaves Ovydo.
- Text-generation provider
- Only when you use Ask, as described above.
How long we keep it
- Account and workspace content
- We keep data only for as long as needed for the service and applicable legal obligations. After a valid deletion request or workspace closure, we delete the relevant data without undue delay, except for limited records whose retention is legally justified.
- Backups and deletion
- Where immediate deletion of backup copies is not possible, they remain protected and excluded from ordinary use until deletion under the applicable retention cycle. We explain any justified delay or exception on request.
How we protect it
Connections are encrypted (HTTPS). Passwords are stored as hashes and checked against known breaches; second factors and passkeys are available, and sensitive actions ask you to confirm your identity again. Each workspace is isolated from the others, access follows team roles, and actions are recorded in an audit log.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent where processing relies on it. Write to donnees@ovydo.com. We may request proportionate identity information. For GDPR requests, we respond without undue delay and generally within one month; any lawful extension and its reasons are notified within that month. Other applicable deadlines remain binding. You may complain to the competent supervisory authority.
Changes to this policy
When this policy changes, we update this page and the date above. Significant changes are announced in the application or by email before they apply.