Privacy Policy

Account and contact information. When you create an account or contact us, we collect information such as your name, work email address, company, and role.

Authorized platform data (via connectors). With your authorization, we connect to third-party platforms you use (for example Amazon Ads, Walmart Connect, Google Ads, Meta, TikTok, Shopify, QuickBooks, and similar) to retrieve performance and operational data such as advertising spend, impressions, clicks, conversions, attributed sales, and related metrics. This access is read-only and limited to the data you authorize. We do not create, edit, or manage campaigns on these platforms.

Sign-in information. If you sign in using a third-party login such as Login with Amazon, that provider may share basic profile information with us (for example your name, email address, and postal or zip code) so we can authenticate you and establish the connection you authorize. We use this information only for authentication and to provide the Services.

Usage and technical data. We collect log data, device and browser information, and similar technical details when you use the Services, and we use cookies and similar technologies as described in Section 6.

We use information to:

• provide, operate, secure, and improve the Services;
• authenticate users and establish authorized platform connections;
• generate the analytics, reporting, and attribution outputs our customers request;
• provide customer support and communicate with you;
• detect, prevent, and address security incidents, fraud, and abuse; and
• comply with legal obligations and enforce our agreements.

We process authorized platform data only to provide the Services to the customer who authorized it. We do not use a platform's data for any purpose other than the customer's analytics and attribution use case, and we follow each platform's applicable data-use requirements.

We share information only as described here:

• Service providers and sub-processors that help us run the Services (for example cloud hosting and database infrastructure), under contracts that restrict their use of the information to providing services to us.
• At your direction, with the platforms you connect or other parties you ask us to share with.
• For legal reasons, when required by law or to protect rights, safety, and the integrity of the Services.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

When you connect a third-party platform, you authorize Oasis to access specific data through that platform's API using secure, token-based authorization (OAuth where supported). Access is read-only and limited to the scope you grant. You can revoke Oasis's access at any time from the relevant platform's account settings, and you can ask us to delete the associated data. We handle platform data consistent with the applicable platform terms and data-use policies.

We retain information for as long as needed to provide the Services and for legitimate business or legal purposes, after which we delete or de-identify it. Authorized platform data is retained for the duration of the customer's engagement and is deleted on request or following revocation of access, subject to limited retention required by law or for security and backup integrity.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit (TLS) and at rest (AES-256-GCM), tenant data isolation, role-based access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect your information and to continuously improve our controls.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights. To exercise any right, contact us at kathryn@oasistech.ai. Where we process information on behalf of a business customer, we will refer your request to that customer and support them in responding. You may also revoke connected-platform access at any time from the platform's settings.

We are based in the United States and may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

The Services are intended for businesses and are not directed to children under 13 (or the age defined by local law), and we do not knowingly collect personal information from children.

We may update this Policy from time to time. When we make material changes, we will update the date above and, where appropriate, provide additional notice.

If you have questions about this Policy or our privacy practices, contact us at kathryn@oasistech.ai.