Privacy Policy 🔒

This Privacy Policy applies to the collection, use, processing, storage, disclosure, transfer, protection, and retention of Personal Data by Ojoo in connection with the provision of its Services.

This Privacy Policy applies to Personal Data collected through:

• Ojoo websites, web applications, and online platforms.
• Low-Code and No-Code application development services.
• Enterprise Resource Planning (ERP) modules and business management solutions.
• Workflow automation, business process management, and digital transformation tools.
• Artificial intelligence, automation, analytics, and reporting features.
• Customer accounts, user portals, and administrative interfaces.
• Mobile applications and related services.
• Application Programming Interfaces (APIs), integrations, and developer services.
• Customer support, onboarding, implementation, training, and consulting activities.
• Sales, marketing, events, webinars, surveys, and communications.
• Third-party integrations, partner services, and connected applications.

This Privacy Policy applies to Customers, Users, website visitors, prospective customers, business partners, contractors, and other individuals whose Personal Data may be processed in connection with the Services.

Where Ojoo processes Personal Data solely on behalf of a Customer, Ojoo generally acts as a data processor, service provider, or similar role under applicable privacy laws, while the Customer acts as the data controller or business responsible for determining the purposes and means of processing such Personal Data.

This Privacy Policy does not apply to third-party websites, products, services, applications, platforms, or content that are not owned, operated, or controlled by Ojoo, even if such services are accessible through integrations or links provided within the Services.

Additional privacy notices, product-specific disclosures, Data Processing Agreements (DPAs), contractual commitments, or regional privacy requirements may supplement this Privacy Policy where applicable.

1.1 Data Controller and Data Processor Roles

Depending on the circumstances, Ojoo may act as a Data Controller, Data Processor, Service Provider, or similar role under applicable privacy laws.

Where Customers upload, manage, or process Personal Data through the Services, the Customer generally acts as the Data Controller and Ojoo acts as a Data Processor or Service Provider on behalf of the Customer.

Ojoo may collect, receive, generate, store, process, and otherwise handle information from Customers, Users, website visitors, business partners, and other individuals in connection with the provision, operation, support, security, and improvement of the Services.

The types of information we collect may include the following:

2.1 Account and Registration Information

When creating an account or registering for the Services, we may collect:

• Full name
• Email address
• Phone number
• Company or organization name
• Job title and department
• Business address
• Account credentials and authentication information
• User profile information

2.2 Customer Data

Customers may upload, create, store, process, transmit, or otherwise manage information through the Services. Such information may include:

• Business records and operational data
• Employee information
• Customer and client information
• Vendor and supplier information
• Financial and accounting records
• Inventory and procurement information
• Project and workflow information
• Documents, files, images, and attachments
• Forms, reports, dashboards, and analytics data
• Applications, automations, and workflows created using the Platform

2.3 Technical and Device Information

We may automatically collect technical information relating to devices, systems, and networks used to access the Services, including:

• IP addresses
• Device identifiers
• Browser type and version
• Operating system information
• Language preferences
• Time zone settings
• Network and connection information
• System configuration data
• Application version information

2.4 Usage and Activity Information

We may collect information regarding how the Services are accessed and used, including:

• Login and authentication activity
• User actions and navigation activity
• Feature usage metrics
• Workflow and automation execution activity
• API requests and responses
• Audit logs and system events
• Error reports and diagnostics
• Performance and reliability metrics

2.5 Payment and Billing Information

When purchasing subscriptions or services, payment-related information may be collected and processed by authorized payment processors. Depending on the payment method used, information may include:

• Billing contact information
• Billing address
• Tax identification information
• Transaction and invoice details
• Subscription and payment history

Ojoo generally does not store complete payment card information and relies on secure third-party payment providers for payment processing.

2.6 Communications Information

We may collect information when you communicate with us, including:

• Customer support requests
• Email correspondence
• Chat conversations
• Survey responses
• Feedback and testimonials
• Training and onboarding interactions
• Sales and business communications

2.7 Information from Third-Party Services

Where Customers enable integrations or connect third-party services, Ojoo may receive information from such services as authorized by the Customer.

2.8 Artificial Intelligence and Automation Data

Where Customers use artificial intelligence, machine learning, automation, analytics, or similar features, Ojoo may process prompts, inputs, outputs, configurations, instructions, and related data necessary to provide such functionality.

2.9 Information We Do Not Intentionally Collect

Ojoo does not intentionally collect sensitive personal information unless such information is voluntarily provided by Customers through the Services and is necessary for the requested functionality. Customers remain responsible for ensuring that any sensitive data processed through the Services complies with applicable laws and regulations.

Ojoo uses Personal Data and other information for legitimate business, operational, security, legal, and service-related purposes. The manner in which information is used depends on the nature of the Services, the relationship with the Customer, and the applicable legal requirements.

We may use information for the following purposes:

• To provide, operate, maintain, monitor, and improve the Services.
• To create, manage, verify, and administer customer accounts and user access permissions.
• To authenticate users and maintain account security.
• To deliver ERP, workflow automation, low-code, no-code, artificial intelligence, integration, and business management functionality.
• To process transactions, subscriptions, renewals, invoices, and payments.
• To provide customer support, onboarding, implementation, consulting, training, and technical assistance.
• To communicate with Customers and Users regarding the Services, updates, support requests, security notifications, and administrative matters.
• To analyze usage patterns, feature adoption, performance, reliability, and user experience.
• To develop, enhance, optimize, test, and improve existing products, features, and services.
• To identify, investigate, prevent, detect, and respond to fraud, abuse, unauthorized access, cybersecurity threats, and other security incidents.
• To maintain audit logs, security records, monitoring systems, and compliance-related documentation.
• To comply with legal obligations, regulatory requirements, contractual commitments, court orders, law enforcement requests, and governmental directives.
• To enforce our Terms of Service, Privacy Policy, contractual rights, and other applicable policies.
• To protect the rights, safety, property, security, and legitimate interests of Ojoo, Customers, Users, partners, and third parties.
• To conduct internal reporting, analytics, business intelligence, forecasting, research, risk management, and operational planning.
• To send product updates, educational materials, service-related communications, newsletters, event invitations, and marketing communications where permitted by applicable law.
• To create aggregated, anonymized, or de-identified information that does not identify any individual and may be used for analytics, reporting, benchmarking, research, security, product development, and business operations.

Ojoo will process Personal Data only to the extent necessary for the purposes described in this Privacy Policy, to fulfill contractual obligations, to comply with applicable laws, or as otherwise permitted or required by law.

Where required by applicable privacy and data protection laws, Ojoo processes Personal Data only when a valid legal basis exists for such processing. The legal basis applicable to a particular processing activity depends on the nature of the information involved, the purpose of processing, and the relationship between Ojoo and the individual whose Personal Data is being processed.

Ojoo may process Personal Data based on one or more of the following legal grounds:

• Performance of a Contract
  Processing is necessary to provide the Services, fulfill contractual obligations, manage subscriptions, process transactions, deliver support services, and perform activities requested by Customers and Users.
• Legitimate Business Interests
  Processing is necessary for the operation, administration, improvement, security, monitoring, analytics, risk management, fraud prevention, customer support, and development of the Services, provided such interests do not override applicable privacy rights.
• Consent
  Processing is based on consent where required by applicable law, including certain marketing communications, optional features, cookies, or specific data processing activities. Individuals may withdraw consent at any time, subject to legal or contractual limitations.
• Legal and Regulatory Obligations
  Processing is necessary to comply with applicable laws, regulations, court orders, government requests, tax obligations, accounting requirements, law enforcement requests, and other legal obligations.
• Protection of Rights and Interests
  Processing may be necessary to protect the rights, safety, security, property, or legitimate interests of Ojoo, Customers, Users, business partners, or other individuals.
• Compliance with applicable privacy laws, including the Digital Personal Data Protection Act, 2023 (India), where applicable.

Where Ojoo processes Personal Data on behalf of a Customer, the Customer remains responsible for determining and documenting the appropriate legal basis for such processing and for complying with applicable privacy and data protection laws.

The legal basis applicable to any specific processing activity may vary depending on the jurisdiction, nature of the Services, contractual relationship, and applicable legal requirements.

Ojoo uses cookies, tracking technologies, local storage, session identifiers, analytics tools, and similar technologies to operate, secure, improve, and personalize the Services. These technologies help us provide functionality, enhance user experience, analyze usage patterns, maintain security, and support business operations.

The technologies we use may collect information about devices, browsers, usage activity, preferences, and interactions with the Services.

Where required by applicable law, Ojoo may provide cookie consent mechanisms allowing users to manage non-essential cookies and tracking technologies.

5.1 Types of Cookies and Technologies We Use

• Essential Cookies
  Required for core platform functionality, authentication, security, account management, session management, and access control.
• Performance and Analytics Cookies
  Used to understand how users interact with the Services, monitor performance, identify errors, improve functionality, and enhance user experience.
• Preference Cookies
  Used to remember user preferences, settings, language selections, and other customization options.
• Security Cookies
  Used to detect suspicious activities, prevent unauthorized access, maintain platform security, and protect customer accounts.
• Functional Cookies
  Used to support additional features, integrations, workflows, and personalized service functionality.

5.2 Other Tracking Technologies

Ojoo may use technologies such as local storage, session tokens, application logs, device identifiers, pixels, APIs, monitoring tools, and similar technologies to support service delivery, diagnostics, security, and analytics.

5.3 Managing Cookies

Users may control or disable certain cookies through browser settings, device settings, or available consent management tools. However, disabling certain cookies or technologies may impact the functionality, availability, security, or performance of the Services.

5.4 Third-Party Analytics and Services

Ojoo may utilize trusted third-party service providers for analytics, monitoring, security, authentication, communications, performance measurement, and related operational purposes. Such providers may use cookies or similar technologies in accordance with their own privacy policies and applicable legal requirements.

5.5 Do Not Track Signals

Certain web browsers may provide "Do Not Track" signals or similar privacy preferences. Because there is currently no universally accepted industry standard for responding to such signals, Ojoo may not respond to all Do Not Track requests unless required by applicable law.

Additional information regarding the use of cookies and tracking technologies may be provided through a separate Cookie Policy, cookie consent banner, or other privacy notices where required by applicable law.

5.6 Website Analytics

Ojoo may use website analytics, application analytics, performance monitoring tools, and related technologies to better understand how Customers and Users interact with the Services. These tools help us improve functionality, user experience, platform performance, security, reliability, and overall service quality.

Analytics information may be collected directly by Ojoo or through trusted third-party analytics providers acting on our behalf, subject to applicable contractual, privacy, and security obligations.

Information collected through analytics technologies may include:

• Pages visited and navigation paths.
• Session duration and interaction patterns.
• Browser type, operating system, and device information.
• IP address or approximate geographic location.
• Referring websites and traffic sources.
• Clicks, scrolling activity, feature usage, and user interactions.
• Application performance, loading times, and error reports.
• Crash reports, diagnostics, and technical performance metrics.

Analytics information is used to improve the Services, identify technical issues, optimize performance, understand usage trends, develop new features, enhance security, detect fraudulent activity, and support business reporting and research.

Where required by applicable law, Customers and Users may manage analytics cookies and similar technologies through available cookie consent mechanisms or browser settings. Disabling certain analytics technologies may affect our ability to improve or optimize the Services but will not generally prevent access to essential platform functionality.

5.7 Advertising and Marketing Technologies

Ojoo may use cookies, pixels, tags, web beacons, conversion tracking technologies, and similar marketing technologies to measure the effectiveness of marketing campaigns, understand customer engagement, improve communications, and promote the Services in accordance with applicable laws.

Marketing technologies may be provided by Ojoo or trusted third-party service providers acting on our behalf. Such technologies may collect information relating to interactions with our websites, communications, advertisements, and marketing campaigns.

Information collected through marketing technologies may include:

• Visits to our websites and landing pages.
• Pages viewed and navigation activity.
• Referral sources and advertising campaigns.
• Clicks on advertisements, emails, or promotional content.
• Conversion events such as account registrations, inquiries, or purchases.
• Browser type, device information, and operating system.
• IP address and approximate geographic location.
• Marketing preferences and communication interactions.

Ojoo may use this information to evaluate marketing performance, improve customer engagement, personalize communications where permitted by applicable law, measure the effectiveness of advertising campaigns, and better understand customer interests and business needs.

Where required by applicable law, non-essential advertising and marketing technologies will only be used after obtaining appropriate consent. Customers and Users may manage their preferences through available cookie consent mechanisms, browser settings, or by opting out of marketing communications where applicable.

Ojoo does not sell Personal Data to third parties for their independent marketing purposes. Any use of advertising or marketing technologies will be subject to this Privacy Policy and applicable privacy and data protection laws.

Ojoo does not sell Customer Data or Personal Data. We may share, disclose, transfer, or make information available only where necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, protect legitimate interests, or as otherwise described in this Privacy Policy.

Information may be shared in the following circumstances:

6.1 Service Providers and Subprocessors

Ojoo may share information with trusted service providers, subprocessors, contractors, consultants, and technology partners who assist in providing, operating, maintaining, securing, supporting, and improving the Services.

Such providers may include cloud hosting providers, infrastructure providers, payment processors, communication providers, analytics providers, security providers, customer support providers, artificial intelligence service providers, and other operational partners.

6.2 Customer-Authorized Integrations

Where a Customer enables integrations, APIs, connected applications, or third-party services, information may be shared with such services as authorized by the Customer and subject to the configuration and permissions established by the Customer.

6.3 Affiliates and Corporate Entities

Ojoo may share information with affiliated companies, subsidiaries, parent organizations, or entities under common control where necessary for business operations, support, administration, compliance, security, or service delivery purposes.

6.4 Legal and Regulatory Requirements

Ojoo may disclose information where required or permitted by applicable law, regulation, court order, legal process, governmental request, regulatory inquiry, law enforcement request, or other legally binding requirement.

6.5 Protection of Rights and Security

Ojoo may disclose information where reasonably necessary to:

• Protect the rights, property, safety, or security of Ojoo.
• Protect Customers, Users, business partners, or third parties.
• Prevent fraud, abuse, cyber threats, unauthorized access, or security incidents.
• Enforce our Terms of Service, contractual rights, and policies.
• Investigate suspected unlawful activities or violations.

6.6 Business Transfers and Corporate Transactions

Information may be disclosed, transferred, or made available as part of a merger, acquisition, reorganization, restructuring, financing, investment, sale of assets, bankruptcy proceeding, or other corporate transaction involving Ojoo, subject to applicable confidentiality and legal requirements.

6.7 Professional Advisors

Ojoo may share information with legal advisors, auditors, accountants, consultants, insurers, compliance professionals, and other professional advisors where necessary for legitimate business, legal, regulatory, security, or operational purposes.

6.8 Aggregated and De-Identified Information

Ojoo may use, share, publish, disclose, or distribute aggregated, statistical, anonymized, or de-identified information that does not identify any individual, Customer, or User for analytics, research, reporting, benchmarking, security, product development, marketing, and business improvement purposes.

6.9 With Consent or Direction

Ojoo may share information where the individual, Customer, or User has provided consent, authorization, instruction, or direction for such sharing.

Except as described in this Privacy Policy or required by applicable law, Ojoo does not disclose Personal Data to third parties for their independent marketing purposes without appropriate authorization or consent.

Ojoo may process, store, access, transfer, transmit, back up, or otherwise handle Personal Data and Customer Data in countries other than the country in which such data was originally collected. Such transfers may occur as part of the provision, operation, maintenance, security, support, and improvement of the Services.

Customers acknowledge that the Services may utilize global cloud infrastructure, data centers, technology providers, subprocessors, support personnel, and service providers located in multiple jurisdictions.

7.1 Cross-Border Data Transfers

Where Personal Data is transferred across national borders, Ojoo shall take commercially reasonable measures to ensure that such transfers are conducted in accordance with applicable privacy, data protection, and information security laws.

7.2 Transfer Safeguards

Where required by applicable law, Ojoo may implement appropriate safeguards designed to protect Personal Data during international data transfers, including:

• Contractual commitments and data processing agreements.
• Confidentiality obligations.
• Technical and organizational security measures.
• Access controls and data protection procedures.
• Industry-standard security practices.
• Other lawful transfer mechanisms recognized by applicable law.

7.3 Cloud Infrastructure and Service Providers

Ojoo may utilize third-party cloud infrastructure providers, subprocessors, hosting providers, communication platforms, analytics providers, security providers, payment processors, artificial intelligence providers, and other service providers that may process data in different countries and regions.

7.4 Customer Responsibilities

Customers are responsible for determining whether their use of the Services complies with any applicable data residency, localization, cross-border transfer, industry-specific, contractual, regulatory, or governmental requirements applicable to their organization.

7.5 International Access

Customers and Users may access the Services from multiple countries and jurisdictions. By using the Services, Customers acknowledge and agree that information may be transferred to, stored in, processed in, or accessed from locations outside their country of residence.

7.6 Legal Compliance

Ojoo shall take reasonable steps to comply with applicable legal requirements relating to international data transfers; however, Ojoo does not guarantee that the Services will satisfy every jurisdiction's data residency, localization, or cross-border transfer requirements unless expressly agreed in writing.

Additional information regarding international data transfers may be provided through Data Processing Agreements (DPAs), customer contracts, security documentation, or other supplemental privacy notices where applicable.

7.7 Data Processing Agreements

Where required by applicable law or contractual obligations, Ojoo may enter into Data Processing Agreements (DPAs) with Customers governing the processing, protection, transfer, and handling of Personal Data.

7.8 Data Residency

Unless expressly agreed in writing, Ojoo does not guarantee that Customer Data will be stored exclusively within a specific country, region, or jurisdiction.

7.9 Customer-Hosted Deployments

Where Services are deployed within infrastructure owned, managed, or controlled by the Customer, Customer Data generally remains under the Customer's hosting environment. References to cross-border transfers, cloud hosting, and subprocessors apply only to the extent Ojoo or its authorized service providers access, process, support, or host such information.

7.10 Government Requests for Data

Ojoo may receive requests from courts, law enforcement agencies, regulatory authorities, governmental bodies, or other public authorities seeking access to Personal Data, Customer Data, or other information processed through the Services.

Ojoo will review such requests and will disclose information only where required or permitted by applicable law, a valid legal process, or a legally binding governmental or regulatory requirement.

• Ojoo may verify the authenticity, validity, scope, and legal authority of a request before disclosing any information.
• Where legally permitted and reasonably practicable, Ojoo may notify the affected Customer before disclosing Customer Data, allowing the Customer an opportunity to seek appropriate legal protection or challenge the request.
• Ojoo may object to, limit, or refuse requests that are determined to be unlawful, overly broad, disproportionate, or otherwise inconsistent with applicable legal requirements.
• Only the minimum amount of information reasonably necessary to comply with the applicable legal obligation will be disclosed, unless a broader disclosure is legally required.
• Ojoo may maintain records of governmental and regulatory requests for compliance, audit, security, legal, and operational purposes, subject to applicable confidentiality requirements.
• Nothing in this Privacy Policy requires Ojoo to notify a Customer where such notification is prohibited by law, court order, regulatory direction, or other legally binding restriction.

Customers remain responsible for ensuring that their use of the Services complies with applicable laws and for responding to governmental or regulatory requests directed to them in their capacity as the data controller or business responsible for the relevant Personal Data.

Ojoo retains Personal Data, Customer Data, and other information for as long as necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

8.1 Retention During Service Use

Customer Data and Personal Data are generally retained for the duration of the Customer's active use of the Services and as necessary to provide the functionality, features, support, integrations, and services requested by the Customer.

8.2 Account Termination and Service Expiration

Upon termination, cancellation, expiration, or non-renewal of a Customer's account or subscription, Ojoo may retain Customer Data for a limited period to facilitate account recovery, legal compliance, security investigations, dispute resolution, backup restoration, and other legitimate business purposes.

Following the applicable retention period, Customer Data may be deleted, anonymized, aggregated, archived, or otherwise disposed of in accordance with Ojoo's internal data management practices and applicable legal requirements.

Unless otherwise agreed in writing, Customer Data may remain available for export or recovery for up to thirty (30) days following account termination, after which Ojoo may permanently delete or anonymize such data in accordance with its retention practices and legal obligations.

8.3 Backup and Disaster Recovery Copies

Customer Data may continue to exist in backup systems, disaster recovery systems, archives, logs, or security records for a reasonable period following deletion requests or account termination. Such data will remain subject to applicable security, confidentiality, and access controls until permanently removed in accordance with Ojoo's retention practices.

8.4 Legal and Regulatory Retention Requirements

Ojoo may retain information for longer periods where required or permitted by applicable laws, regulations, court orders, governmental requests, legal proceedings, tax obligations, accounting requirements, audit requirements, compliance obligations, or other lawful purposes.

8.5 Security, Fraud Prevention, and Audit Records

Ojoo may retain logs, monitoring information, audit records, security events, authentication records, and related information for security, fraud prevention, compliance, risk management, operational, and business continuity purposes.

8.6 Customer Responsibilities

Customers are responsible for exporting, downloading, or otherwise retaining any Customer Data they wish to preserve before terminating their account or subscription. Ojoo does not guarantee the availability of Customer Data after applicable retention periods have expired.

8.7 Data Deletion Requests

Where permitted by applicable law, Customers and individuals may request the deletion of Personal Data. Such requests may be subject to legal, contractual, technical, operational, security, fraud prevention, audit, or regulatory limitations that require certain information to be retained.

8.8 Anonymized and Aggregated Information

Ojoo may retain anonymized, aggregated, statistical, or de-identified information that no longer identifies an individual, Customer, or User for analytics, research, security, product development, reporting, and business improvement purposes.

Retention periods may vary depending on the type of information, nature of the Services, contractual commitments, legal requirements, security considerations, and operational needs. Ojoo reserves the right to determine appropriate retention periods consistent with applicable laws and legitimate business requirements.

8.9 Data Accuracy

Ojoo relies on Customers and Users to provide accurate, complete, and up-to-date information in connection with the Services. Maintaining accurate information helps ensure the proper operation of accounts, communications, security features, billing, support services, and other platform functionality.

Customers and Users are responsible for promptly updating their Personal Data, account information, contact details, billing information, and other relevant records whenever such information changes.

• Customers are responsible for ensuring that Personal Data and Customer Data uploaded, stored, or processed through the Services is accurate, complete, and lawful.
• Ojoo may rely upon information provided by Customers and Users without independently verifying its accuracy unless otherwise required by applicable law.
• Failure to maintain accurate or current information may affect the availability, security, performance, or functionality of the Services, including the delivery of notices, support, and account-related communications.
• Ojoo is not responsible for any loss, damage, delay, or other consequence resulting from inaccurate, incomplete, outdated, or misleading information provided by Customers or Users.
• Where permitted by applicable law, Ojoo may update, correct, or remove information that is determined to be inaccurate, duplicated, incomplete, or inconsistent in order to maintain the integrity and security of the Services.

Customers and Users should periodically review their account information and promptly notify Ojoo of any inaccuracies or unauthorized changes affecting their Personal Data or account details.

Ojoo is committed to protecting the confidentiality, integrity, and availability of Personal Data, Customer Data, and other information processed through the Services. We implement and maintain reasonable administrative, technical, organizational, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, loss, misuse, or other security risks.

While no system, network, or method of electronic storage can be guaranteed to be completely secure, Ojoo continuously works to improve its security practices and reduce security risks through appropriate security controls and operational procedures.

9.1 Security Measures

Ojoo may implement security measures including:

• Access controls and user authentication mechanisms.
• Role-based permissions and authorization controls.
• Encryption of data during transmission using secure communication protocols where applicable.
• Monitoring, logging, and audit trail capabilities.
• Network security controls and infrastructure protection measures.
• Backup and disaster recovery procedures.
• Security incident detection and response processes.
• Vulnerability management and security maintenance activities.
• Employee and contractor confidentiality obligations.
• Physical, administrative, and operational safeguards appropriate to the Services.

9.2 Access Management

Access to Personal Data and Customer Data is restricted to authorized personnel, service providers, and subprocessors who require access to perform legitimate business, operational, support, security, or legal functions and who are subject to appropriate confidentiality and security obligations.

9.3 Customer Security Responsibilities

Customers are responsible for maintaining appropriate security controls within their organization, including:

• Protecting account credentials and authentication methods.
• Managing user access and permissions.
• Implementing appropriate password policies.
• Reviewing account activity and audit logs.
• Maintaining secure endpoint devices and networks.
• Complying with applicable security, privacy, and regulatory requirements.

9.4 Security Monitoring and Logging

Ojoo may collect, monitor, analyze, and retain logs, audit records, security events, authentication activity, diagnostic information, system events, and operational metrics for security, compliance, fraud prevention, troubleshooting, risk management, and service improvement purposes.

9.5 Security Incidents

Ojoo maintains processes designed to identify, investigate, manage, and respond to suspected security incidents affecting the Services. Where required by applicable law or contractual obligations, Ojoo may provide notifications regarding certain security incidents in accordance with applicable legal and regulatory requirements.

9.6 Third-Party Service Providers

Ojoo may utilize third-party infrastructure providers, cloud hosting providers, subprocessors, communication providers, payment processors, security providers, artificial intelligence providers, and other service providers. While Ojoo takes reasonable steps to select and manage such providers, Ojoo cannot guarantee the security practices, availability, or performance of third-party services.

9.7 No Absolute Security Guarantee

Although Ojoo employs reasonable security measures, no method of transmission over the Internet, electronic storage system, software platform, or technology environment can be guaranteed to be completely secure. Customers acknowledge and accept the inherent risks associated with electronic communications, cloud computing, and online services.

Unless expressly stated otherwise, no representation is made that Ojoo is certified under any specific security standard, framework, certification program, or regulatory scheme. Security measures may evolve from time to time based on business, operational, technical, legal, and security requirements.

9.8 Security Incident Notifications

Where required by applicable law or contractual obligations, Ojoo will notify affected Customers without undue delay after becoming aware of a confirmed security incident involving Personal Data.

9.9 Account Security Responsibilities

Customers and Users play an important role in maintaining the security of their accounts and the Services. While Ojoo implements reasonable security measures to protect the Platform, Customers and Users are responsible for maintaining the confidentiality and security of their account credentials and devices.

Customers and Users are responsible for:

• Maintaining the confidentiality of usernames, passwords, authentication credentials, API keys, access tokens, and other account security information.
• Using strong and unique passwords and changing them periodically where appropriate.
• Enabling multi-factor authentication (MFA) or similar security features where such functionality is available.
• Restricting account access to authorized individuals only and properly managing user roles and permissions.
• Maintaining the security of computers, mobile devices, networks, browsers, and other systems used to access the Services.
• Promptly notifying Ojoo of any suspected or actual unauthorized access, credential compromise, security breach, or suspicious account activity.
• Logging out of shared or public devices after using the Services and taking reasonable precautions to prevent unauthorized access.
• Reviewing account activity, audit logs, and security settings periodically to identify unauthorized or unexpected activity.

Ojoo is not responsible for any loss, damage, unauthorized access, or misuse resulting from the Customer's or User's failure to maintain appropriate account security or protect their authentication credentials, except where such liability cannot be excluded under applicable law.

9.10 Data Breach Notification

Ojoo maintains procedures designed to identify, investigate, contain, respond to, and recover from actual or suspected security incidents that may affect Personal Data or Customer Data processed through the Services.

Where Ojoo becomes aware of a confirmed Personal Data breach, we will take commercially reasonable steps to assess the nature and scope of the incident, mitigate its impact, and comply with applicable legal, contractual, and regulatory notification requirements.

• Where required by applicable law or contractual obligations, Ojoo will notify affected Customers without undue delay after becoming aware of a confirmed Personal Data breach.
• Notifications may include information regarding the nature of the incident, the categories of information affected, the likely impact of the breach, actions taken by Ojoo to address the incident, and recommended measures that Customers may take to reduce potential risks.
• Ojoo may provide updates as additional information becomes available during the investigation and remediation process.
• Where required by applicable law, Ojoo may notify competent regulatory authorities, supervisory authorities, or other government agencies regarding a confirmed Personal Data breach.
• Customers remain responsible for fulfilling any legal, regulatory, contractual, or industry-specific notification obligations applicable to information they control or process through the Services.
• Nothing in this Privacy Policy requires Ojoo to provide notice where notification is prohibited by law, would interfere with a law enforcement investigation, or is otherwise exempt under applicable legal requirements.

Ojoo will make commercially reasonable efforts to restore the security, integrity, and availability of the Services following a confirmed security incident; however, no security measure or technology can guarantee complete protection against all cybersecurity threats or unauthorized access.

Depending on your jurisdiction, applicable laws, and the nature of the Services provided, you may have certain rights regarding your Personal Data. Ojoo is committed to respecting and facilitating such rights in accordance with applicable privacy and data protection laws.

The availability of specific rights may vary depending on your location, the legal basis for processing, the type of information involved, and whether Ojoo acts as a data controller or processes information on behalf of a Customer.

10.1 Right of Access

You may request information regarding the Personal Data we maintain about you and, where applicable, request access to such information.

10.2 Right to Correction

You may request that inaccurate, incomplete, outdated, or incorrect Personal Data be corrected, updated, or completed.

10.3 Right to Deletion

Subject to applicable legal, contractual, security, operational, and regulatory requirements, you may request the deletion of certain Personal Data maintained by Ojoo.

10.4 Right to Restrict Processing

Where permitted by applicable law, you may request that the processing of certain Personal Data be restricted under specific circumstances.

10.5 Right to Data Portability

Where applicable, you may request a copy of certain Personal Data in a structured, commonly used, and machine-readable format.

10.6 Right to Object

You may object to certain processing activities where such rights are available under applicable law, including processing based on legitimate interests or direct marketing activities.

10.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of any processing conducted before such withdrawal.

10.8 Right to Opt-Out of Marketing Communications

You may opt out of receiving promotional, marketing, or non-essential communications from Ojoo by following the unsubscribe instructions included in such communications or by contacting us directly.

10.9 Right to Lodge a Complaint

Where permitted by applicable law, you may have the right to lodge a complaint with a competent supervisory authority, regulatory body, or data protection authority if you believe your privacy rights have been violated.

10.10 Exercising Your Rights

Requests relating to Personal Data may be submitted using the contact information provided in this Privacy Policy. Ojoo may require reasonable verification of identity before processing a request in order to protect privacy, security, and the rights of other individuals.

10.11 Customer-Controlled Data

Where Ojoo processes Personal Data solely on behalf of a Customer, requests relating to such Personal Data may need to be directed to the relevant Customer, who is responsible for determining how the data is processed and for responding to applicable privacy requests.

Certain rights may be limited, delayed, or unavailable where required to comply with applicable laws, contractual obligations, security requirements, fraud prevention measures, dispute resolution processes, regulatory requirements, or other legitimate business purposes.

10.12 Automated Decision-Making

Ojoo may use automated technologies, artificial intelligence, machine learning, workflow automation, business rules, and other automated processing capabilities to support the operation of the Services. These technologies are intended to assist Customers and Users by improving efficiency, productivity, analytics, reporting, recommendations, and workflow execution.

Automated processing may be used to perform activities such as:

• Processing workflows and business rules.
• Generating reports, summaries, recommendations, and analytics.
• Detecting security threats, fraud, abuse, or unusual account activity.
• Monitoring platform performance and system reliability.
• Providing AI-generated responses, suggestions, or content.
• Supporting customer service, automation, and operational processes.

Ojoo does not intentionally use automated decision-making processes that produce legal effects or similarly significant effects concerning an individual without appropriate human involvement, unless such processing is authorized by the Customer, required to provide the requested Services, necessary to perform a contract, or otherwise permitted or required by applicable law.

Where required by applicable law, individuals may have the right to request human review of certain automated decisions, express their point of view, contest a decision, or request additional information regarding the processing of their Personal Data.

Customers remain responsible for reviewing, validating, and approving decisions, recommendations, reports, AI-generated outputs, workflow results, and other automated processing performed through the Services before relying upon or acting on such information.

The Services are intended for use by businesses, organizations, professionals, and individuals who are legally capable of entering into binding agreements. The Services are not directed to, intended for, or designed for use by children.

Ojoo does not knowingly collect, solicit, process, store, or maintain Personal Data directly from children under the age required by applicable law to provide valid consent for data processing without appropriate parental or guardian authorization.

• Individuals who do not meet the minimum legal age requirements applicable in their jurisdiction should not create accounts or use the Services without appropriate authorization where permitted by law.
• Customers are responsible for ensuring that their use of the Services complies with all applicable laws relating to minors, children, students, dependents, or other protected individuals.
• Where Customers upload, process, or manage information relating to children through the Services, Customers remain solely responsible for obtaining all required consents, permissions, notices, and legal authorizations.
• If Ojoo becomes aware that Personal Data has been collected from a child in violation of applicable law, Ojoo may take reasonable steps to delete, restrict, anonymize, or otherwise address such information as required by law.

Parents, guardians, educational institutions, or other authorized persons who believe that a child may have provided Personal Data to Ojoo in violation of applicable law may contact us using the contact information provided in this Privacy Policy.

Ojoo reserves the right to request reasonable information to verify the identity and authority of any individual seeking to exercise rights on behalf of a child or dependent individual.

Ojoo may integrate with, utilize, or provide access to third-party products, services, applications, platforms, APIs, infrastructure, software, and technologies ("Third-Party Services") to support the delivery, operation, functionality, security, and enhancement of the Services.

Third-Party Services may include cloud infrastructure providers, payment processors, communication platforms, authentication services, analytics providers, artificial intelligence providers, integration partners, and other technology vendors.

12.1 Customer-Enabled Integrations

Customers may choose to connect, enable, configure, or integrate Third-Party Services with the Services. Where such integrations are enabled, information may be exchanged between the Services and the applicable Third-Party Service in accordance with the permissions, configurations, and instructions established by the Customer.

12.2 Independent Third Parties

Third-Party Services are owned, operated, and controlled by independent organizations that are not under the control of Ojoo. Such services are subject to their own terms, privacy policies, security practices, and legal requirements.

12.3 Information Sharing

Where necessary to provide the Services or where authorized by the Customer, Ojoo may share information with Third-Party Services in accordance with this Privacy Policy, applicable agreements, and Customer instructions.

12.4 Third-Party Privacy Practices

Ojoo is not responsible for the privacy practices, security measures, availability, performance, content, policies, or actions of Third-Party Services. Customers and Users should review the applicable privacy policies, terms, and documentation of such providers before enabling or using them.

12.5 Third-Party Infrastructure Providers

Ojoo may utilize third-party infrastructure providers, hosting providers, cloud service providers, content delivery networks, communication providers, authentication providers, analytics services, payment processors, artificial intelligence providers, monitoring providers, and other technology partners to support the operation of the Services.

12.6 Third-Party Links and Websites

The Services may contain links to third-party websites, resources, or services. Ojoo does not endorse or assume responsibility for the content, privacy practices, security measures, or activities of such third-party websites or services.

12.7 Customer Responsibility

Customers are responsible for evaluating the suitability, compliance, security, and privacy implications of any Third-Party Services they choose to connect to or use in conjunction with the Services.

12.8 Changes to Third-Party Services

Ojoo may add, modify, replace, suspend, discontinue, or remove support for Third-Party Services at any time based on business, operational, technical, security, legal, or commercial considerations.

Use of Third-Party Services is at the Customer's own risk and may be subject to additional agreements, terms, privacy policies, licensing requirements, and fees imposed by the applicable third-party provider.

12.9 Open Source Software

The Services may include, incorporate, or utilize open source software, libraries, frameworks, components, utilities, or other software distributed under one or more open source licenses ("Open Source Software"). Such Open Source Software may be provided by independent third-party developers and communities.

Open Source Software is included to support the functionality, performance, security, interoperability, development, and operation of the Services.

• Use of Open Source Software is subject to the applicable open source license terms governing the relevant component.
• Nothing in this Privacy Policy modifies, replaces, or limits any rights or obligations arising under applicable open source licenses.
• Ojoo may update, replace, modify, or remove Open Source Software components as part of product improvements, security updates, maintenance, bug fixes, or operational requirements.
• Open Source Software may be developed, maintained, or updated by independent third parties over whom Ojoo has no control.
• Ojoo makes no separate representations or warranties regarding Open Source Software beyond those required by applicable law or the applicable open source license.
• Where Open Source Software processes Personal Data on behalf of Ojoo as part of the Services, such processing will be subject to the security measures, privacy practices, and operational controls described in this Privacy Policy.

Customers acknowledge that certain Open Source Software components may be governed by their respective license terms, copyright notices, and attribution requirements, which remain applicable in accordance with the relevant licenses.

12.10 Developer APIs

Ojoo may provide Application Programming Interfaces ("APIs"), Software Development Kits ("SDKs"), webhooks, developer tools, integration services, and related technologies to enable Customers and authorized third parties to interact with the Services programmatically.

Use of Developer APIs is subject to the applicable Terms of Service, API documentation, security requirements, usage limits, and any additional agreements governing such services.

• Developer APIs may process Personal Data, Customer Data, authentication credentials, API keys, access tokens, requests, responses, logs, and other technical information necessary to provide the requested functionality.
• Ojoo may collect and retain API usage logs, request metadata, performance metrics, diagnostic information, error reports, and security events for service operation, monitoring, security, troubleshooting, analytics, compliance, and fraud prevention purposes.
• Customers are responsible for protecting API keys, access tokens, client secrets, webhook credentials, and other authentication mechanisms from unauthorized access or misuse.
• Customers shall ensure that applications, integrations, and services using the Developer APIs comply with applicable laws, this Privacy Policy, the Terms of Service, and all relevant security and privacy requirements.
• Ojoo may implement authentication requirements, encryption, rate limits, access controls, monitoring, or other security measures to protect the integrity, availability, and security of the Developer APIs.
• Ojoo reserves the right to modify, suspend, restrict, deprecate, or discontinue Developer APIs or specific API features where necessary for security, legal, operational, technical, or business reasons.

Customers remain responsible for ensuring that any Personal Data processed through Developer APIs is collected, used, shared, and protected in accordance with applicable privacy laws, contractual obligations, and their own privacy notices or policies.

Ojoo may provide artificial intelligence ("AI"), machine learning, automation, predictive analytics, recommendation engines, intelligent workflows, chatbots, virtual assistants, content generation tools, and other automated processing capabilities as part of the Services.

These features are designed to assist Customers and Users in improving productivity, efficiency, decision-making, business operations, and workflow automation. AI and automated processing capabilities may be powered by Ojoo, third-party providers, or a combination of both.

Ojoo does not use Customer Data, Personal Data, or customer content submitted through the Services to train general-purpose artificial intelligence models unless expressly authorized by the Customer.

13.1 AI Inputs and Outputs

When Customers or Users utilize AI features, information, prompts, instructions, queries, documents, content, configurations, or other inputs submitted to such features may be processed to generate outputs, responses, recommendations, summaries, automations, insights, reports, or other results.

13.2 No Guarantee of Accuracy

AI-generated outputs may contain inaccuracies, omissions, errors, biases, outdated information, incomplete information, or content that may not be suitable for a particular purpose. Customers and Users are responsible for independently reviewing, validating, and verifying all AI-generated outputs before relying upon them.

13.3 Human Review Responsibility

Customers remain solely responsible for all business decisions, financial decisions, legal determinations, compliance activities, operational actions, workflow executions, approvals, communications, and other activities based on AI-generated outputs or automated processing results.

13.4 Automated Processing

The Services may perform automated processing, workflow execution, notifications, approvals, routing, calculations, integrations, analytics, reporting, and other automated activities based on Customer configurations, business rules, workflows, and instructions.

Customers are responsible for testing, validating, monitoring, and maintaining automated workflows and configurations before using them for production, operational, financial, legal, compliance, or business-critical purposes.

13.5 Third-Party AI Providers

Certain AI features may utilize third-party artificial intelligence providers, language models, machine learning services, analytics providers, or related technologies. Information processed through such features may be subject to additional terms, privacy policies, and security practices of the applicable provider.

13.6 AI Service Improvements

Ojoo may use anonymized, aggregated, de-identified, statistical, or non-personally identifiable information derived from AI feature usage for service improvement, model optimization, security, analytics, research, performance monitoring, and product development purposes.

13.7 Restrictions on AI Usage

Customers and Users shall not use AI features in a manner that violates applicable laws, infringes intellectual property rights, processes unlawful content, generates harmful content, circumvents security controls, or otherwise violates the Terms of Service or applicable policies.

13.8 No Professional Advice

AI-generated content, recommendations, insights, reports, summaries, predictions, and outputs are provided for informational and operational purposes only and do not constitute legal, accounting, tax, financial, medical, regulatory, compliance, employment, or professional advice.

To the maximum extent permitted by applicable law, Ojoo shall not be liable for any loss, damage, business interruption, compliance failure, regulatory action, financial loss, operational impact, or other consequence arising from the use of AI features, automated processing, or reliance upon AI-generated outputs.

13.9 AI Model Training and Customer Data

Ojoo respects the confidentiality of Customer Data and Personal Data processed through the Services. Unless expressly authorized by the Customer or required by applicable law, Ojoo does not use Customer Data, Personal Data, uploaded files, prompts, inputs, outputs, or other customer content submitted through the Services to train, retrain, fine-tune, or improve general-purpose artificial intelligence or machine learning models.

Where artificial intelligence features are provided through third-party AI service providers, Customer Data may be processed solely for the purpose of generating the requested responses, outputs, or functionality in accordance with applicable agreements, privacy obligations, and security requirements.

• Customer Data submitted to AI features will be processed only to the extent reasonably necessary to provide the requested AI functionality or related Services.
• Ojoo does not permit Customer Data or Personal Data to be used for unrelated AI model training, advertising, or marketing purposes without the Customer's explicit consent, except where required by applicable law.
• Ojoo may use anonymized, aggregated, de-identified, or statistical information that cannot reasonably identify an individual or Customer for service improvement, analytics, performance monitoring, security, research, product development, and operational purposes.
• Where third-party AI providers are used, the processing of Customer Data will be subject to appropriate contractual, technical, and organizational safeguards designed to protect such information.
• Customers remain responsible for determining whether the information they submit to AI features is appropriate for processing and complies with applicable privacy laws, contractual obligations, and internal organizational policies.

If Ojoo introduces any future AI features that require the use of Customer Data for AI model training or improvement, such processing will only occur with an appropriate legal basis, applicable notices, and, where required by law, the Customer's prior consent or authorization.

13.10 Biometric, Camera, Voice and Sensor Data

Certain features of the Services may require access to a Customer's or User's camera, microphone, biometric information, motion sensors, device sensors, or similar hardware capabilities to provide requested functionality, including artificial intelligence features, computer vision, gesture recognition, facial analysis, voice interactions, augmented reality, video conferencing, or other interactive services.

Access to such capabilities will occur only with the Customer's or User's permission and only to the extent necessary to provide the requested functionality, subject to applicable laws and device permission settings.

• Camera, microphone, biometric, or sensor data is processed only for the specific feature or service requested by the Customer or User.
• Ojoo does not intentionally collect, store, or retain biometric identifiers or biometric information for identification purposes unless expressly disclosed, authorized by the Customer, or required to provide a specific Service.
• Where images, video, audio, or sensor data are processed, such information may be handled temporarily to generate the requested output, perform analysis, enable interactive features, or improve service functionality.
• Unless otherwise stated or required by applicable law, camera feeds, voice recordings, biometric information, and sensor data are not retained longer than reasonably necessary to provide the requested functionality.
• Customers are responsible for obtaining all necessary consents, notices, and legal authorizations before collecting or processing images, voice recordings, biometric information, or sensor data relating to other individuals through the Services.
• Where third-party service providers are used to process camera, voice, biometric, or sensor data, such processing will be subject to applicable contractual, privacy, and security obligations.
• Customers and Users may revoke camera, microphone, or sensor permissions at any time through their browser, device, or operating system settings; however, doing so may limit or disable certain features of the Services.

Ojoo will process biometric, camera, voice, and sensor data only for legitimate business purposes, requested functionality, security, or operational requirements and in accordance with applicable privacy, biometric, and data protection laws.

13.11 Location Information

Certain features of the Services may request or process location-related information to provide location-based functionality, improve user experience, enhance security, support regional services, comply with legal requirements, or deliver features requested by Customers and Users.

Location information may be obtained directly from the Customer or User, from device settings, browser permissions, network information, or other technologies, subject to applicable laws and user permissions.

• Location information may include precise location data, approximate geographic location, IP address-based location, GPS coordinates, Wi-Fi network information, cellular network information, or other location-related data where supported by the device and authorized by the Customer or User.
• Location information may be used to provide requested features, improve security, detect fraudulent activity, customize regional settings, comply with legal obligations, or support business operations.
• Where precise location information is required, Ojoo will request appropriate permission through the Customer's or User's browser, device, or operating system before accessing such information.
• Customers and Users may disable or revoke location permissions at any time through their browser, device, or operating system settings; however, certain location-based features of the Services may become unavailable or function with reduced capability.
• Location information may be shared with trusted third-party service providers only to the extent necessary to provide the requested Services and in accordance with this Privacy Policy, applicable contractual obligations, and relevant privacy laws.
• Ojoo does not use precise location information for unrelated advertising or marketing purposes without the Customer's or User's consent where such consent is required by applicable law.

Location information will be processed only for legitimate business purposes, requested functionality, security, operational requirements, or legal compliance, and will be protected in accordance with this Privacy Policy and applicable privacy and data protection laws.

Ojoo may update, modify, revise, or replace this Privacy Policy from time to time to reflect changes in our Services, business practices, technologies, legal requirements, regulatory obligations, security practices, or operational needs.

When material changes are made to this Privacy Policy, Ojoo may provide notice through one or more of the following methods:

• Posting the updated Privacy Policy on our website.
• Displaying notices within the Services.
• Sending notifications through registered user accounts.
• Sending email communications to Customers or Users.
• Using other reasonable communication methods.

The "Last Updated" date displayed within this Privacy Policy indicates the effective date of the most recent revision.

Customers and Users are encouraged to periodically review this Privacy Policy to remain informed about how Personal Data is collected, used, processed, disclosed, retained, and protected.

Continued access to or use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

Where required by applicable law, Ojoo will obtain consent, provide additional notice, or implement other measures before certain changes become effective.

Nothing in this section limits any rights or obligations arising under applicable privacy, data protection, cybersecurity, consumer protection, or other applicable laws.

14.1 Business Transfers and Corporate Reorganization

Ojoo may, from time to time, undergo or participate in business transactions or corporate events, including mergers, acquisitions, investments, financings, reorganizations, restructuring, joint ventures, asset sales, transfers of business operations, bankruptcy proceedings, or similar corporate transactions.

In connection with such transactions, Personal Data, Customer Data, account information, contracts, and other business records may be transferred, disclosed, or otherwise made available to prospective or actual purchasers, successors, affiliated entities, investors, lenders, professional advisors, or other authorized parties, subject to appropriate confidentiality, security, and legal obligations.

• Any transfer of Personal Data will be carried out in accordance with applicable privacy, data protection, and other applicable laws.
• Recipients of transferred information may be required to protect such information using security and confidentiality measures substantially consistent with those described in this Privacy Policy.
• Where required by applicable law, Ojoo may provide notice to Customers or Users regarding material business transfers or changes affecting the processing of Personal Data.
• A business transfer will not, by itself, authorize the use of Personal Data for purposes materially inconsistent with this Privacy Policy unless otherwise permitted or required by applicable law.
• Following completion of a corporate transaction, the successor entity may continue to process Personal Data in accordance with this Privacy Policy or a successor privacy policy communicated to affected Customers and Users.
• Nothing in this section limits Ojoo's obligations under applicable contractual commitments, confidentiality agreements, Data Processing Agreements (DPAs), or applicable privacy and data protection laws.

Customers acknowledge that business transfers and corporate reorganizations are normal aspects of business operations and that the transfer of Personal Data may be necessary to ensure the continued operation, maintenance, and delivery of the Services.

14.2 Marketing Communications

Ojoo may send Customers and Users marketing, promotional, educational, product-related, and other communications regarding the Services, new features, updates, events, webinars, newsletters, offers, and business opportunities, where permitted by applicable law.

Marketing communications may be delivered through various channels, including email, SMS, telephone, mobile applications, browser notifications, in-product messages, social media platforms, or other electronic communication methods.

• Customers and Users may opt out of receiving promotional or marketing communications at any time by following the unsubscribe instructions included in such communications or by contacting Ojoo using the contact information provided in this Privacy Policy.
• Even where a Customer or User opts out of marketing communications, Ojoo may continue to send transactional, administrative, security, billing, legal, compliance, or service-related communications that are necessary for the operation of the Services or the management of customer accounts.
• Ojoo may personalize marketing communications based on account preferences, previous interactions, product usage, or other information, where such personalization is permitted by applicable law.
• Ojoo will obtain consent for marketing communications where required by applicable privacy, electronic communications, or consumer protection laws.
• Customers remain responsible for ensuring that contact information associated with their accounts is accurate and up to date to facilitate the delivery of important service communications.
• Ojoo does not sell Personal Data to third parties for their independent direct marketing purposes without the Customer's or User's consent where such consent is required by applicable law.

Preferences relating to marketing communications do not affect communications that are necessary to provide the Services, comply with legal obligations, protect account security, or administer customer accounts.

If you have any questions, concerns, requests, complaints, or inquiries regarding this Privacy Policy, the Services, or the processing of Personal Data, you may contact Ojoo using the information provided below.

Ojoo will make commercially reasonable efforts to respond to privacy, security, and data protection inquiries within a reasonable timeframe, subject to applicable legal, operational, and verification requirements.

Where required by applicable law, Customers, Users, and data subjects may submit requests relating to access, correction, deletion, restriction, portability, objection, consent withdrawal, or other privacy rights using the contact information provided above.

For security and privacy reasons, Ojoo may require reasonable identity verification before processing requests relating to Personal Data.

This Privacy Policy is effective as of the Last Updated date stated above and applies to all Services provided by Ojoo unless otherwise specified in a separate agreement, privacy notice, or contractual commitment.