Privacy Policy

Last Updated: 29/05/2026

Welcome to Ojoo ("Ojoo", "Company", "we", "our", or "us"). We are committed to protecting the privacy, confidentiality, and security of Personal Data entrusted to us by our customers, users, business partners, and website visitors.

This Privacy Policy explains how we collect, use, store, process, disclose, transfer, and protect Personal Data when you access or use our low-code platform, no-code platform, ERP solutions, workflow automation tools, business process management services, artificial intelligence features, websites, mobile applications, APIs, integrations, and related services (collectively, the "Services").

We recognize the importance of privacy and are committed to processing Personal Data responsibly and in accordance with applicable privacy, data protection, cybersecurity, and information security laws.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of this Privacy Policy

This Privacy Policy applies to the collection, use, processing, storage, disclosure, transfer, protection, and retention of Personal Data by Ojoo in connection with the provision of its Services.

This Privacy Policy applies to Personal Data collected through:

• Ojoo websites, web applications, and online platforms.
• Low-Code and No-Code application development services.
• Enterprise Resource Planning (ERP) modules and business management solutions.
• Workflow automation, business process management, and digital transformation tools.
• Artificial intelligence, automation, analytics, and reporting features.
• Customer accounts, user portals, and administrative interfaces.
• Mobile applications and related services.
• Application Programming Interfaces (APIs), integrations, and developer services.
• Customer support, onboarding, implementation, training, and consulting activities.
• Sales, marketing, events, webinars, surveys, and communications.
• Third-party integrations, partner services, and connected applications.

This Privacy Policy applies to Customers, Users, website visitors, prospective customers, business partners, contractors, and other individuals whose Personal Data may be processed in connection with the Services.

Where Ojoo processes Personal Data solely on behalf of a Customer, Ojoo generally acts as a data processor, service provider, or similar role under applicable privacy laws, while the Customer acts as the data controller or business responsible for determining the purposes and means of processing such Personal Data.

This Privacy Policy does not apply to third-party websites, products, services, applications, platforms, or content that are not owned, operated, or controlled by Ojoo, even if such services are accessible through integrations or links provided within the Services.

Additional privacy notices, product-specific disclosures, Data Processing Agreements (DPAs), contractual commitments, or regional privacy requirements may supplement this Privacy Policy where applicable.

1.1 Data Controller and Data Processor Roles

Depending on the circumstances, Ojoo may act as a Data Controller, Data Processor, Service Provider, or similar role under applicable privacy laws.

Where Customers upload, manage, or process Personal Data through the Services, the Customer generally acts as the Data Controller and Ojoo acts as a Data Processor or Service Provider on behalf of the Customer.

2. Information We Collect

Ojoo may collect, receive, generate, store, process, and otherwise handle information from Customers, Users, website visitors, business partners, and other individuals in connection with the provision, operation, support, security, and improvement of the Services.

The types of information we collect may include the following:

2.1 Account and Registration Information

When creating an account or registering for the Services, we may collect:

• Full name
• Email address
• Phone number
• Company or organization name
• Job title and department
• Business address
• Account credentials and authentication information
• User profile information

2.2 Customer Data

Customers may upload, create, store, process, transmit, or otherwise manage information through the Services. Such information may include:

• Business records and operational data
• Employee information
• Customer and client information
• Vendor and supplier information
• Financial and accounting records
• Inventory and procurement information
• Project and workflow information
• Documents, files, images, and attachments
• Forms, reports, dashboards, and analytics data
• Applications, automations, and workflows created using the Platform

2.3 Technical and Device Information

We may automatically collect technical information relating to devices, systems, and networks used to access the Services, including:

• IP addresses
• Device identifiers
• Browser type and version
• Operating system information
• Language preferences
• Time zone settings
• Network and connection information
• System configuration data
• Application version information

2.4 Usage and Activity Information

We may collect information regarding how the Services are accessed and used, including:

• Login and authentication activity
• User actions and navigation activity
• Feature usage metrics
• Workflow and automation execution activity
• API requests and responses
• Audit logs and system events
• Error reports and diagnostics
• Performance and reliability metrics

2.5 Payment and Billing Information

When purchasing subscriptions or services, payment-related information may be collected and processed by authorized payment processors. Depending on the payment method used, information may include:

• Billing contact information
• Billing address
• Tax identification information
• Transaction and invoice details
• Subscription and payment history

Ojoo generally does not store complete payment card information and relies on secure third-party payment providers for payment processing.

2.6 Communications Information

We may collect information when you communicate with us, including:

• Customer support requests
• Email correspondence
• Chat conversations
• Survey responses
• Feedback and testimonials
• Training and onboarding interactions
• Sales and business communications

2.7 Information from Third-Party Services

Where Customers enable integrations or connect third-party services, Ojoo may receive information from such services as authorized by the Customer.

2.8 Artificial Intelligence and Automation Data

Where Customers use artificial intelligence, machine learning, automation, analytics, or similar features, Ojoo may process prompts, inputs, outputs, configurations, instructions, and related data necessary to provide such functionality.

2.9 Information We Do Not Intentionally Collect

Ojoo does not intentionally collect sensitive personal information unless such information is voluntarily provided by Customers through the Services and is necessary for the requested functionality. Customers remain responsible for ensuring that any sensitive data processed through the Services complies with applicable laws and regulations.

3. How We Use Information

Ojoo uses Personal Data and other information for legitimate business, operational, security, legal, and service-related purposes. The manner in which information is used depends on the nature of the Services, the relationship with the Customer, and the applicable legal requirements.

We may use information for the following purposes:

• To provide, operate, maintain, monitor, and improve the Services.
• To create, manage, verify, and administer customer accounts and user access permissions.
• To authenticate users and maintain account security.
• To deliver ERP, workflow automation, low-code, no-code, artificial intelligence, integration, and business management functionality.
• To process transactions, subscriptions, renewals, invoices, and payments.
• To provide customer support, onboarding, implementation, consulting, training, and technical assistance.
• To communicate with Customers and Users regarding the Services, updates, support requests, security notifications, and administrative matters.
• To analyze usage patterns, feature adoption, performance, reliability, and user experience.
• To develop, enhance, optimize, test, and improve existing products, features, and services.
• To identify, investigate, prevent, detect, and respond to fraud, abuse, unauthorized access, cybersecurity threats, and other security incidents.
• To maintain audit logs, security records, monitoring systems, and compliance-related documentation.
• To comply with legal obligations, regulatory requirements, contractual commitments, court orders, law enforcement requests, and governmental directives.
• To enforce our Terms of Service, Privacy Policy, contractual rights, and other applicable policies.
• To protect the rights, safety, property, security, and legitimate interests of Ojoo, Customers, Users, partners, and third parties.
• To conduct internal reporting, analytics, business intelligence, forecasting, research, risk management, and operational planning.
• To send product updates, educational materials, service-related communications, newsletters, event invitations, and marketing communications where permitted by applicable law.
• To create aggregated, anonymized, or de-identified information that does not identify any individual and may be used for analytics, reporting, benchmarking, research, security, product development, and business operations.

Ojoo will process Personal Data only to the extent necessary for the purposes described in this Privacy Policy, to fulfill contractual obligations, to comply with applicable laws, or as otherwise permitted or required by law.

4. Legal Bases for Processing

Where required by applicable privacy and data protection laws, Ojoo processes Personal Data only when a valid legal basis exists for such processing. The legal basis applicable to a particular processing activity depends on the nature of the information involved, the purpose of processing, and the relationship between Ojoo and the individual whose Personal Data is being processed.

Ojoo may process Personal Data based on one or more of the following legal grounds:

• Performance of a Contract
  Processing is necessary to provide the Services, fulfill contractual obligations, manage subscriptions, process transactions, deliver support services, and perform activities requested by Customers and Users.
• Legitimate Business Interests
  Processing is necessary for the operation, administration, improvement, security, monitoring, analytics, risk management, fraud prevention, customer support, and development of the Services, provided such interests do not override applicable privacy rights.
• Consent
  Processing is based on consent where required by applicable law, including certain marketing communications, optional features, cookies, or specific data processing activities. Individuals may withdraw consent at any time, subject to legal or contractual limitations.
• Legal and Regulatory Obligations
  Processing is necessary to comply with applicable laws, regulations, court orders, government requests, tax obligations, accounting requirements, law enforcement requests, and other legal obligations.
• Protection of Rights and Interests
  Processing may be necessary to protect the rights, safety, security, property, or legitimate interests of Ojoo, Customers, Users, business partners, or other individuals.
• Compliance with applicable privacy laws, including the Digital Personal Data Protection Act, 2023 (India), where applicable.

Where Ojoo processes Personal Data on behalf of a Customer, the Customer remains responsible for determining and documenting the appropriate legal basis for such processing and for complying with applicable privacy and data protection laws.

The legal basis applicable to any specific processing activity may vary depending on the jurisdiction, nature of the Services, contractual relationship, and applicable legal requirements.

5. Cookies and Tracking Technologies

Ojoo uses cookies, tracking technologies, local storage, session identifiers, analytics tools, and similar technologies to operate, secure, improve, and personalize the Services. These technologies help us provide functionality, enhance user experience, analyze usage patterns, maintain security, and support business operations.

The technologies we use may collect information about devices, browsers, usage activity, preferences, and interactions with the Services.

Where required by applicable law, Ojoo may provide cookie consent mechanisms allowing users to manage non-essential cookies and tracking technologies.

5.1 Types of Cookies and Technologies We Use

• Essential Cookies
  Required for core platform functionality, authentication, security, account management, session management, and access control.
• Performance and Analytics Cookies
  Used to understand how users interact with the Services, monitor performance, identify errors, improve functionality, and enhance user experience.
• Preference Cookies
  Used to remember user preferences, settings, language selections, and other customization options.
• Security Cookies
  Used to detect suspicious activities, prevent unauthorized access, maintain platform security, and protect customer accounts.
• Functional Cookies
  Used to support additional features, integrations, workflows, and personalized service functionality.

5.2 Other Tracking Technologies

Ojoo may use technologies such as local storage, session tokens, application logs, device identifiers, pixels, APIs, monitoring tools, and similar technologies to support service delivery, diagnostics, security, and analytics.

5.3 Managing Cookies

Users may control or disable certain cookies through browser settings, device settings, or available consent management tools. However, disabling certain cookies or technologies may impact the functionality, availability, security, or performance of the Services.

5.4 Third-Party Analytics and Services

Ojoo may utilize trusted third-party service providers for analytics, monitoring, security, authentication, communications, performance measurement, and related operational purposes. Such providers may use cookies or similar technologies in accordance with their own privacy policies and applicable legal requirements.

5.5 Do Not Track Signals

Certain web browsers may provide "Do Not Track" signals or similar privacy preferences. Because there is currently no universally accepted industry standard for responding to such signals, Ojoo may not respond to all Do Not Track requests unless required by applicable law.

Additional information regarding the use of cookies and tracking technologies may be provided through a separate Cookie Policy, cookie consent banner, or other privacy notices where required by applicable law.

6. Sharing and Disclosure of Information

Ojoo does not sell Customer Data or Personal Data. We may share, disclose, transfer, or make information available only where necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, protect legitimate interests, or as otherwise described in this Privacy Policy.

Information may be shared in the following circumstances:

6.1 Service Providers and Subprocessors

Ojoo may share information with trusted service providers, subprocessors, contractors, consultants, and technology partners who assist in providing, operating, maintaining, securing, supporting, and improving the Services.

Such providers may include cloud hosting providers, infrastructure providers, payment processors, communication providers, analytics providers, security providers, customer support providers, artificial intelligence service providers, and other operational partners.

6.2 Customer-Authorized Integrations

Where a Customer enables integrations, APIs, connected applications, or third-party services, information may be shared with such services as authorized by the Customer and subject to the configuration and permissions established by the Customer.

6.3 Affiliates and Corporate Entities

Ojoo may share information with affiliated companies, subsidiaries, parent organizations, or entities under common control where necessary for business operations, support, administration, compliance, security, or service delivery purposes.

6.4 Legal and Regulatory Requirements

Ojoo may disclose information where required or permitted by applicable law, regulation, court order, legal process, governmental request, regulatory inquiry, law enforcement request, or other legally binding requirement.

6.5 Protection of Rights and Security

Ojoo may disclose information where reasonably necessary to:

• Protect the rights, property, safety, or security of Ojoo.
• Protect Customers, Users, business partners, or third parties.
• Prevent fraud, abuse, cyber threats, unauthorized access, or security incidents.
• Enforce our Terms of Service, contractual rights, and policies.
• Investigate suspected unlawful activities or violations.

6.6 Business Transfers and Corporate Transactions

Information may be disclosed, transferred, or made available as part of a merger, acquisition, reorganization, restructuring, financing, investment, sale of assets, bankruptcy proceeding, or other corporate transaction involving Ojoo, subject to applicable confidentiality and legal requirements.

6.7 Professional Advisors

Ojoo may share information with legal advisors, auditors, accountants, consultants, insurers, compliance professionals, and other professional advisors where necessary for legitimate business, legal, regulatory, security, or operational purposes.

6.8 Aggregated and De-Identified Information

Ojoo may use, share, publish, disclose, or distribute aggregated, statistical, anonymized, or de-identified information that does not identify any individual, Customer, or User for analytics, research, reporting, benchmarking, security, product development, marketing, and business improvement purposes.

6.9 With Consent or Direction

Ojoo may share information where the individual, Customer, or User has provided consent, authorization, instruction, or direction for such sharing.

Except as described in this Privacy Policy or required by applicable law, Ojoo does not disclose Personal Data to third parties for their independent marketing purposes without appropriate authorization or consent.

7. International Data Transfers

Ojoo may process, store, access, transfer, transmit, back up, or otherwise handle Personal Data and Customer Data in countries other than the country in which such data was originally collected. Such transfers may occur as part of the provision, operation, maintenance, security, support, and improvement of the Services.

Customers acknowledge that the Services may utilize global cloud infrastructure, data centers, technology providers, subprocessors, support personnel, and service providers located in multiple jurisdictions.

7.1 Cross-Border Data Transfers

Where Personal Data is transferred across national borders, Ojoo shall take commercially reasonable measures to ensure that such transfers are conducted in accordance with applicable privacy, data protection, and information security laws.

7.2 Transfer Safeguards

Where required by applicable law, Ojoo may implement appropriate safeguards designed to protect Personal Data during international data transfers, including:

• Contractual commitments and data processing agreements.
• Confidentiality obligations.
• Technical and organizational security measures.
• Access controls and data protection procedures.
• Industry-standard security practices.
• Other lawful transfer mechanisms recognized by applicable law.

7.3 Cloud Infrastructure and Service Providers

Ojoo may utilize third-party cloud infrastructure providers, subprocessors, hosting providers, communication platforms, analytics providers, security providers, payment processors, artificial intelligence providers, and other service providers that may process data in different countries and regions.

7.4 Customer Responsibilities

Customers are responsible for determining whether their use of the Services complies with any applicable data residency, localization, cross-border transfer, industry-specific, contractual, regulatory, or governmental requirements applicable to their organization.

7.5 International Access

Customers and Users may access the Services from multiple countries and jurisdictions. By using the Services, Customers acknowledge and agree that information may be transferred to, stored in, processed in, or accessed from locations outside their country of residence.

7.6 Legal Compliance

Ojoo shall take reasonable steps to comply with applicable legal requirements relating to international data transfers; however, Ojoo does not guarantee that the Services will satisfy every jurisdiction's data residency, localization, or cross-border transfer requirements unless expressly agreed in writing.

Additional information regarding international data transfers may be provided through Data Processing Agreements (DPAs), customer contracts, security documentation, or other supplemental privacy notices where applicable.

7.7 Data Processing Agreements

Where required by applicable law or contractual obligations, Ojoo may enter into Data Processing Agreements (DPAs) with Customers governing the processing, protection, transfer, and handling of Personal Data.

7.8 Data Residency

Unless expressly agreed in writing, Ojoo does not guarantee that Customer Data will be stored exclusively within a specific country, region, or jurisdiction.

7.9 Customer-Hosted Deployments

Where Services are deployed within infrastructure owned, managed, or controlled by the Customer, Customer Data generally remains under the Customer's hosting environment. References to cross-border transfers, cloud hosting, and subprocessors apply only to the extent Ojoo or its authorized service providers access, process, support, or host such information.

8. Data Retention

Ojoo retains Personal Data, Customer Data, and other information for as long as necessary to provide the Services, fulfill contractual obligations, comply with legal requirements, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

8.1 Retention During Service Use

Customer Data and Personal Data are generally retained for the duration of the Customer's active use of the Services and as necessary to provide the functionality, features, support, integrations, and services requested by the Customer.

8.2 Account Termination and Service Expiration

Upon termination, cancellation, expiration, or non-renewal of a Customer's account or subscription, Ojoo may retain Customer Data for a limited period to facilitate account recovery, legal compliance, security investigations, dispute resolution, backup restoration, and other legitimate business purposes.

Following the applicable retention period, Customer Data may be deleted, anonymized, aggregated, archived, or otherwise disposed of in accordance with Ojoo's internal data management practices and applicable legal requirements.

Unless otherwise agreed in writing, Customer Data may remain available for export or recovery for up to thirty (30) days following account termination, after which Ojoo may permanently delete or anonymize such data in accordance with its retention practices and legal obligations.

8.3 Backup and Disaster Recovery Copies

Customer Data may continue to exist in backup systems, disaster recovery systems, archives, logs, or security records for a reasonable period following deletion requests or account termination. Such data will remain subject to applicable security, confidentiality, and access controls until permanently removed in accordance with Ojoo's retention practices.

8.4 Legal and Regulatory Retention Requirements

Ojoo may retain information for longer periods where required or permitted by applicable laws, regulations, court orders, governmental requests, legal proceedings, tax obligations, accounting requirements, audit requirements, compliance obligations, or other lawful purposes.

8.5 Security, Fraud Prevention, and Audit Records

Ojoo may retain logs, monitoring information, audit records, security events, authentication records, and related information for security, fraud prevention, compliance, risk management, operational, and business continuity purposes.

8.6 Customer Responsibilities

Customers are responsible for exporting, downloading, or otherwise retaining any Customer Data they wish to preserve before terminating their account or subscription. Ojoo does not guarantee the availability of Customer Data after applicable retention periods have expired.

8.7 Data Deletion Requests

Where permitted by applicable law, Customers and individuals may request the deletion of Personal Data. Such requests may be subject to legal, contractual, technical, operational, security, fraud prevention, audit, or regulatory limitations that require certain information to be retained.

8.8 Anonymized and Aggregated Information

Ojoo may retain anonymized, aggregated, statistical, or de-identified information that no longer identifies an individual, Customer, or User for analytics, research, security, product development, reporting, and business improvement purposes.

Retention periods may vary depending on the type of information, nature of the Services, contractual commitments, legal requirements, security considerations, and operational needs. Ojoo reserves the right to determine appropriate retention periods consistent with applicable laws and legitimate business requirements.

9. Data Security

Ojoo is committed to protecting the confidentiality, integrity, and availability of Personal Data, Customer Data, and other information processed through the Services. We implement and maintain reasonable administrative, technical, organizational, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, loss, misuse, or other security risks.

While no system, network, or method of electronic storage can be guaranteed to be completely secure, Ojoo continuously works to improve its security practices and reduce security risks through appropriate security controls and operational procedures.

9.1 Security Measures

Ojoo may implement security measures including:

• Access controls and user authentication mechanisms.
• Role-based permissions and authorization controls.
• Encryption of data during transmission using secure communication protocols where applicable.
• Monitoring, logging, and audit trail capabilities.
• Network security controls and infrastructure protection measures.
• Backup and disaster recovery procedures.
• Security incident detection and response processes.
• Vulnerability management and security maintenance activities.
• Employee and contractor confidentiality obligations.
• Physical, administrative, and operational safeguards appropriate to the Services.

9.2 Access Management

Access to Personal Data and Customer Data is restricted to authorized personnel, service providers, and subprocessors who require access to perform legitimate business, operational, support, security, or legal functions and who are subject to appropriate confidentiality and security obligations.

9.3 Customer Security Responsibilities

Customers are responsible for maintaining appropriate security controls within their organization, including:

• Protecting account credentials and authentication methods.
• Managing user access and permissions.
• Implementing appropriate password policies.
• Reviewing account activity and audit logs.
• Maintaining secure endpoint devices and networks.
• Complying with applicable security, privacy, and regulatory requirements.

9.4 Security Monitoring and Logging

Ojoo may collect, monitor, analyze, and retain logs, audit records, security events, authentication activity, diagnostic information, system events, and operational metrics for security, compliance, fraud prevention, troubleshooting, risk management, and service improvement purposes.

9.5 Security Incidents

Ojoo maintains processes designed to identify, investigate, manage, and respond to suspected security incidents affecting the Services. Where required by applicable law or contractual obligations, Ojoo may provide notifications regarding certain security incidents in accordance with applicable legal and regulatory requirements.

9.6 Third-Party Service Providers

Ojoo may utilize third-party infrastructure providers, cloud hosting providers, subprocessors, communication providers, payment processors, security providers, artificial intelligence providers, and other service providers. While Ojoo takes reasonable steps to select and manage such providers, Ojoo cannot guarantee the security practices, availability, or performance of third-party services.

9.7 No Absolute Security Guarantee

Although Ojoo employs reasonable security measures, no method of transmission over the Internet, electronic storage system, software platform, or technology environment can be guaranteed to be completely secure. Customers acknowledge and accept the inherent risks associated with electronic communications, cloud computing, and online services.

Unless expressly stated otherwise, no representation is made that Ojoo is certified under any specific security standard, framework, certification program, or regulatory scheme. Security measures may evolve from time to time based on business, operational, technical, legal, and security requirements.

9.8 Security Incident Notifications

Where required by applicable law or contractual obligations, Ojoo will notify affected Customers without undue delay after becoming aware of a confirmed security incident involving Personal Data.

10. Your Privacy Rights

Depending on your jurisdiction, applicable laws, and the nature of the Services provided, you may have certain rights regarding your Personal Data. Ojoo is committed to respecting and facilitating such rights in accordance with applicable privacy and data protection laws.

The availability of specific rights may vary depending on your location, the legal basis for processing, the type of information involved, and whether Ojoo acts as a data controller or processes information on behalf of a Customer.

10.1 Right of Access

You may request information regarding the Personal Data we maintain about you and, where applicable, request access to such information.

10.2 Right to Correction

You may request that inaccurate, incomplete, outdated, or incorrect Personal Data be corrected, updated, or completed.

10.3 Right to Deletion

Subject to applicable legal, contractual, security, operational, and regulatory requirements, you may request the deletion of certain Personal Data maintained by Ojoo.

10.4 Right to Restrict Processing

Where permitted by applicable law, you may request that the processing of certain Personal Data be restricted under specific circumstances.

10.5 Right to Data Portability

Where applicable, you may request a copy of certain Personal Data in a structured, commonly used, and machine-readable format.

10.6 Right to Object

You may object to certain processing activities where such rights are available under applicable law, including processing based on legitimate interests or direct marketing activities.

10.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of any processing conducted before such withdrawal.

10.8 Right to Opt-Out of Marketing Communications

You may opt out of receiving promotional, marketing, or non-essential communications from Ojoo by following the unsubscribe instructions included in such communications or by contacting us directly.

10.9 Right to Lodge a Complaint

Where permitted by applicable law, you may have the right to lodge a complaint with a competent supervisory authority, regulatory body, or data protection authority if you believe your privacy rights have been violated.

10.10 Exercising Your Rights

Requests relating to Personal Data may be submitted using the contact information provided in this Privacy Policy. Ojoo may require reasonable verification of identity before processing a request in order to protect privacy, security, and the rights of other individuals.

10.11 Customer-Controlled Data

Where Ojoo processes Personal Data solely on behalf of a Customer, requests relating to such Personal Data may need to be directed to the relevant Customer, who is responsible for determining how the data is processed and for responding to applicable privacy requests.

Certain rights may be limited, delayed, or unavailable where required to comply with applicable laws, contractual obligations, security requirements, fraud prevention measures, dispute resolution processes, regulatory requirements, or other legitimate business purposes.

11. Children's Privacy

The Services are intended for use by businesses, organizations, professionals, and individuals who are legally capable of entering into binding agreements. The Services are not directed to, intended for, or designed for use by children.

Ojoo does not knowingly collect, solicit, process, store, or maintain Personal Data directly from children under the age required by applicable law to provide valid consent for data processing without appropriate parental or guardian authorization.

• Individuals who do not meet the minimum legal age requirements applicable in their jurisdiction should not create accounts or use the Services without appropriate authorization where permitted by law.
• Customers are responsible for ensuring that their use of the Services complies with all applicable laws relating to minors, children, students, dependents, or other protected individuals.
• Where Customers upload, process, or manage information relating to children through the Services, Customers remain solely responsible for obtaining all required consents, permissions, notices, and legal authorizations.
• If Ojoo becomes aware that Personal Data has been collected from a child in violation of applicable law, Ojoo may take reasonable steps to delete, restrict, anonymize, or otherwise address such information as required by law.

Parents, guardians, educational institutions, or other authorized persons who believe that a child may have provided Personal Data to Ojoo in violation of applicable law may contact us using the contact information provided in this Privacy Policy.

Ojoo reserves the right to request reasonable information to verify the identity and authority of any individual seeking to exercise rights on behalf of a child or dependent individual.

12. Third-Party Services

Ojoo may integrate with, utilize, or provide access to third-party products, services, applications, platforms, APIs, infrastructure, software, and technologies ("Third-Party Services") to support the delivery, operation, functionality, security, and enhancement of the Services.

Third-Party Services may include cloud infrastructure providers, payment processors, communication platforms, authentication services, analytics providers, artificial intelligence providers, integration partners, and other technology vendors.

12.1 Customer-Enabled Integrations

Customers may choose to connect, enable, configure, or integrate Third-Party Services with the Services. Where such integrations are enabled, information may be exchanged between the Services and the applicable Third-Party Service in accordance with the permissions, configurations, and instructions established by the Customer.

12.2 Independent Third Parties

Third-Party Services are owned, operated, and controlled by independent organizations that are not under the control of Ojoo. Such services are subject to their own terms, privacy policies, security practices, and legal requirements.

12.3 Information Sharing

Where necessary to provide the Services or where authorized by the Customer, Ojoo may share information with Third-Party Services in accordance with this Privacy Policy, applicable agreements, and Customer instructions.

12.4 Third-Party Privacy Practices

Ojoo is not responsible for the privacy practices, security measures, availability, performance, content, policies, or actions of Third-Party Services. Customers and Users should review the applicable privacy policies, terms, and documentation of such providers before enabling or using them.

12.5 Third-Party Infrastructure Providers

Ojoo may utilize third-party infrastructure providers, hosting providers, cloud service providers, content delivery networks, communication providers, authentication providers, analytics services, payment processors, artificial intelligence providers, monitoring providers, and other technology partners to support the operation of the Services.

12.6 Third-Party Links and Websites

The Services may contain links to third-party websites, resources, or services. Ojoo does not endorse or assume responsibility for the content, privacy practices, security measures, or activities of such third-party websites or services.

12.7 Customer Responsibility

Customers are responsible for evaluating the suitability, compliance, security, and privacy implications of any Third-Party Services they choose to connect to or use in conjunction with the Services.

12.8 Changes to Third-Party Services

Ojoo may add, modify, replace, suspend, discontinue, or remove support for Third-Party Services at any time based on business, operational, technical, security, legal, or commercial considerations.

Use of Third-Party Services is at the Customer's own risk and may be subject to additional agreements, terms, privacy policies, licensing requirements, and fees imposed by the applicable third-party provider.

13. AI and Automated Processing

Ojoo may provide artificial intelligence ("AI"), machine learning, automation, predictive analytics, recommendation engines, intelligent workflows, chatbots, virtual assistants, content generation tools, and other automated processing capabilities as part of the Services.

These features are designed to assist Customers and Users in improving productivity, efficiency, decision-making, business operations, and workflow automation. AI and automated processing capabilities may be powered by Ojoo, third-party providers, or a combination of both.

Ojoo does not use Customer Data, Personal Data, or customer content submitted through the Services to train general-purpose artificial intelligence models unless expressly authorized by the Customer.

13.1 AI Inputs and Outputs

When Customers or Users utilize AI features, information, prompts, instructions, queries, documents, content, configurations, or other inputs submitted to such features may be processed to generate outputs, responses, recommendations, summaries, automations, insights, reports, or other results.

13.2 No Guarantee of Accuracy

AI-generated outputs may contain inaccuracies, omissions, errors, biases, outdated information, incomplete information, or content that may not be suitable for a particular purpose. Customers and Users are responsible for independently reviewing, validating, and verifying all AI-generated outputs before relying upon them.

13.3 Human Review Responsibility

Customers remain solely responsible for all business decisions, financial decisions, legal determinations, compliance activities, operational actions, workflow executions, approvals, communications, and other activities based on AI-generated outputs or automated processing results.

13.4 Automated Processing

The Services may perform automated processing, workflow execution, notifications, approvals, routing, calculations, integrations, analytics, reporting, and other automated activities based on Customer configurations, business rules, workflows, and instructions.

Customers are responsible for testing, validating, monitoring, and maintaining automated workflows and configurations before using them for production, operational, financial, legal, compliance, or business-critical purposes.

13.5 Third-Party AI Providers

Certain AI features may utilize third-party artificial intelligence providers, language models, machine learning services, analytics providers, or related technologies. Information processed through such features may be subject to additional terms, privacy policies, and security practices of the applicable provider.

13.6 AI Service Improvements

Ojoo may use anonymized, aggregated, de-identified, statistical, or non-personally identifiable information derived from AI feature usage for service improvement, model optimization, security, analytics, research, performance monitoring, and product development purposes.

13.7 Restrictions on AI Usage

Customers and Users shall not use AI features in a manner that violates applicable laws, infringes intellectual property rights, processes unlawful content, generates harmful content, circumvents security controls, or otherwise violates the Terms of Service or applicable policies.

13.8 No Professional Advice

AI-generated content, recommendations, insights, reports, summaries, predictions, and outputs are provided for informational and operational purposes only and do not constitute legal, accounting, tax, financial, medical, regulatory, compliance, employment, or professional advice.

To the maximum extent permitted by applicable law, Ojoo shall not be liable for any loss, damage, business interruption, compliance failure, regulatory action, financial loss, operational impact, or other consequence arising from the use of AI features, automated processing, or reliance upon AI-generated outputs.

14. Changes to this Privacy Policy

Ojoo may update, modify, revise, or replace this Privacy Policy from time to time to reflect changes in our Services, business practices, technologies, legal requirements, regulatory obligations, security practices, or operational needs.

When material changes are made to this Privacy Policy, Ojoo may provide notice through one or more of the following methods:

• Posting the updated Privacy Policy on our website.
• Displaying notices within the Services.
• Sending notifications through registered user accounts.
• Sending email communications to Customers or Users.
• Using other reasonable communication methods.

The "Last Updated" date displayed within this Privacy Policy indicates the effective date of the most recent revision.

Customers and Users are encouraged to periodically review this Privacy Policy to remain informed about how Personal Data is collected, used, processed, disclosed, retained, and protected.

Continued access to or use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

Where required by applicable law, Ojoo will obtain consent, provide additional notice, or implement other measures before certain changes become effective.

Nothing in this section limits any rights or obligations arising under applicable privacy, data protection, cybersecurity, consumer protection, or other applicable laws.

15. Contact Information

If you have any questions, concerns, requests, complaints, or inquiries regarding this Privacy Policy, the Services, or the processing of Personal Data, you may contact Ojoo using the information provided below.

Ojoo will make commercially reasonable efforts to respond to privacy, security, and data protection inquiries within a reasonable timeframe, subject to applicable legal, operational, and verification requirements.

Where required by applicable law, Customers, Users, and data subjects may submit requests relating to access, correction, deletion, restriction, portability, objection, consent withdrawal, or other privacy rights using the contact information provided above.

For security and privacy reasons, Ojoo may require reasonable identity verification before processing requests relating to Personal Data.

This Privacy Policy is effective as of the Last Updated date stated above and applies to all Services provided by Ojoo unless otherwise specified in a separate agreement, privacy notice, or contractual commitment.