Privacy Policy

1 Data Controller and Scope

Oda Inc. acts as data controller for account and platform data. This policy applies to ODA - AI App Builder website, builder workspace, and related APIs.

2 What We Collect

• Account Data

  Name, email address, authentication data, subscription status, and account preferences.

• Product Data

  Prompts, generated code, project files, comments, and usage logs required to run and improve the service.

• Technical Data

  Device, browser, IP, session identifiers, and security telemetry for fraud prevention and stability.

3 Legal Basis and Purpose

We process data based on contract performance, legal obligations, legitimate interests, and where required, consent. We use data to provide account access, generate AI outputs, secure the platform, support billing, and respond to support requests.

4 Cookies and Similar Technologies

We use strictly necessary cookies for login and security. Optional analytics and marketing cookies are activated only according to your consent preferences.

You can update your choices any time via Cookie Settings on the website.

5 Subprocessors and International Transfers

To deliver core AI features, we may use subprocessors including cloud, analytics, payment, and model providers. Data may be processed outside your country with appropriate safeguards such as contractual protections.

6 Retention and Security

We retain personal data while your account is active and as needed for legal, accounting, or security obligations. We use encryption in transit, access controls, and monitoring to reduce risk.

Do not submit highly sensitive secrets in prompts unless strictly necessary.

7 Your Rights (KVKK / GDPR / CCPA)

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, and request portability of your personal data.

• Access and obtain information about your processed data.
• Request correction or deletion where legally applicable.
• Request export of your data in a machine-readable format.
• Object to certain processing activities and withdraw consent.

8 Children's Privacy

The service is not intended for children under 13 (or higher age where required by local law). If we learn that such data was collected without valid authorization, we will delete it.

9 Policy Updates

We may update this policy to reflect legal, operational, or product changes. Material updates will be posted with a revised date on this page.