Privacy Policy
Last updated: February 16, 2026
Information We Collect
We collect information you provide directly when you create an account, set up your workspace, and use our AI agent workforce platform:
- Account information (email, name)
- Business details (name, type, description)
- Agent configurations and task data
- Integration credentials (encrypted at rest)
- Usage data and activity logs
How Your Data Flows Through Our System
When you use OHWOW.FUN, your data follows this path:
In this chain, OHWOW.FUN acts as the data controller (we determine how and why your data is processed), and Anthropic acts as a data processor (they process data only on our instructions, under their Commercial Terms). Anthropic's Commercial Terms prohibit them from training on API customer data.
How We Use Your Information
- To provide and operate the AI agent workforce platform
- To process your tasks through AI models
- To send service-related communications
- To improve our services and develop new features
- To prevent fraud and ensure platform security
How We Improve Our Service
We do NOT train AI models on your data
OHWOW.FUN does not train or fine-tune AI models on your data. Neither does Anthropic — under their Commercial Terms, they are prohibited from using API customer data for model training. This applies to all plans, including Trial and Starter.
What we do instead
We use anonymized usage analytics (task types, feature usage patterns) and voluntary user feedback to improve our system prompts and service quality. This data never includes your actual business content.
Trial & Starter Plans
Anonymized analytics are collected by default. You can opt out at any time from your dashboard settings.
Pro & Enterprise Plans
Analytics collection is opt-in only. No anonymized analytics are collected unless you explicitly enable them.
A2A Protocol & Data Minimization
OHWOW.FUN supports the Agent-to-Agent (A2A) protocol, which enables direct communication between AI agents. For users with A2A-compatible local agents, certain business data can remain on your own infrastructure and never transit through our cloud.
This means sensitive data can be processed locally while still benefiting from our orchestration layer. The A2A protocol minimizes the data that needs to leave your environment, giving you greater control over your information.
Third-Party Data Processing
Anthropic (AI Provider)
Anthropic operates under Commercial Terms that prohibit training on customer data. Your task inputs and outputs are processed only to deliver results and are subject to Anthropic's 30-day retention policy for API data (for safety monitoring purposes only, after which data is deleted). Anthropic is SOC 2 certified.
For more information, see Anthropic's Privacy Center.
Other Subprocessors
- Supabase — Database, authentication, and file storage (US-hosted)
- Dodo Payments — Payment processing and subscription management
We do not sell your personal information to third parties.
Data Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security (RLS) policies, and regular security audits. Integration credentials are encrypted before storage. For more details, see our Security page.
Data Retention
- OHWOW.FUNYour data is retained for the duration of your active account. Upon account deletion, all data is permanently removed within 30 days.
- Anthropic APIAPI inputs and outputs are retained for up to 30 days for safety monitoring purposes, then permanently deleted.
- SupabaseData is retained as long as your account is active and deleted when your account is deleted.
- Dodo PaymentsPayment records are retained per applicable legal and financial reporting requirements.
Your Rights
You have the right to:
- Access — View all data we hold about you
- Correction — Update inaccurate personal information
- Deletion — Delete your account and all associated data
- Export — Download all your data in JSON format (data portability)
- Restriction — Request restriction of processing of your data
- Objection — Object to processing based on legitimate interest
- Opt-out — Disable anonymized usage analytics collection
You can exercise these rights from your dashboard settings or by contacting us at privacy@ohwow.fun.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics, if any, are privacy-preserving and anonymized.
CCPA & GDPR
We comply with the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).
Legal Basis for Processing (GDPR)
- Contract performance — Processing necessary to provide the services you signed up for
- Legitimate interest — Anonymized analytics to improve service quality (with opt-out available)
- Consent — Where required, we obtain explicit consent before processing
Your GDPR Rights
In addition to the rights listed above, EEA residents have the right to lodge a complaint with their local data protection supervisory authority.
Your CCPA Rights
California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.
International Data Transfers
Your data is stored and processed in the United States. Both Supabase (our database provider) and Anthropic (our AI provider) are US-based.
For transfers of personal data from the European Economic Area (EEA), Anthropic uses Standard Contractual Clauses (SCCs) as approved by the European Commission. We ensure that appropriate safeguards are in place for all international transfers of personal data.
Contact Us
For privacy-related questions or requests, contact us at privacy@ohwow.fun.