Skip to content
ØSTEN AI

Privacy Policy

Last updated: October 11, 2026

Introduction

ØSTEN AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing SaaS platform and services.

Information We Collect

Personal Information

  • Name and email address (through Firebase Authentication)
  • Company information and business details
  • Marketing preferences and campaign data
  • Usage analytics and platform interactions

Third-Party Platform Data

  • Google Ads account information and campaign data
  • Meta (Facebook/Instagram) Ads account information and campaign data
  • TikTok Ads account information and campaign data
  • Google Analytics 4 property data and website performance metrics
  • Performance metrics and advertising analytics

Shopify Store Data

When you connect a Shopify store, we read your orders, products, and inventory. We do not request access to your Shopify customer records. Order email addresses are converted to a one-way hash before they are stored, so we keep no readable copy of your customers' email addresses.

Brand and Creative Content

Brand details, product images, logos, and other material you provide, and the ad copy, images, and video the platform generates from them.

How We Use Your Information

  • Provide and maintain our marketing platform services
  • Generate AI-powered marketing plans and recommendations
  • Generate ad copy, images, and video from your brand and product information
  • Match ad platform data against your store orders to measure attributed revenue
  • Manage and optimize your advertising campaigns
  • Provide customer support and technical assistance
  • Improve our services and develop new features
  • Send important service updates and notifications

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations or court orders
  • To protect our rights, property, or safety
  • With the service providers listed below, who process data on our behalf to run the platform
  • With the platforms you connect (Google Ads, Meta Ads, TikTok Ads, Google Analytics, Shopify) as necessary to provide our services

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit, access controls, and isolation of each organization's data. Access tokens for the ad and store accounts you connect are encrypted at rest. Our application runs on Google Cloud in the europe-west1 (Belgium) region, and our database is hosted in the EU (Frankfurt, Germany).

Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time through our data deletion process.

Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent at any time

Connected Platforms

Data we receive from the platforms you connect is also subject to that platform's own policies:

  • Google Ads and Google Analytics: Subject to Google's Privacy Policy and Terms of Service
  • Meta Ads: Subject to Meta's Privacy Policy and Terms of Service
  • TikTok Ads: Subject to TikTok's Privacy Policy and Terms of Service
  • Shopify: Subject to Shopify's Privacy Policy and API Terms

Service Providers

We use the following providers to run the platform. Each processes data only to provide its service to us:

  • Google Cloud: application hosting, file storage, and AI models (Vertex AI) for recommendations, the AI assistant, and generated ad creative
  • Firebase Authentication (Google): sign-in and account management
  • Neon: database hosting in the EU
  • Stripe: subscription billing and payment processing
  • Resend: transactional email such as invitations and notifications
  • Cloudflare Turnstile: bot protection on our access request form
  • Google Analytics: website and product usage analytics, only if you accept analytics cookies

Cookies and Analytics

We use cookies that are needed for sign-in and for the platform to work. Analytics and advertising cookies are off by default and are only set if you accept them in the cookie banner. To change your choice, clear this site's data in your browser and the banner will ask again.

International Data Transfers

Your account and platform data are stored in the EU. To run AI features, the relevant content is sent to Google's Vertex AI models, which may process it outside the EU; video generation currently runs in the United States. Some of our other service providers, such as Stripe and Resend, may also process data outside the EU. Where data leaves the EU, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@ostenai.com
Address: ØSTEN AI, Data Protection Officer
Website: https://ostenai.com