Privacy Policy

We collect information you provide directly to us, such as your name, email address, business name, and phone number when you create an account or contact us. We also collect information about your customers, pets, appointments, and sessions that you enter into Oden to run your business.

We automatically collect certain usage data, such as device information, IP address, and interactions with the platform, to operate, secure, and improve Oden.

Data protection law distinguishes between a "controller" (the party that decides why and how personal data is processed) and a "processor" (the party that processes data on the controller's instructions). This Privacy Policy covers two different relationships, and they are not the same:

• Oden's own marketing and account data — such as your name and email as a website visitor, lead, or the business owner who holds an Oden account, and billing information for your Oden subscription. For this data, Oden is the controller.
• Your clients' and their pets' data — the customer records, pet profiles, session notes, and related information that you (a canine behaviorist, dog trainer, or similar business) enter into Oden to run your practice. For this data, you (the business using Oden) are the controller, and Oden acts only as a processor, handling that data on your instructions as described in our Data Processing Agreement.

If you are a pet owner or client of an Oden customer and have questions about your data, please contact that business directly — they control how your information is used.

Where we act as controller, we rely on the following lawful bases to process personal data:

• Contract — to create your account, provide the platform, and deliver the services you signed up for.
• Legitimate interests — to secure and improve Oden, prevent fraud and abuse, and communicate with you about your account.
• Consent — for optional communications such as our newsletter, which you can withdraw at any time.
• Legal obligation — where we must retain or disclose information to comply with the law, such as tax and billing records.

We use your information to provide, operate, and maintain the Oden platform; process transactions and send related communications; send service updates, reminders, and administrative messages; respond to your requests and provide support; monitor for fraud, abuse, and security issues; and comply with our legal obligations.

We do not sell your personal information to third parties.

We share your information with service providers who help us operate Oden, all of whom are bound by confidentiality and data protection obligations. This includes:

• Paddle — our billing partner and merchant of record, who receives the billing information needed to process your Oden subscription payment.
• Cloud hosting and infrastructure providers, who store and run the platform.
• Email delivery providers, who send account and transactional emails on our behalf.

We may disclose information when required by law or to protect our rights and the safety of others.

We retain your data for as long as your account is active. After account closure, we provide a 30-day window for you to export your data, after which it is permanently deleted from our production systems and backups.

Depending on your location, you may have the right to access, correct, export, or delete your personal information; object to or restrict certain processing; and withdraw consent where we rely on it. To exercise any of these rights, contact us at privacy@oden.pet.

If you believe we have not handled your personal information properly, you also have the right to lodge a complaint with your local data protection authority (for example, the ICO in the UK, or the equivalent supervisory authority in your country). We would appreciate the chance to address your concern directly first, but you are not required to contact us before contacting a regulator.

Your information may be transferred to and processed in countries other than your own. We use appropriate safeguards, such as Standard Contractual Clauses, to protect your data during international transfers.

We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256), follow least-privilege access controls, and monitor platform activity for abnormal patterns. We are working toward SOC 2 alignment as we scale. Learn more on our Security page.

Oden is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

We may update this policy from time to time. We will notify you of material changes by email or in-app notification. Continued use of Oden after a change constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact Mohamed Abu Khadra, trading as Oden Pet, at privacy@oden.pet.