Privacy Policy

Last updated: 24 October 2026

This policy explains what data the OOAK AI Labs Front Desk (“the service”) collects, why, and how we handle it. The service is operated by WEDDINGS BY OOAK, a sole proprietorship of Vikas Alagarsamy trading as OOAK AI Labs (“OOAK AI Labs”, “we”, “us”), with its principal place of business at Door No. 820, 1st Floor, Sri Ganga Complex, Sathy Road, Gandhipuram, Coimbatore – 641012, Tamil Nadu, India (GSTIN 33AGZPV9475F1ZD). Contact us any time at hello@ooakailabs.com.

1. Who this covers

This policy covers two groups: the businesses that sign up to use the service, and the customers of those businesses whose messages the service processes so it can reply. For a business’s own customers, the business decides why and how their data is used, and we act on the business’s behalf (see section 9).

2. What we collect and why

Account data. Your email address and a one-way hash of your password, so you can sign in. We never store your password in readable form.
Business profile data. Public information from the Instagram profile and website you connect, used to build a reply profile that reflects how your business communicates.
Conversation data. The messages between your business and your customers on the channels you connect, including your customers’ messages, handles or usernames, and the replies the service generates, so the front desk can answer and you can review it.
Technical data. Basic logs such as approximate IP address and request times, used to run the service, limit abuse, and keep it secure.

3. How we use data

We use this data to operate the service: to build your reply profile, generate and send replies on your behalf, show you your conversations, provide support, and protect the service and its users. We do not sell your data. We do not use one business’s data to serve another business, and we do not use it to train our own models, without that business’s written consent.

4. AI-generated replies

Replies are generated using a third-party AI provider (currently Anthropic’s Claude). To generate a reply, relevant conversation and profile information is sent to that provider, which processes it to return a suggested response. Replies are automated and can be imperfect, so the business remains responsible for the replies sent from its account.

5. Who we share data with

We share data only with service providers that help us run the service, and only as needed. These include our AI provider (to generate replies), our hosting provider (to run the application and database), our email provider (to send sign-in and account emails from hello@ooakailabs.com), and the messaging platforms you connect (such as Instagram and the Meta platforms, to receive and send your messages). We may also disclose data where the law requires it. A current list of providers is available on request at hello@ooakailabs.com.

6. Instagram and the Meta platforms

When a business connects its Instagram account, we use Meta’s Instagram Platform to do two things: read the business’s own public profile to build its reply profile, and receive and send messages for the channels it connects. Through this, we receive and process Instagram Platform data, including the business account’s profile, and, for the people who message the business, their Instagram-scoped id, username or handle, name, profile picture, and the content of their messages.

We use this data only to run the front desk (to receive messages and generate and send replies) and we handle it in line with Meta’s Platform Terms and Developer Policies. We do not sell it, and we do not use it for advertising or to build profiles of people beyond answering their messages. If a business removes our app from its Instagram settings, Instagram notifies us and we disconnect that account. Anyone can ask us to delete the data we hold (see section 8).

7. How long we keep data

We keep your account and conversation data for as long as your account is active, so the service can work. If you close your account or ask us to delete your data, we delete or anonymise it within a reasonable period, except where we must keep some of it to meet a legal obligation or to resolve a dispute.

8. How to request deletion

You can ask us to delete the data we hold about you at any time. The simplest ways are to email hello@ooakailabs.com, or to remove our app from your Instagram settings (which tells us to disconnect your account). Our Data Deletion page explains exactly what gets deleted and how long it takes, and is also where a deletion request made through Meta is confirmed.

9. Roles under India’s DPDP Act, 2023

For your business’s own customers’ personal data, the business is generally the Data Fiduciary (it decides the purpose and means), and OOAK AI Labs acts as a Data Processor, handling that data on the business’s instructions to provide the service. For the account data of the business user themselves, we act as the Data Fiduciary. Businesses are responsible for giving their customers any required notice and for obtaining any consent the law requires, and for the lawful basis of their communications (see our Terms of Service).

10. Your rights as a data principal

Subject to applicable law, including India’s DPDP Act, 2023, you have the right to:

access a summary of the personal data we hold about you and how we process it;
ask us to correct or complete inaccurate or incomplete data;
ask us to erase your data (see section 8);
withdraw a consent you have given, at any time (withdrawing it does not undo processing we already did lawfully);
raise a grievance about how we handle your data, with our grievance contact below;
nominate another person to exercise these rights on your behalf, for example if you die or are unable to act.

To exercise any of these, email hello@ooakailabs.com. Businesses can also disconnect a channel or close their account at any time. If one of your own customers contacts you about their data, we will help you respond.

11. Security

We take reasonable steps to protect data. Passwords are stored only as salted one-way hashes, data is sent over encrypted connections (HTTPS), and access to data is limited to what is needed to run the service. No service can promise perfect security, so we cannot guarantee it, but we work to keep your data safe and will act on any issue we find.

12. Data location and transfers

Some of our providers (for example, the AI and hosting providers) may process data outside your country. Where that happens, we rely on those providers’ terms and on safeguards permitted by applicable law. Contact us for more detail about where your data is processed.

13. Children

The service is intended for businesses and people aged 18 or over. It is not directed at children, and we do not knowingly collect data from children.

14. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date above and, where appropriate, let you know. This policy may be updated; the “Last updated” date shows the current version.

15. Contact and grievances

For any privacy question or request, email hello@ooakailabs.com. Our grievance contact for data matters (including under the DPDP Act) is Vikas Alagarsamy, who can be reached at hello@ooakailabs.com.