Privacy policy

This website, ovast.ai, is run by Ovast AI, based in Noida, Uttar Pradesh, India. We are responsible for the personal information described here, and you can reach us about anything in this policy at hello@ovast.ai.

This policy also covers the details you send us through a lead form on our LinkedIn page.

We collect only what you choose to send us, plus the minimum a web server needs to deliver a page.

• Contact form: your name, email address, company (optional) and your message.
• The assistant: the questions you type, and the replies within that conversation.
• LinkedIn lead forms: if you send us your details through a form on our LinkedIn page, LinkedIn passes us the fields that form asks for, such as your name, email address and company.
• Form and assistant requests: your IP address, held briefly in memory to limit how often they can be used from one place.
• Hosting logs: our host records standard request details — IP address, browser type, the page requested and the time — to run and protect the service.

Please keep sensitive information — health or financial details, passwords, identity numbers — out of your messages. We never need it.

• To read and reply to your enquiry, and to continue the conversation it starts.
• To confirm your enquiry reached us, with a copy of what you sent.
• To answer the questions you ask the assistant.
• To keep the site running and stop abuse, such as automated spam.

We use it for nothing else: no advertising, no profiling, no automated decisions about you, and no mailing list.

Where the EU or UK GDPR applies, our legal basis is our legitimate interest in answering you and keeping the site secure, and — when you ask about a project — taking the steps you request before a contract.

This site sets no cookies and runs no analytics, advertising pixels or third-party tracking scripts. It stores nothing in your browser.

Fonts and images come from this site itself, so opening a page connects you to our site and nowhere else. An assistant conversation lives only in the open page, and is gone when you close or reload it.

A small number of service providers run parts of the site for us. Each uses your information only to provide its service:

• Vercel — hosts the website and handles the request details above.
• Resend — delivers contact-form messages to our inbox, and your confirmation to you.
• Anthropic — generates the assistant’s answers from the questions you send.
• LinkedIn — runs the lead forms on our LinkedIn page and passes us what you submit through them.
• Our email providers — receive, forward and store the messages we get, as any business inbox does.

We share your information with no one else, unless the law requires it. Following a link to LinkedIn, Instagram or another website takes you to a service with its own privacy policy.

We are based in India, and our providers operate in the United States and elsewhere, so your information may be handled outside the country you live in. We choose providers that offer contractual safeguards for international transfers.

• Enquiries, including LinkedIn lead-form submissions: for as long as our conversation with you continues, then for up to 24 months as a record of it, after which they are deleted.
• Assistant conversations: we keep no copy. Anthropic handles the text under its own retention terms.
• IP addresses used for rate limiting: held only in the server’s memory, never written to disk, and cleared when the server restarts.
• Hosting logs: kept by Vercel for a short period under its own terms.

Wherever you are, you can ask us to:

• show you the personal information we hold about you;
• correct it if it is wrong;
• delete it;
• stop using it, or object to how we use it;
• send you a copy in a portable format.

Email hello@ovast.ai from the address you used and we will reply within 30 days. In India these rights come from the Digital Personal Data Protection Act, 2023; in the EU and UK from the GDPR, which also gives you the right to complain to your data protection authority.

The site is served only over HTTPS, with strict transport security and protective headers on every response, and messages travel encrypted between your browser, our server and our providers. We also keep what we hold to the minimum — the information we never collect is the safest of all.

This site is meant for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 18.

When what the site collects changes, this page changes with it and the date at the top moves. A significant change is called out here.

Questions, requests or complaints about privacy: hello@ovast.ai. A person will answer.