Learn how OAG AI Consultant and OracleAppsGuide.com collect, protect, and process enterprise data.
This Privacy Policy describes how OAG AI Consultant, operated and published by OracleAppsGuide.com (“OAG”, “we,” “us,” or “our”), collects, uses, stores, and protects your information when you use our website, native desktop application, and AI consulting services (collectively, the “Service”). OAG stands for OracleAppsGuide.com. By accessing or using the Service, you agree to the data practices described in this Privacy Policy.
We collect the following categories of information when you interact with the Service:
When you sign in via OAG Identity single sign-on, we receive your verified profile information including your name, email address, and profile image URL. We never receive or store your identity provider password.
Documents, configuration files, and knowledge assets you upload to your workspace are stored and processed to provide the AI consulting service. Each workspace is logically isolated.
We automatically collect certain technical telemetry including interaction logs with the AI consultant, feature usage patterns, session duration, and diagnostic events to improve service reliability and performance. This data is anonymized and aggregated where possible.
We use the information we collect for the following purposes:
User profiles, workspace metadata, and session records are stored in the OAG Cloud Backend, a managed database operated on our behalf by a contracted infrastructure sub-processor. Data is stored in regions selected for proximity to our primary user base. The named legal entity is recorded in Schedule B of our Data Processing Addendum.
Sensitive fields, including API keys, connection tokens, and private credentials stored within workspace configurations, are encrypted at rest using AES-256-GCM. Encryption keys are managed per workspace.
Each user workspace is logically separated with access controls that prevent cross-tenant data access. Vector storage instances used for RAG are scoped per workspace.
All data transmitted between your browser, our servers, and third-party AI services is encrypted using TLS 1.3 (HTTPS).
We engage the following categories of sub-processor to operate the platform. Each operates under a written data-processing agreement with confidentiality and security obligations. The named legal entity for each category is recorded in Schedule B of our Data Processing Addendum and is disclosed to customers on request.
Managed identity, database, object storage, application hosting, secret management, and logging.
Model inference and embedding generation for the consultant and the retrieval pipeline. Prompts are redacted before transmission.
Payment capture and tax invoicing for paid plans. Card and UPI credentials are handled entirely on the processor hosted checkout; we never receive raw card numbers.
Transient edge rate-limiting state. IP addresses are held for a one-hour TTL and never persisted.
Error tracking (with personal data scrubbed), challenge verification (Cloudflare Turnstile), and non-intrusive fraud/abuse signals on public support forms.
Where personal data is transferred internationally (such as primary cloud hosting in the United States), transfers rely on appropriate safeguards including European Union Standard Contractual Clauses (EU SCCs) and contractual sub-processor confidentiality commitments. We notify customers of any new sub-processor category at least 14 days in advance. See DPA and Compliance register.
The Service is an enterprise B2B platform and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take immediate steps to delete such information.
We may update this Privacy Policy from time to time. Material changes will be communicated via email (to the address associated with your account) or through a prominent notice on the Service. The “Effective date” at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
The authorized data controller and operating entity for this Service is OracleAppsGuide.com. For GDPR Data Protection Officer (DPO) inquiries, Data Subject Access Requests (DSAR), or grievance redressal under India’s DPDP Act 2023 (resolved within 30 days of receipt), contact:
Authorized Entity: OracleAppsGuide.com
DPO & Grievance Officer Email: business@oracleappsguide.com
Website: https://oracleappsguide.com
SOC 2-aligned controls, ISO 27001-aligned controls, GDPR-ready data handling, and DPDP Act 2023-ready data handling. OAG implements security controls aligned with these frameworks. OAG does not currently hold a third-party certification for any of them.
Oracle®, Oracle E-Business Suite®, Oracle Applications®, Oracle Fusion®, and Java® are registered trademarks of Oracle Corporation and/or its affiliates. OAG AI Consultant and OracleAppsGuide.com are independent solutions developed by OracleAppsGuide.com and are not affiliated with, endorsed by, sponsored by, or certified by Oracle Corporation.
OAG stands for OracleAppsGuide.com. OAG AI Consultant is the enterprise autonomous AI agent platform developed by OracleAppsGuide.com.
