Privacy policy

This policy has two parts. Part A is about this website (oqiva.in). Part B is about the Oqiva software, which you or your organisation install and run yourselves. The difference matters, because it decides who holds your information.

Part A. This website

What we collect

We try to collect as little as possible.

• Nothing automatically. This website does not use cookies, advertising or tracking, analytics tools or social media widgets, and it does not load fonts, scripts or images from other companies. Your browser talks only to this website.
• Technical logs kept by our hosting provider. Like almost every website, the server that delivers these pages records basic technical details of each request, such as your IP address, the time, the page requested and your browser type. This is done by the hosting company to run, secure and troubleshoot the service. We do not use these logs to identify or track individual visitors.
• Email you send us. If you write to support@oqiva.in, or use the contact page to prepare an email, we receive what you put in the message: your email address, any name you give, and the content. The contact form does not send anything from the website; it only opens your own email program with the message filled in, and nothing is sent until you press send there.

How we use it

• To read and reply to your message, and to help with your question or problem.
• To improve Oqiva and its documentation, using general themes from messages rather than personal details.
• To keep the website secure and working.

We do not sell your information, rent it, or use it for advertising.

How long we keep it

We keep emails for as long as needed to deal with your request and any follow-up, and for a reasonable time afterwards in case you write again. You can ask us to delete your messages at any time. Hosting logs are kept by the hosting provider under its own retention rules.

Who can see it

Only the people who handle support for Oqiva, and the service providers that we need to run the website and our email (the hosting company and the email provider). They may only use it to provide those services. We will share information if the law requires it.

Links to other websites

Some pages link to other websites, for example the Frappe project and our source code on GitHub. We are not responsible for their content or privacy practices.

Part B. The Oqiva software

Who holds the data

Oqiva is software that an organisation installs on its own Frappe server. The boards, comments, pictures and account details people create in Oqiva are stored in that organisation’s own database, on its own server. The Oqiva project does not receive them, cannot see them, and the software does not send them to us. For that data, the organisation that runs the installation decides what is collected and why, and is the one to ask about it. If you use Oqiva at work or school, please read that organisation’s own privacy notice.

What the software stores on an installation

• Account details that come from the Frappe site: your name, email address and profile picture.
• Your content: boards, comments, pictures and files you upload, version history, and the people and links you share with.
• An audit log of events such as exports, share-link use and refused uploads, kept for 365 days by default. The audit log never records the text of an AI request, only its length.
• Your browser keeps the Frappe sign-in cookie, a few preferences (such as the layout you chose), and a copy of the boards you have open so that your work is not lost if your connection drops. This stays on your device.

AI diagram generation

This feature is off unless an administrator turns it on and chooses a provider (Anthropic or Google Gemini). When you use it, the description you type, and the kind of diagram you chose, are sent to that provider to produce the diagram. Nothing else on your board is sent. The provider handles that text under its own terms and privacy policy, so please do not type personal or confidential information into the description unless your organisation has approved it. The administrator’s key is stored encrypted on the server and is never shown to users.

Security

Access to boards is checked on the server for every request. Pictures are private files, share-link secrets are stored only as hashes, and sensitive actions are rate limited. No system is perfectly secure, and the organisation that runs an installation is responsible for keeping its server, backups and accounts safe.

Your rights and choices

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to how we use it, or to receive a copy. For information about messages you sent us, write to support@oqiva.in and we will respond. For information stored inside an Oqiva installation, contact the organisation that runs it.

Children

This website is not aimed at children, and we do not knowingly collect information from them.

Changes to this policy

If we change how we handle information, we will update this page and the date at the top. Material changes will be described here.

Contact

Questions about this policy or about privacy: support@oqiva.in.