What we collect, and what we don't.

The short version

This public site runs no analytics scripts, no ad trackers, and keeps no accounts. The intake form on /start deliberately sends nothing — reaching us happens over email. If you never sign in to one of our portals, the only data we see is what any web server sees.

On this site

Hosting logs. The site is served by Vercel, which records standard request logs (IP address, user agent, timestamps). We use them for operations and security, and they age out on Vercel's standard retention.

One cookie. If you use a gallery preview code, a functional cookie (of_gallery_preview) remembers that on your browser. It contains no personal data and no tracking identifier, and clearing it simply re-locks the preview.

On the signed-in surfaces

Our partner and customer portals require an account. There we hold: your name and email (from the sign-in method you choose — Google, Microsoft, or email registration), your organization membership, and the content you submit (for example, support tickets). We use it to run the service you signed in for — nothing else. We send transactional email (verification, ticket notifications), never marketing you didn't ask for.

Where billing applies, payment is handled by Stripe on Stripe's own pages — card details never touch our servers.

Who processes it

We don't sell or share your data, full stop. It is processed only by the services that run ours: Vercel (hosting), Neon (databases, US region), Resend (transactional email), Stripe (payments, where applicable), and Google or Microsoft when you choose them for sign-in.

Your choices

Write to privacy@oasisfactory.com to access, correct, or delete anything we hold about you. Clear the preview cookie in your browser any time. When this policy changes, this page changes — with a new effective date at the top.