Privacy Policy
This Privacy Policy explains how Ovenfo (legal name OVENFO TECHNOLOGY, RUC 10040564603, Av. Los Nogales 251, El Agustino, Lima, Peru — "Ovenfo", "we") collects, uses, stores and protects information in:
- the website ovenfo.com (the "Website"); and
- Ovenfo Studio, a desktop application for Windows that helps creators turn a story into a short vertical video and publish it to their own YouTube channel, Facebook Page and TikTok account (the "App").
Contact for any privacy question or request: social@ovenfo.com.
1. How Ovenfo Studio works
Ovenfo Studio runs locally on the user's own computer. Videos, scripts, settings and access tokens are
stored only in folders of that computer (for example %USERPROFILE%\.ovenfo-short-creator and the
user's video folder). Ovenfo does not operate a server that receives, stores or processes the App's user
data. The App only connects to the services the user explicitly configures and authorizes.
2. Google user data (YouTube Data API)
When the user clicks "Connect with YouTube", the App asks Google for these permissions (scopes):
https://www.googleapis.com/auth/youtube.upload— to upload to the user's own YouTube channel the videos the user has reviewed and explicitly approved in the App, with the title, description and tags shown to the user before publishing.https://www.googleapis.com/auth/youtube.readonly— to read the name of the connected channel, so the user can confirm which channel is connected, and to check the status of the uploaded videos.
How we use it: only to provide those user-facing features. The App does not read, download, modify or delete any other content of the user's YouTube account.
Storage: the OAuth access and refresh tokens are saved only on the user's computer. They are never sent to Ovenfo or to third parties.
Sharing: Google user data is not sold, rented, shared or transferred to anyone, is not used for advertising, and is not used to develop, improve or train artificial intelligence or machine-learning models.
Limited Use: Ovenfo Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
By connecting YouTube, users also agree to the YouTube Terms of Service, and Google's processing is governed by the Google Privacy Policy.
Revoking access: users can disconnect the App at any time at
myaccount.google.com/permissions, and delete the
stored token by deleting the credentials folder of the App.
3. Meta (Facebook Page) data
If the user connects Facebook, the App uses the permissions pages_show_list,
pages_read_engagement and pages_manage_posts (and business_management when the Page
belongs to a Business portfolio) only to list the Pages the user manages, let the user choose one, and publish the
approved video as a Reel on that Page. The Page access token is stored only on the user's computer. Users can
remove the App in Facebook → Settings → Business integrations.
4. TikTok data
If the user connects TikTok, the App uses the scopes user.info.basic (to show the connected account name)
and video.upload (to send the approved video to the user's TikTok inbox as a draft; the user finishes and
publishes it inside the TikTok app). Tokens are stored only on the user's computer. Users can revoke access in
TikTok → Settings → Security → Manage app permissions.
5. Telegram
Users may connect their own Telegram bot. The App receives the text messages, voice notes and photos that authorized chats send to that bot, in order to write the video script, and sends back previews and approval buttons. The bot token and the list of authorized chat IDs are stored only on the user's computer.
6. AI processing
- Voice transcription (voice notes and video subtitles) runs locally on the user's computer (open-source Whisper model). Audio is not uploaded anywhere.
- Script writing: the story text, transcriptions and reference photos provided by the user are sent to the AI model the user configures — Anthropic Claude, either directly or through Microsoft Azure AI Foundry — using the user's own account and API key. That processing is subject to the provider's terms and privacy policy. No Google user data is sent to AI providers.
- Optional thumbnails may be generated with the image model of the user's own Azure OpenAI or OpenAI account.
7. Website data
- Newsletter, contact form, waiting list and complaints book: name, email and the information the visitor writes, used only to answer, send the requested updates and comply with Peruvian consumer law.
- Payments: processed by our payment provider; Ovenfo does not store card data.
- Cookies and analytics: Google Tag Manager / analytics load only after the visitor accepts cookies. Google reCAPTCHA protects the forms against spam and is subject to Google's Privacy Policy and Terms.
8. Retention and deletion
App data stays on the user's computer until the user deletes it: deleting a story folder deletes that video and its
script; uninstalling the App and deleting %USERPROFILE%\.ovenfo-short-creator deletes all settings and
tokens. Website data is kept while needed for the purpose it was given for; to request access, correction or
deletion write to social@ovenfo.com and we will answer within 30 days, in
accordance with Peruvian Law No. 29733 on Personal Data Protection.
9. Security
The App's local web interface only listens on the user's own computer (127.0.0.1) and never displays stored keys or tokens. Connections to Google, Meta, TikTok, Telegram and AI providers use HTTPS.
10. Children
The Website and the App are not directed to children under 13, and we do not knowingly collect their data.
11. Changes
We will publish any change on this page with a new "Last updated" date.