Anti-Fraud & Abuse Prevention Policy

Scope of this policy

This policy explains how Ovaideu protects the platform, connected advertising and analytics accounts, our customers and the public from fraud and abuse. It applies to every account and user of ovaideu.com.

It covers, and authorizes us to act against: trial, offer and coupon abuse and multi-accounting; payment fraud and chargebacks; automated scraping, cloning and reverse-engineering; credential-stuffing, hacking, denial-of-service and other attacks; circumvention of our Terms; and platform abuse that puts connected ad accounts, other users or the service at risk.

What we may do

To prevent the abuse above we may detect, investigate, rate-limit, block, suspend and terminate accounts, and retain a minimal set of fraud-prevention signals. We may refuse or reverse trials, offers and credits obtained through abuse.

Automated systems assist this work, but enforcement that materially affects an account is subject to human review, and you can contact support@ovaideu.com if you believe an action was taken in error.

Minimal signals we retain

When an account is deleted we delete your personal data and any Google or Meta user data. We retain only a minimal abuse-signal record designed so it cannot be used to profile or market to you: a one-way hash of your email, a hashed and truncated form of your IP network, an optional device fingerprint, and abuse, trial, chargeback and fraud flags.

These signals are stored as one-way hashes rather than plaintext on purpose — this lets us recognize a returning bad actor or a repeat free-trial without holding rich personal information about you. We keep only what is needed for suppression and abuse prevention, use it for no unrelated purpose, never sell it, and never use it to train or develop AI or machine-learning models.

Free trials

A free trial may be used once. If our systems detect that an email previously used a trial — including through deleting and re-creating an account to obtain a repeat trial — a new trial will not be granted, and we will tell you so and invite you to subscribe. If you believe this is a mistake, contact support@ovaideu.com.

Legal basis

Where data-protection law applies, we rely on our legitimate interests in securing the service, preventing fraud and abuse and enforcing our Terms (GDPR / UK GDPR Article 6(1)(f)), balanced against your rights and freedoms.

We rely on the recognized exceptions that permit continued retention where necessary to comply with a legal obligation, to establish, exercise or defend legal claims, or to prevent fraud (including GDPR Article 17(3)(b) and (e)). For California residents, we rely on the security and fraud-prevention business-purpose exceptions under the CCPA/CPRA.

Retention is proportionate, minimized, access-controlled and time-bounded where possible. This is our lawful basis for limited retention, not a waiver of your rights: where your local law grants you stronger rights, those rights apply.

Law enforcement and legal process

We may keep a secured, access-controlled audit log and disclose information from it only pursuant to valid legal process — such as a subpoena, court order or other lawful request — and never on an ad-hoc basis.

Account deletion and data retention

You can delete your account at any time from Settings. Deletion is confirmed by an email one-time code, after which the account enters a locked recovery state: you can reactivate it, or delete it permanently. We never auto-delete your account — permanent deletion happens only when you return and explicitly confirm it.

The moment you request deletion we revoke your connected Google and provider tokens and schedule the purge of your Google and personal data; we do not wait for the recovery window to honor that revocation. A minimum 90-day recovery window applies, and reactivating at any point resets it. See the Privacy Policy and the Data Deletion page for details.

Contact

Questions about this policy, or a request to review an enforcement action, can be sent to support@ovaideu.com.