Privacy Policy

OENA® Lens is a marketing analytics dashboard. Brands and the agencies that work for them connect their advertising, commerce and email accounts, and Lens reads performance data from those accounts and presents it in one place.

This policy describes what we hold, why, and — just as importantly — what we deliberately do not. It covers lens.oena.co and the OENA® Lens application.

Two different groups of people

Almost all confusion about analytics products comes from blurring these, so we will keep them apart throughout.

• Account holders — the people who sign in to Lens. Agency staff and the brand teams they share a workspace with.
• Our customers' customers — the shoppers who buy from the brands whose accounts are connected. These people never sign in to Lens and usually do not know it exists.

What we hold about account holders

• Email address. This is how you sign in. Lens has no passwords — you receive a single-use code by email.
• Which workspaces you may see, and whether you can administer them.
• Sign-in timestamps, kept by our authentication provider.
• Questions you ask the AI analyst, and its replies, so you can return to a conversation later. You can delete a conversation at any time.

We do not run advertising or tracking cookies on Lens. The only cookie we set is the one that keeps you signed in.

What we read from your connected accounts

You choose which platforms to connect, and you can disconnect any of them at any time. For each one, Lens reads performance data only. It does not create, edit, pause or publish anything in your accounts.

• Meta Ads — spend, impressions, clicks and conversions per campaign, ad set and ad; Meta's estimated age and gender bands and its region breakdown for delivery; and the creative itself, meaning the images, video, copy and call-to-action of your own ads.
• Google Ads — spend, clicks, conversions and conversion value per campaign.
• Shopify — order totals, discounts, line items, sales channel and billing state or province; and per-customer lifetime order count and total spend, keyed to Shopify's own customer identifier.
• Klaviyo — campaign and flow performance: sends, opens, clicks, attributed orders and revenue, and segment sizes.
• Google Analytics 4 — sessions, engagement, conversions and revenue by channel, landing page and campaign.
• Microsoft Clarity — page-level behaviour rates such as scroll depth, rage clicks, quick backs and script errors. Aggregated figures only; we do not receive session recordings.

What we do not hold

This list is as important as the one above, and it is enforced in the code.

• No customer names, email addresses, postal addresses or phone numbers. Lens computes acquisition cost and lifetime value from an order count and a total, attached to Shopify's customer identifier. It has no need for contact details and does not request them.
• No payment card details. Card data is handled entirely by Stripe and never reaches our systems.
• No passwords, because Lens does not use them.
• No session recordings, heatmaps or individual browsing histories.
• No data sold, rented or shared for anyone else's advertising. We do not combine one workspace's data with another's, and we do not build cross-client models or benchmarks from it.

How access is kept separate

• Every workspace is isolated at the database level. A signed-in user can only read rows belonging to workspaces they have been added to; this is enforced by the database itself rather than by application code.
• Connection credentials are encrypted at rest and are readable only by the server processes that call the platform APIs. They are not visible to any signed-in user, including workspace administrators, and they are never sent to a browser.

The AI analyst

Lens includes a conversational analyst. When you ask it a question, we send your question and the relevant figures from your own workspace to Anthropic, which operates the underlying model. We do not send data from any other workspace.

• Anthropic does not use this data to train its models.
• Your questions and the replies are stored in your workspace so you can return to them, and you can delete them.
• Answers are generated from your figures and can still be wrong or incomplete. Check anything you intend to act on.

Who else processes this data

We keep the list short on purpose. Each of these is a processor acting on our instructions.

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Anthropic — the AI analyst, as described above.
• Stripe — payments for AI usage.
• Resend — sign-in codes and the daily digest email.

The platforms you connect — Meta, Google, Shopify, Klaviyo, Microsoft — are not our processors. They are your own accounts, governed by your agreements with them, and Lens reads from them with the access you grant.

How long we keep it

• Performance data is kept while your workspace is active, so that year-on-year comparisons remain possible.
• When a workspace is closed, its data and its stored credentials are deleted within 30 days.
• Disconnecting a platform removes its credentials immediately. When you disconnect, you can also delete everything already synced from it, and that is removed at once. Otherwise those figures remain until the workspace is closed, or until you ask us to remove them.

Your rights

If you are in the UK or the EEA you have the right to access a copy of your personal data, to correct it, to have it deleted, to restrict or object to its processing, and to complain to a supervisory authority — in the UK, the Information Commissioner's Office.

For account holders, we act as the data controller. For the performance data in a workspace, the brand is the controller and OENA® acts as processor on its instructions.

International transfers

Some of our processors operate outside the UK and EEA. Where data is transferred, it is covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

Changes

If we change what we collect or who processes it, we will update this page and change the date above. Material changes will be notified to account holders by email.

Contact

Write to privacy@oena.co for anything in this policy, including a request to access or delete your data.