Back to Ovenward

Interim notice · Updated September 16, 2026

Privacy notice

Who operates Ovenward

KED LLC is the legal entity responsible for the Ovenward product and its current provider accounts. Ovenward is the public product and brand name, not a separate legal entity.

Interest form

We collect the contact and business information you choose to provide, your stated interest, basic referral and campaign attribution, and a record of your consent.

How it is used

We use this information to evaluate founding-cohort fit, respond to your request, improve the product, prevent abuse, and send product updates only if you separately choose them.

Vendor account phone number

If you use the separate vendor workspace, your phone number is used to send a one-time code, protect account access, prevent abuse, and maintain account-security records. The verification code does not enroll you in an ongoing messaging program.

You may separately select an unchecked optional box to receive direct Ovenward account, payment, security, service, and support text updates. Consent is not required to create an account, make a purchase, or use Ovenward. Marketing messages are not included and require separate consent. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help.

We do not sell or share mobile information with third parties for promotional or marketing purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Messaging providers may process it only as needed to deliver the program.

Preview limits

Submitting interest does not create an account or guarantee access. Creating an invited preview account does not create a paid relationship, publish a storefront, or enable live orders, payments, or customer messages. Draft workspace data is staging data and must not include payment details or sensitive personal information.

Connected services

The vendor preview includes a provider-disabled Instagram connection surface for controlled testing. It does not currently accept real Meta credentials or media. Read the public Instagram connection and data deletion stepsbefore using the test integration.

Anonymous activity totals

Production Ovenward websites and the customer app count page views and interactions by default to help us and each business improve content, browsing and checkout. These counts use fixed page or interaction names and public storefront/drop references. They do not contain visitor, device, account or session identifiers, contact details, payment details, IP addresses, full URLs or form entries. We store shared counters, not individual browsing histories, and do not connect these counts to Google Analytics or account/order records.

You can turn anonymous totals off using Privacy choices at the bottom of the website or Analytics preferences in the customer app. Anonymous counting sets no tracking cookie; choosing a preference saves only an on/off setting. A saved prior analytics refusal is respected until you separately choose anonymous totals. Network infrastructure processes connection information to deliver and protect requests. Counter data is retained for up to 30 days before expiry; reporting aggregates are retained for 13 months. These counts cannot identify repeat visitors or reconstruct an individual checkout journey.

Optional detailed analytics

On production Ovenward websites and the customer app, you can choose whether to allow Firebase Analytics, a Google service. It measures page and drop views, content engagement, signup steps and checkout steps. Your choice does not affect account access or shopping, and is separate from marketing-message consent. Change it using Privacy choices at the bottom of the website or Analytics preferences in the app settings.

When allowed, Analytics uses pseudonymous browser or app identifiers, a measured session, device and browser information, approximate location, coarse referral categories, and opaque storefront, drop and order references. We do not send phone numbers, email addresses, names, form entries, payment details, full referral URLs or campaign text in these events. Google processes connection information to operate Analytics. Advertising personalization and Google signals are disabled.

We combine measured checkout references with confirmed order records for conversion reporting. A business sees aggregate reports for its own storefront and drops; Ovenward administrators see platform and marketing reports. People who decline detailed analytics or block collection are absent from Firebase visitor and conversion reports. Anonymous activity totals are reported separately. Operational account and payment records are maintained separately to provide the service.

Our reporting export retains individual usage events for 30 days and aggregate reports for 13 months. In Google Analytics itself, detailed events are retained for two months and user-level data for 14 months, with the user retention period renewed by activity. Google’s standard aggregate reports follow its separate retention policy. Detailed analytics preferences last up to six months. Anonymous website preferences also last up to six months; the anonymous app setting stays until you change it or remove the app data. Withdrawal stops future optional collection on that browser or app; previously recorded data follows its retention period. See how Google processes information from sites and apps that use its services.

QR code links and scan reports

Businesses can create QR codes that open an Ovenward link and then redirect to a website they choose. Ovenward records aggregate visit counts for these links and shows the business its recorded total and recent daily counts. These are link visits, not a count of identifiable or unique people. The QR reporting feature does not set tracking cookies or store visitors’ IP addresses, device fingerprints, or individual browsing histories in its analytics records. Infrastructure may process request information to operate and protect the service. The destination website has its own privacy practices.

Questions and requests

Contact details for privacy requests will be published here before a broader public launch. If we follow up on your request in the meantime, you may reply to that message with a privacy question. This interim notice requires legal and privacy review before any external pilot.