Privacy Policy

Last updated 29 October 2026

Stabilix Ltd ("we", "us"), the company that operates the Ogen brand, is the controller of the personal data described here. This policy explains what we collect when you visit getogen.com, join the early-access list or use the Ogen service, why we collect it, and what you can do about it.

1. What we collect

Early-access signups. When you submit the form on getogen.com we collect the email address you give us, and optionally your name, company, what kind of work you do and anything you type into the message field. We also record which page the signup came from and when it was submitted.

Account data. If you go on to use Ogen: your name, email address, password credentials, workspace and team details, and your account settings.

Content you put into the product. Brand information, prompts, drafts, assets, schedules and the credentials or tokens for the channels you connect.

Usage data. Logs of how the Service is used — pages and features accessed, timestamps, IP address, browser and device information — which we use to run, secure and improve it.

Payment data. If you subscribe, your payment is handled by Lemon Squeezy as merchant of record. Card numbers never reach our systems; we receive only the transaction, plan and billing details we need to give you access and keep records.

2. Why we use it, and on what legal basis

To provide the Service you asked for, and to administer your account — performance of a contract.
To respond to an early-access request and tell you when your invitation is ready — your consent, which you can withdraw at any time by replying or emailing us.
To secure the Service, prevent abuse and fix problems — our legitimate interests.
To keep accounting and tax records and comply with law — legal obligation.
To send product updates or marketing, where you have opted in — your consent.

We do not sell personal data, and we do not share it with anyone for their own advertising.

3. AI processing

Ogen generates content using AI models, some of which are operated by third-party providers. Content you submit for generation is sent to those providers only to produce your output, under agreements that prohibit them from using it to train their models. We do not use your content to train shared models, and we do not expose one customer’s content to another.

4. Who we share it with

We use a small number of service providers who process data on our behalf, under contract and only on our instructions:

Sanity — content and early-access signup storage;
Railway — application hosting;
Ahrefs — visit counts for the getogen.com marketing site, without cookies;
Lemon Squeezy — payment processing, invoicing and tax, as merchant of record;
AI model providers — content generation;
email delivery providers — transactional and notification email.

We may also disclose data if the law requires it, to protect our rights or someone’s safety, or as part of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

5. International transfers

Our providers may process data outside your country, including in the United States. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep it

Early-access signups are kept until the launch programme ends, or until you ask us to delete them — whichever comes first.

Account and content data is kept for as long as your account is active, and deleted or anonymised within 90 days of you closing it. Records we are required to keep for tax and accounting purposes are retained for as long as the law requires.

7. Your rights

Under the GDPR and similar laws you have the right to:

access the personal data we hold about you and get a copy of it;
rectification — have inaccurate or incomplete data corrected;
erasure — have your data deleted, including your early-access signup;
restrict how we process it, or object to processing based on our legitimate interests;
data portability — receive it in a portable format;
withdraw any consent you have given, at any time, without affecting what was done before.

Residents of California and other US states with similar laws have equivalent rights and the right not to be discriminated against for using them.

To use any of these rights — including to have your data deleted — email [email protected] from the address the data is about, saying what you would like us to do. We will respond within 30 days. You can also complain to your local data protection authority.

8. Cookies

The getogen.com marketing site does not set advertising or cross-site tracking cookies. It counts visits with Ahrefs Web Analytics, which sets no cookies: like any request your browser makes, it receives the address of the page you visit, the page that sent you there, and your browser and device type. The Ogen application uses only the cookies it needs to keep you signed in and keep your session secure.

9. Security

We use encryption in transit, access controls and least-privilege credentials, and we keep the number of people who can reach production data small. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

11. Changes and contact

We will post any update to this policy on this page and change the date below. Material changes will be notified by email where we have your address.