Eloqua Data Access

Review the Eloqua permissions and access roles required by FeedOtter.

At FeedOtter, security is a top priority. We've collaborated with Eloqua's API team to ensure we access only the minimal data necessary to function. This page explains how FeedOtter interacts with your Eloqua data and account.

API Methods Used

Besides those used for authentication, FeedOtter for Eloqua utilizes 4 separate REST API methods:

READ ONLY - Retrieve a list of contact segment

Used to present the user with a UI for selecting the target contacts for an email campaign.

Eloqua Docs: https://docs.oracle.com/en/cloud/saas/marketing/eloqua-rest-api/op-api-rest-1.0-assets-contact-segments-get.html

READ ONLY - Retrieve a list of email groups

Used to present the user with a UI for selecting the Email Group and Header/Footer to append to an email.

Eloqua Docs: https://docs.oracle.com/en/cloud/saas/marketing/eloqua-rest-api/op-api-rest-1.0-assets-email-groups-get.html

WRITE - Create a campaign

A one-way write call that creates a new Simple Email Campaign object in Eloqua. This call passes an Email ID, Segment ID, Email Group ID, Email Group Header and Footer ID, and to/from/subject details as supplied in the FeedOtter UI during setup.

A successful call return the Eloqua ID of the new campaign. This ID number is saved to provide history and logging details.

Eloqua Docs: https://docs.oracle.com/en/cloud/saas/marketing/eloqua-rest-api/op-api-rest-2.0-assets-campaign-post.html

WRITE - Create an email

A one-way write call that creates a new Email object in Eloqua.

Eloqua Docs: https://docs.oracle.com/en/cloud/saas/marketing/eloqua-rest-api/op-api-rest-2.0-assets-email-post.html

FeedOtter Encryption

All pertinent user and account data is encrypted using AES256. This includes passwords, email addresses, api tokens, keys, and associated data.

All campaign details at-rest are also encrypted and include generic "ids" never any personal or PII details.

FeedOtter's user/login password scheme uses PBKDF2.

There is no use of MD5 or Sha hashing.

Prospects and Personal Information

FeedOtter NEVER accesses your leads, email addresses, employees, or company information. As described in the previous section we perform read-only queries to provide UI elements and two write operations to create a new email and campaign.