Datenschutzrichtlinie

1. Information we collect

We collect the following categories of information:

• Account information — name, email, password (stored hashed), workspace details, and profile photo you upload.
• Content you create — bio pages, landing pages, funnels, products, contacts (CRM), messages, appointments, and media you upload.
• Payment information — processed by our payment provider, Stripe. Octora does not store your full card number; we retain limited details such as card brand and last four digits.
• Connected accounts — when you connect a third-party service (e.g. an email provider, an AI provider, Instagram/Facebook, or your Stripe account), we store the tokens and identifiers needed to operate that integration on your behalf. API keys are encrypted at rest.
• Usage & device data — log data, IP address, browser/user-agent, and interactions with the Services.

2. How we use information

We use information to provide, maintain, and improve the Services; process payments and payouts; power features you enable (such as AI assistance, email sending, and automated messaging); communicate with you; prevent fraud and abuse; and comply with legal obligations.

3. AI features

When you use Octora’s AI features, the content you provide (your prompts, brief, and connected workspace data you authorize) is sent to the AI provider you configure in order to generate responses. We do not use your private content to train third-party models beyond what is necessary to deliver the feature.

4. Meta (Instagram & Facebook) data

If you connect an Instagram or Facebook account to use Auto Messenger, we access only the permissions you grant (such as reading comments/messages and replying on your behalf). We use this data solely to operate the automations you configure. You can disconnect at any time, and you may request deletion of this data as described in our Data Deletion page.

5. How we share information

We share information with service providers who process it on our behalf (e.g. Stripe for payments, your configured email/AI providers, hosting and infrastructure). In the Octora marketplace, when a purchase is made, relevant order details are shared with the selling creator (and, where applicable, the referring affiliate) to fulfill the transaction and calculate commissions. We do not sell your personal information.

6. Government & legal requests

Much of what Octora holds belongs to people who never signed up with us — the followers and customers who message or comment on a creator’s account. We treat a request from a public authority for any of it as something to be examined, not simply obeyed.

• We review every request for legal validity before disclosing anything, including whether the authority has jurisdiction and whether the request is properly issued.
• We challenge requests we believe are unlawful, overbroad, or made without proper legal process, and we will seek to narrow those we consider excessive.
• We disclose the minimum necessary — the specific data actually described by a valid request, never an entire account or workspace because it was easier to hand over.
• We document each request, our response, the legal reasoning, and who was involved.
• We notify the affected customer whenever the law allows it, so they can seek their own advice, and we tell them promptly once any legal restriction on notifying them lifts.

Nothing here is a promise to defy a lawful order. It is a commitment that a lawful order is what it takes.

7. Payments & marketplace

Payments are processed by Stripe. When creators sell through Octora, funds are settled to the creator’s own connected Stripe account; Octora receives a platform fee and does not hold creator or affiliate funds. Each creator and affiliate is responsible for their own taxes on income received. See our Terms of Service.

8. Data retention

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may delete content or your account at any time.

9. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of sensitive credentials at rest and encrypted transport (HTTPS). No method of transmission or storage is 100% secure.

10. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below or use the in-app controls.

11. Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their information.

12. Changes

We may update this Policy from time to time. Material changes will be posted here with an updated date.

13. Contact

Questions about this Policy? Contact us at privacy@myoctora.com.