Privacy Policy

This Privacy Policy applies to the OctaSapien website, application, tools, account features, support channels, analytics features and related services.

Jerónimo Cremona, based in Argentina, operates the global OctaSapien service and is responsible for the processing described in this policy. Privacy requests can be sent to contact@octasapien.com.

We collect account, billing, support and technical information that you provide directly, that is generated when you use the service or that is received from selected providers. Tool request content is handled separately as described below.

Account and billing information is required when you create an account or purchase a subscription; without it, those features cannot be provided. Tool content is optional, but a tool cannot process a request unless you provide the content needed for that request.

• Account information: name, email address, profile image, login provider, account identifiers, role, plan, subscription status and account settings.
• Tool request content: content you deliberately submit when a tool needs backend or AI processing is processed transiently to return the requested result. Usage accounting stores measurements such as character and token counts, not the submitted content or generated output. Tools that run entirely in your browser do not send their working content to OctaSapien. Content is stored only when you deliberately save it to a private project, artifact or other history feature.
• Usage and diagnostic data: IP address, browser, device, language, pages visited, tools opened, timestamps, error logs, performance metrics and similar technical data.
• Payment and billing data: subscription status, customer identifiers, invoices, tax-related billing metadata and payment events. Full card numbers are processed by payment providers and are not stored by OctaSapien.
• Support and communications: messages, requests, feedback, bug reports and any information you choose to send to us.

We use personal information only when we have a valid reason to do so and in a way that is consistent with the purpose for which it was collected.

• To provide, operate, secure, maintain and improve OctaSapien.
• To authenticate users, manage accounts, apply plan limits and enable premium or admin features.
• To process subscriptions, invoices, fraud checks, taxes, chargebacks and customer support requests.
• To analyze aggregated usage trends, understand which tools are used, detect errors and prioritize roadmap improvements.
• To send service messages, security notices, product updates and optional marketing communications when allowed by law.
• To comply with legal obligations, enforce our terms, prevent misuse and protect the rights, safety and security of users and the service.

Some OctaSapien tools may use artificial intelligence or third-party model providers to generate, transform, classify, summarize or analyze content. When a tool is AI-powered, the information you submit to that tool may be sent to the relevant AI provider only for the purpose of processing your request and returning a result.

Do not submit secrets, passwords, production credentials, private keys, regulated personal data, health data, confidential business data or information that you are not authorized to process. Outputs may be inaccurate, incomplete or unsuitable for production without review.

We use necessary cookies for authentication, security, language preference and core functionality. We may also use analytics technologies to understand aggregate usage, performance and conversion trends.

Where required by law, non-essential cookies or similar technologies will be used only with consent. You can control cookies through your browser settings and, if available, through our cookie preferences tool.

• Necessary cookies: required for login, session security, fraud prevention, language preference and service operation.
• Analytics cookies or events: used to understand traffic, tool usage, search visibility, errors and product performance in aggregated or pseudonymous form.

For users in the European Economic Area, the United Kingdom and other regions with similar rules, we rely on one or more legal bases depending on the context.

• Contract: to provide the service, accounts, subscriptions and requested tool functionality.
• Legitimate interests: to secure the platform, prevent abuse, improve the product, perform analytics and communicate about the service, balanced against your rights.
• Consent: for optional cookies, certain marketing communications or other processing where consent is required.
• Legal obligation: to comply with tax, accounting, consumer, data protection, law enforcement or other applicable legal requirements.

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information to vendors only as needed to provide, secure and analyze the service, or when required by law.

• Hosting and infrastructure: Vercel for hosting and deployment, and Supabase for database and private file storage.
• Authentication: login providers such as Google, GitHub or Microsoft, depending on which sign-in methods are enabled.
• Payments: Paddle, acting as Merchant of Record and authorized reseller, for checkout, subscriptions, tax-related billing data, receipts and refunds when paid plans are enabled.
• Transactional email: Resend for account, subscription, payment, quota and support-related email delivery.
• Analytics and search performance: analytics or search console tools used to understand traffic, performance and discoverability.
• AI providers: OpenAI or Azure OpenAI, depending on the configured deployment, when you choose to submit content to an AI-powered tool.
• Legal and safety: public authorities, courts, advisors or counterparties when required to comply with law, enforce rights, investigate abuse or complete a business transfer.

OctaSapien may process and store information in countries other than your own, including Argentina, the United States, the European Union or other locations where our providers operate. Data protection laws in those countries may differ from the laws in your jurisdiction.

Where required, we use appropriate safeguards such as contractual protections, data processing agreements, transfer mechanisms and technical or organizational controls designed to protect personal information.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. We may delete, aggregate or anonymize data when it is no longer needed.

• Account data: kept while the account is active and for a reasonable period after closure to handle disputes, security events and legal obligations.
• Billing data: kept as required for tax, accounting, audit, chargeback and legal compliance.
• Usage logs and analytics: kept for security, debugging and product analytics, usually in aggregated or pseudonymous form when possible.
• Tool content: not retained by OctaSapien after ordinary tool processing. Content deliberately saved to a private project, artifact or history feature remains until you delete it, delete the relevant project or request account deletion, subject to limited backups and legal or security retention.

We use reasonable technical and organizational measures designed to protect personal information, including access controls, secure hosting practices, encryption in transit where applicable, least-privilege access, monitoring and operational safeguards.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials safe and for avoiding the submission of sensitive information that is not needed for a tool to work.

Depending on your location, you may have rights to access, correct, update, delete, restrict, object to or obtain a copy of your personal information. You may also have the right to withdraw consent where processing is based on consent.

In Argentina, access requests are free at intervals of at least six months and must generally be answered within 10 calendar days. Rectification, update or deletion requests must generally be handled within 5 business days. If the response is missing or insufficient, you may file a complaint with the Agency for Access to Public Information (AAIP) or pursue a habeas data action.

EEA/UK users may have GDPR rights, including portability, restriction and objection. California and certain US state residents may have rights to know, access, correct, delete, opt out of certain sharing or targeted advertising, limit sensitive personal information and avoid discrimination for exercising their rights.

OctaSapien is intended for professional users and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can take appropriate steps.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date on this page and, where appropriate, provide additional notice through the service or by email.

For privacy questions or requests, contact contact@octasapien.com.