At OctaSpote, we build AI employees that work inside your business. That responsibility starts with how we treat your data. This policy explains what we collect, why, and the control you keep.
- We never sell your data
- Export or delete anytime
- Never used to train shared models
- Encrypted: TLS 1.3 + AES-256
1. Data we collect
We collect account information (name, email, business name), billing information (handled by our payment providers), and the business data you connect to the platform — channels, content, customer records — which we process only to operate your AI workforce.
2. How we use your data
Your data is used exclusively to run your AI workforce: answering customers, producing content, managing campaigns and improving your workspace. We never sell your data and never use it to train shared models.
3. Data isolation
Every workspace is isolated. Your data is stored separately, accessed only by your authorized agents and team, and never mixed with other customers' data.
4. Retention & deletion
You can export or delete your data at any time from your workspace. On account cancellation, your data is deleted within 30 days unless legal obligations require otherwise.
5. Security
We protect data with TLS 1.3 in transit, AES-256 at rest, least-privilege access and continuous monitoring. See our Security page for details.
6. Your rights
You have the right to access, correct, export and delete your personal data, and to object to or restrict certain processing. Contact us and we will act within 30 days. If you are in the EU, EEA or the UK, you may also lodge a complaint with your local data protection supervisory authority.
7. Contact
For any privacy question, contact privacy@octaspote.com.
8. Data controller
OctaSpote is a trademark/service operated by E B M TRANS ELEKTRONİK TİCARET LİMİTED ŞİRKETİ, which acts as the data controller for the personal data described in this policy. For any controller-related request, contact privacy@octaspote.com.
9. Service providers & AI processing
To run the service we share limited data with carefully selected providers: Paddle (payment processing), Vercel (hosting and anonymous, cookieless analytics), Google (calendar sync, only when you connect it), Meta (WhatsApp and Instagram channels, only when you connect them), and AI model providers that process your prompts and business content solely to generate responses, drafts and insights for your workspace. Your data may be processed outside your country; where EU law applies, we rely on standard contractual clauses or equivalent safeguards. We never sell your data, and your content is never used to train shared or public models.
10. Legal basis for processing
Where the GDPR applies, we process personal data on the following legal bases: performance of the contract (operating your workspace), consent (for optional features you enable), and legitimate interests (security, fraud prevention and improving the service). You may withdraw consent at any time without affecting the service you have paid for.
Questions about this policy?
Our team replies within business hours. Email us: