Privacy Policy

1. Introduction

Octavus AI ("Octavus," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent orchestration platform and related services (the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and organization details when you create an account
• Profile Information: Profile picture, job title, and other optional details you choose to provide
• Payment Information: Billing address and payment method details (processed by our payment processor)
• Agent Content: Agent protocols, prompts, configurations, and other content you create or upload
• Session Data: Conversations, messages, and interactions between your applications and AI agents
• Support Communications: Information you provide when contacting our support team

2.2 Information Collected Automatically

• Usage Data: Information about how you use the Services, including features accessed, actions taken, and time spent
• Device Information: Browser type, operating system, device identifiers, and IP address
• Log Data: Server logs, error reports, and performance metrics
• Cookies and Tracking: We use cookies and similar technologies to maintain sessions and analyze usage

2.3 Information from Third Parties

• Authentication Providers: If you sign in using a third-party service (e.g., Google, GitHub), we receive basic profile information from that provider
• AI Model Providers: Responses and metadata from AI providers (Anthropic, OpenAI) when processing your requests

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process and route requests to AI model providers
• Manage your account and provide customer support
• Process payments and send billing-related communications
• Send service announcements, security alerts, and product updates
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations and enforce our terms
• Develop new features and services

4. AI Data Processing

When you use our Services, your data may be processed by third-party AI providers:

• Prompts and Responses: Your agent prompts, user messages, and conversation context are sent to AI providers to generate responses
• Session State: We maintain session data to preserve conversation context and enable multi-turn interactions
• Code Execution: If you use agent skills, code may be executed in isolated sandbox environments

We select AI providers that maintain strong privacy and security practices. However, you should review the privacy policies of the AI providers we integrate with:

• Anthropic Privacy Policy
• OpenAI Privacy Policy

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: We share data with vendors who help us operate the Services (hosting, payment processing, analytics, customer support)
• AI Providers: As described in Section 4, data is shared with AI model providers to process your requests
• Within Your Organization: Team members in your organization can access shared projects, agents, and sessions based on their roles
• Legal Requirements: We may disclose information if required by law, court order, or government request
• Safety and Rights: We may share information to protect the safety, rights, or property of Octavus, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

6. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period afterward
• Session Data: Active sessions are retained for 24 hours by default; session history may be retained longer based on your plan
• Agent Content: Retained until you delete it or close your account
• Log Data: Typically retained for 90 days for operational purposes

Some data may be retained longer when required by law or for legitimate business purposes (e.g., fraud prevention, legal claims).

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS) and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Isolated execution environments for code execution
• Employee access controls and security training

While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials and API keys.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@octavus.ai. We will respond to your request within the timeframe required by applicable law.

9. International Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for the Services to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Services
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services.

11. Children's Privacy

The Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

13. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent laws. Our legal bases for processing include:

• Contract: Processing necessary to provide the Services you requested
• Legitimate Interests: Processing for our legitimate business interests (security, analytics, improvement)
• Consent: Processing based on your explicit consent
• Legal Obligation: Processing required by law