01What does this policy cover?
This policy explains how Octo Assist handles personal data on this website, in the customer dashboard and in the widget that runs on our customers' websites. If you have a question, email support@example.com.
02What does the widget collect about website visitors?
Nothing that tells us who a visitor is.
- A visitor's tool settings and language choice are saved in their own browser (local storage). They are never sent to us.
- The widget does not set cookies and does not track visitors across websites.
- When the widget loads, the visitor's browser asks our server for the widget file and the site's settings. Like any web server, ours sees the IP address and browser type of that request. We use this only to run and protect the service, and server logs are deleted after a short time.
- We count how many times the widget loads on each website per day. This is a number, not a record of who visited.
- If a visitor sends a report with "Report a problem", we store their message, the page address, their browser type, the tools they had on and, only if they add it, their email address. We show the report to the owner of that website.
03What do we collect from customers?
- Account details: your name, email address and password. We store the password only as a secure hash.
- Your websites: domains, widget settings and visitor reports for them.
- Billing: payments are handled by Stripe. We never see or store your full card number. We keep your Stripe customer and subscription ids, your plan and its status.
04Does this website use cookies?
Only one, and only when you log in: a session cookie that keeps you signed in to the dashboard. We don't use advertising or analytics cookies.
05How do we use your data?
- To provide the service: show the widget on your sites, run your dashboard and send visitor reports to you.
- To bill you for your plan through Stripe.
- To answer your questions and keep the service secure.
We don't sell personal data and we don't use it for advertising.
06Who do we share it with?
- Stripe, to take payments.
- Our hosting provider, which runs the servers the service lives on.
- Authorities, only when the law requires it.
07How long do we keep it?
We keep account data while your account is open. When you delete a website, we delete its settings, usage numbers and visitor reports. When you close your account, we delete your data, except what we must keep for tax and accounting records.
08What are your rights?
You can ask us for a copy of your data, to correct it, to delete it or to stop using it. Email support@example.com and we'll respond within the time the law allows. If you sent a report to a website through the widget, you can also contact that website's owner.
09How do we protect it?
All traffic uses HTTPS. Passwords are hashed, payment keys are encrypted, and access to our servers is restricted.
10Will this policy change?
If we change how we handle data, we'll update this page and its date. For important changes, we'll tell customers by email.