Privacy, in plain language.

The people behind the reading.

Octus Network, Inc. operates octusnetwork.com and the community intelligence services described there. We're an Atlanta-based company, and we're the ones signing the briefs.

When this policy says “we,” “us,” or “Octus,” it means Octus Network, Inc. When it says “you,” it means anyone visiting our site, filling out a form, or engaging with our intelligence products, including community members whose signals are read on behalf of one of our clients.

This policy covers everything we collect through the website and through the intelligence work we deliver. It does not cover third-party sites we link to; those have their own policies.

Only what the reading needs.

We collect information in three buckets, and we think it's important you know which is which.

• You give usName, email, company, and anything else you type into a form or send us in an email. Calendar details when you book an advisor call. Messages you send us, including voicemails.
• Your device tells usIP address, browser type, device type, pages visited, referring URL, and rough approximate location (usually city-level). Standard server logs, kept short.
• Clients give usWhen we run an intelligence reading for a client, we receive the data they share under their contract, ticketing exports, email lists, attendance records, survey responses, social handles. This is their data; we process it on their behalf.

We do not buy data from brokers. We do not fingerprint visitors. We do not use third-party advertising pixels on this site.

To do the work, and to do it better.

The information above is used for six things, and no more:

• DeliverTo run the intelligence engagement you or a client has contracted for, the reading, the brief, the activation.
• CommunicateTo respond to inquiries, send requested material, and schedule advisor calls.
• ImproveTo make our methodology sharper over time. Aggregated and anonymized patterns only.
• OperateTo run the site, keep it fast, and prevent abuse.
• AccountTo issue invoices, track payments, and comply with tax and accounting obligations.
• ComplyTo meet legal obligations and respond to valid legal process.

Sub-processors, not sales.

We use a short list of trusted vendors to run the business, email, hosting, payments, analytics. They receive only what they need to do their job, and they're contractually restricted from using your data for anything else.

• HostingCloud infrastructure to serve the website and store business records.
• EmailTo send advisor-call confirmations, briefs, and operational correspondence.
• PaymentsTo process invoices for paid engagements.
• AnalyticsPrivacy-respecting analytics to understand how the site is used. No cross-site tracking.

We will disclose information if required by a valid legal process, subpoena, court order, or regulatory request, and when necessary to protect our rights, property, or safety, or the safety of others. We will tell you about it unless the law prohibits us from doing so.

Long enough to do the job.

Different data has different retention windows. Broadly:

• Inquiry forms24 months from last contact, unless you ask us to delete sooner.
• Engagement dataDuration of the engagement plus 24 months. Retained in raw form to support the continuous-loop model that underpins our methodology.
• Financial records7 years, as required by U.S. tax law.
• Server logs90 days.

At the end of the retention window, we delete or irreversibly anonymize the data. When we work on behalf of a client, we follow the retention terms in that client's contract.

What you can ask us to do.

You can ask to see what we have, correct it, delete it, or stop us from using it. We'll respond within 30 days.

Specifically:

• AccessSee the personal information we hold about you.
• CorrectAsk us to fix information that's wrong.
• DeleteAsk us to delete your information. Some records we're legally required to keep; we'll tell you if that applies.
• PortGet a copy in a structured, machine-readable format.
• Opt outTell us to stop using your information for marketing, analytics, or anything else not strictly necessary to the work.
• ComplainFile a complaint with us first, we'd rather hear it. And/or with your state attorney general.

To exercise any of these, email privacy@octusnetwork.com. We do not charge for the first request in a 12-month window.

If you are a community member whose data we process on behalf of a client, your primary relationship is with that client. We'll forward your request to them and support them in responding.

Reasonable measures, honestly described.

We use industry-standard administrative, technical, and physical safeguards to protect information we hold, encryption in transit and at rest, access controls keyed to individual operators, audit logs on sensitive data, and periodic reviews of our vendors.

No system is perfectly secure. If we become aware of a breach that affects your data, we'll tell you promptly and tell you what we're doing about it.

We don't serve under-13.

Octus is a B2B service. We do not knowingly collect personal information from anyone under the age of 13, and our clients' engagements are not designed for children's events. If you believe a child has provided us with personal information, email us at the address below and we'll delete it.

We'll tell you.

When we update this policy in any material way, we'll update the “Last updated” date at the top and, for active engagements and subscribers, send a note. Minor edits (clarifying language, fixing typos) may be made without notice.

Prior versions are available on request.

A human, not a form.