Privacy Policy

Squarepoint Consulting LLC, doing business as ("d/b/a") Octogee ("we," "us," "our"), an Oregon limited liability company, operates the Octogee platform at octogee.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using Octogee, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Gateway placement. A workspace may run in the shared Barn or, for eligible paid access, on a disposable single-Builder Builder gateway. The Barn uses Octogee-managed runtime configuration, providers, and tools. A Builder gateway provides stronger runtime isolation and lets the Builder manage OpenClaw configuration, native model-subscription tooling, and deliberately enabled custom capabilities. Octogee continues to enforce tenant-bound identity, authorization, and platform broker boundaries; the Builder is responsible for the additional configuration and integrations they choose.

If you are served by an Octogee Studio. Octogee licenses independent regional operators ("Octogee Studios") to deliver the platform to you as a managed service. If you are onboarded through an Octogee Studio, that Studio operates your workspace and may act as an independent controller of your business data, while Octogee provides and hosts the platform and processes data as described in this policy. Octogee Studios are independently owned and operated and are bound by confidentiality and data-protection obligations under their license with Octogee. See Section 4.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account. If you sign in with Google, we receive your name, email, and profile picture from Google.
• Business Information: Business name, project descriptions, goals, and other information you provide during onboarding and use of the Service.
• Payment Information: Payment details are collected and processed by our payment processor, Stripe, Inc. We do not store your full credit card number. We receive your Stripe customer ID and subscription status.
• Communications: Messages you exchange with your AI agents and team, including conversations with your AI Coach. Chat runs on our self-hosted Mattermost instance and through the web app. These conversations are stored to provide persistent memory and continuity of service.
• Credentials You Choose to Connect: Optionally, you may authorize supported third-party capabilities — for example, Google Workspace, GitHub, or a supported AI model subscription or API key. A connected GitHub credential may let your workspace and AI Agents read or change only the repositories and content allowed by the access you grant. Providing a credential is never required and is always your choice. Stored credentials are encrypted in Octogee's platform storage, released only through scoped server-side broker paths for the capability you direct, and never sold. You can disconnect a credential at any time, or contact support@octogee.com to have one removed. Credential sharing is a mutual responsibility — our Terms of Service describe what we each take on.
• Customer Business Data: If you use Octogee to manage business records — such as customers and contacts, leads and sales pipeline, invoices and bookkeeping entries, schedules and appointments, projects and tasks, documents, and website content — we store that data on your behalf.

1.2 Information Collected Automatically

• Usage Data: Token usage, interaction counts, feature usage, session timestamps, and throttle status.
• Analytics Data: We use PostHog Cloud US across the public site and authenticated product to understand acquisition, page views, broad link categories, scroll-depth milestones, engagement checkpoints, signup, activation, product value, sharing, retention, and checkout outcomes. Public-site events begin with an anonymous first-party identifier; after sign-in, the browser associates that history with your internal Firebase user ID. We also synchronize your account display name and email address as person-profile properties to make activity readable, and mark internal/test accounts so our growth reports can exclude testing. Name and email are not used as analytics user IDs or product-event properties. We do not send messages, files, agent prompts, workspace content, project names, or other customer content to analytics. Client IP data is discarded. We do not use autocapture, session replay, page-text capture, console capture, exception capture, heatmaps, or dead-click capture. If your browser sends a Do Not Track signal, the product does not send browser analytics events; feature delivery still works.
• Device Information: Browser type, operating system, IP address, and referring URLs collected via standard web server logs.
• Cookies: We use essential cookies for authentication and session management and first-party analytics cookies to understand visits and conversions. We do not use third-party advertising cookies.

2. How We Use Your Information

• Provide the Service: Operate your AI agents, maintain conversation history, manage your workspace, and deliver personalized business assistance.
• Process Payments: Manage subscriptions, billing, and usage-based features via Stripe.
• Improve the Service: Analyze usage patterns (in aggregate) to improve features, reliability, and performance.
• Communicate: Send transactional emails (account verification, billing receipts, service notifications). We will not send marketing emails without your consent.
• Enforce Terms: Detect abuse, enforce usage limits, and protect the security of the Service.

3. AI Processing and Third-Party AI Providers

Octogee uses one or more third-party AI model providers to power AI Agent responses. The provider may vary by capability, model selection, availability, safety, cost, or service configuration. When you interact with your AI Agents:

• Your messages and the context needed to answer them are sent to the AI model provider selected for that request.
• We contract with AI providers as service providers and require them to handle data under their applicable commercial and data-protection terms.
• Octogee does not use your inputs or outputs to train generalized models or develop products for other customers.
• We do not guarantee the accuracy, completeness, or reliability of AI-generated content. AI outputs are informational and should not be relied upon as professional advice (legal, financial, medical, or otherwise).

3A. Google User Data (Gmail, Google Calendar, Google Drive, Google Tasks, Google Contacts)

You can optionally connect your Google account so your AI agent can work with your email, calendar, files, tasks, and contacts. This is a separate, capability-scoped consent — signing in to Octogee with Google does not grant it. You choose each capability individually:

• Google Calendar: your agent reads your schedule and creates, updates, or deletes events you organize.
• Gmail: your agent reads, organizes, drafts, and sends email on your behalf. It cannot permanently delete your mail.
• Google Drive: by default your agent can access only the files you explicitly share through the Google file picker, plus files it creates. You may optionally grant read access to your full Drive.
• Google Tasks: your agent reads, creates, and completes your tasks.
• Google Contacts: your agent looks up the contact-card information you store with Google, including names, emails, phone numbers, addresses, organizations, dates, notes, and related fields. This access is read-only — your agent cannot create, edit, or delete your contacts.

How we use it. Google user data is used solely to provide the agent features you ask for — reading and acting on your own mail, calendar, files, tasks, and contacts inside your own workspace. Content your agent retrieves may appear in your conversation history, which you control and can delete. Productivity connections are available to your workspace Coach. Ordinary workspace membership does not itself grant Google access through Octogee’s broker: ongoing collaborator permissions must be approved for the operation and data scope. You can manage these permissions in Account → Connections; agent-requested changes use the approval authority described below. These permissions apply across current and future workspace channels where that Builder and your Coach have access. Members of the channel where results are posted can see them. You can modify or revoke these permissions in Account → Connections. Sending email and other protected changes still require separate approval. Project Agents, project conversations, and collaborators’ access to your private Coach history are not authorized by these grants. We do not sell Google user data, do not use it for advertising, and share it through these features within approved collaborator permissions or with the service providers described in Section 4 acting on our behalf (including AI providers whose commercial terms prohibit training on your data).

Who can approve. In the shared Barn, only the connection owner can approve collaborator permissions and protected actions. On a Builder gateway, authorized delegates with native OpenClaw approval roles may also approve agent-requested permission changes and protected actions. Membership alone does not confer an approval role. Standing collaborator permissions do not waive the separate approval required to send email or make other protected changes. These roles do not replace Google OAuth consent or expand the scopes granted by Google.

Trusted Builder runtime. A Builder gateway gives its owner and admitted collaborators access to powerful agent and host tools. Code controlling that runtime can impersonate a local approver or change its approval records, including when an agent follows malicious content. Octogee’s broker trusts native approval decisions for the owner’s authorized resources. Approval prompts and application permissions therefore do not isolate Google-derived content available in that runtime from people or code with host-level control. Invite only people you trust with that access. This runtime trust is separate from the shared Barn’s owner-only approval model.

How we store and protect it. Your Google OAuth tokens are encrypted with Google Cloud KMS before being stored. The long-lived refresh token is decrypted only on the server and the refresh token is never sent to your browser. When you open Google Picker, Octogee sends a short-lived Google access token to your authenticated browser solely so the Picker can grant access to the files you select; the response is not cached and Octogee does not persist that token in browser storage.

AI/ML limitation. We do not retain or use data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized artificial intelligence and/or machine learning models. Google user data is used only to provide personalized, user-facing features for the account that granted it, and is never co-mingled across users for model development.

Limited Use disclosure. Octogee's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will adhere to that policy's Limited Use requirements.

Revoking access. Revoking a collaborator permission stops future authorized use; it does not erase results already shared in a channel or undo completed actions. Disconnect Google at any time from Account → Connections: Octogee revokes its access with Google and deletes the stored tokens. You can also revoke Octogee's access from your Google Account permissions page.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Service Providers: Stripe (payments), the AI model provider selected for a request (AI processing), Google Cloud Platform (hosting and infrastructure), PostHog Cloud US (site and product analytics and feature delivery), Cloudflare (DNS and PostHog's managed analytics proxy), and Resend (transactional email). Each provider processes data only as necessary to provide its respective service under its applicable commercial and privacy terms. Self-hosted components — such as our Mattermost chat and Gitea repositories — run on our own infrastructure and are not third-party subprocessors.
• Your Octogee Studio (if applicable): If you are onboarded through an independent Octogee Studio, that Studio operates your workspace and has access to the data necessary to deliver its services to you. Studios are licensed by Octogee and bound by confidentiality and data-protection obligations under that license; with respect to the services it provides to you, the Studio acts as an independent controller of your data.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
• With Your Consent: We may share information for any other purpose with your explicit consent.

5. Data Storage and Security

• Data is stored on Google Cloud Platform infrastructure in the United States. Active customer data, managed application compute, Cloud SQL, Google Cloud Firestore, and Firebase Storage run in our active production environment; selected build and control data may also use a United States multi-region. Site and product analytics and feature-flag evaluations are processed in PostHog Cloud US; analytics requests sent through our managed proxy transit Cloudflare infrastructure.
• We use industry-standard security measures including encryption in transit (TLS), Firebase Authentication, and access controls.
• AI agent workspaces in the shared Barn are logically separated per customer. Eligible paid Builders may instead use a disposable, single-Builder gateway. Both placements enforce tenant-bound identity and authorization controls.
• Despite our efforts, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

5.1 Data Breach Notification

In the event of a security breach involving your personal information, we will notify affected users and applicable regulatory authorities in accordance with Oregon's Consumer Identity Theft Protection Act (ORS 646A.604) and other applicable state laws, without unreasonable delay and in no case later than the timeframes required by law.

6. Data Retention

• Active Accounts: We retain your data for as long as your account is active.
• Free Accounts: Ending paid or promotional access does not itself delete your account. Your workspace and workspace-level channels remain with your open Free account, subject to the current Free storage and usage allowances shown in the product.
• Project Archives After Paid Access: Projects are retained in a read-only archive for 90 days. During that window, Gitea project repositories and Mattermost project channels use their native archived states, and project Agents are not materialized or running. The project cannot be changed or deployed, but your retained workspace Coach may retrieve the archived repository and channel history to discuss prior work and help you export it.
• Project Deletion: If eligible paid access is not restored during the archive window, we may permanently remove the project from the Service after 90 days by deleting its record, repository, files, stored project context, deployments, gateway checkout, and project-channel bindings and access through each platform's supported lifecycle controls. The project and its history are then no longer retrievable through the Service. We will make reasonable efforts to warn you before the deadline.
• Explicit Account Deletion: An explicit account-deletion request is different from moving to Free. We suspend access immediately, retain the inaccessible account data for up to 90 days unless earlier erasure is requested, and then perform verified erasure from active systems, subject to legal-record exceptions and bounded backup expiry.
• Conversation History: Workspace conversation history is retained as part of your open workspace for service continuity. Project-channel history follows the project archive and deletion lifecycle above. You may request account deletion or exercise applicable deletion rights at any time.
• Product Analytics: Public-site and authenticated product events and feature-flag evaluations are retained for no longer than one year. On account deletion, we request deletion of your identified PostHog person and associated analytics events before erasing your account. Until PostHog confirms that deletion, we keep only the internal identifiers needed to verify it, and then delete them.
• Backups After Deletion: Deletion removes data from active systems. Encrypted recovery copies then expire automatically through bounded backup cycles: durable-file snapshots are retained for no more than 14 days, and Cloud SQL automated backups and transaction logs use a rolling 7 days. Temporary recovery-test exports are deleted when the test completes.
• Billing Records: Retained as required by applicable tax and accounting laws (typically 7 years).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request an export of your data in a machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@octogee.com. We will respond to verified requests within 45 days.

7A. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Authorized Agents: You may designate an authorized agent to submit requests on your behalf with proper verification.

To exercise these rights, contact privacy@octogee.com. We will verify your identity before processing requests and respond within 45 days.

7A.1 Financial Incentives

Our promotional Signup Offer is not a "financial incentive" for the collection of personal information under the CCPA. It is offered to let you evaluate the Service before choosing a paid subscription, and the categories of personal information collected during the offer are the same as for other accounts using the same capabilities.

7B. Other State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) may have additional rights regarding their personal information. To exercise any applicable rights, contact privacy@octogee.com.

7C. International Visitors

If you access the Service from the European Economic Area (EEA) or other jurisdictions with comprehensive data protection laws, additional consent mechanisms may apply. The Service is primarily designed for and directed to users in the United States.

7D. Do Not Track

When your browser sends a Do Not Track (DNT) signal, we do not initialize browser analytics or send optional browser analytics events. Essential authentication, security, billing, server-side feature delivery, and standard server logs continue to operate.

8. Children's Privacy

Octogee is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Squarepoint Consulting LLC
d/b/a Octogee
Bend, Oregon, USA
privacy@octogee.com