octopora Privacy Policy

1. Controller and contact

octopora is operated from Tunisia. Privacy requests may be sent to support@octopora.com.

2. Data we collect

We process account and profile details, workspace content, collaboration records, calendar and repository metadata, AI requests, time records, technical logs, and contact submissions when you use the corresponding features.

3. How we use data

We use data to provide and secure the service, synchronize connected work, communicate with you, support requested integrations, improve reliability, and comply with legal obligations.

4. AI and Google integrations

Google user data is used only to provide the integration you request and follows the Google API Services User Data Policy, including Limited Use requirements. Helpi and coding-agent context is processed to perform requested actions.

Calandi, the meeting-booking tool used by the octopora team, can connect a team member's Google Calendar with two permissions. Free/busy times are read when someone opens their booking page, so that only free times are offered; event titles and details are never read or stored. The events Calandi creates for meetings booked with them are created, moved and deleted in their calendar, with a Google Meet link and an invitation to the guest, and read back to keep each booking in sync. We store the Google account address, the access tokens and the IDs of the events we created, and never share or sell them or use them for advertising or AI training. Disconnecting Google Calendar in Calandi revokes our access at Google and deletes the stored tokens.

5. Processors and transfers

Infrastructure, authentication, email, analytics, speech, and AI providers process only the data required for their service. International transfers use applicable contractual and security safeguards.

6. Analytics choice

Analytics tools load only after you accept them in the consent banner. If you continue without analytics, neither Google Analytics nor Mixpanel loads and no analytics cookies are set.

With your consent, the public site also uses Mixpanel, set up with EU data residency (data is sent to api-eu.mixpanel.com). Mixpanel automatically records page views, clicks, scrolling and form submissions, and records sessions so we can replay how pages are used. What you type into form fields is not collected in those events and is masked in recordings. Mixpanel keeps its identifiers in your browser's local storage. When you are signed in, these events are linked to your account, with its email address and name.

You make this choice in the banner. To change it later, clear this site's cookies and stored data in your browser, and the banner will ask again.

7. Sign-up attribution

If you accept analytics, the public site also remembers where your first visit came from: campaign parameters in the link (such as utm_source, utm_medium and utm_campaign), the domain of the site that referred you, the first page you visited, a referral or plan code present in the link, and the date and time of that visit. These details are kept for up to 90 days in a first-party cookie (octopora_attribution). Later visits never change where your first visit came from; a plan or referral code in a later link is only added if none was recorded yet. If you continue without analytics, this cookie is not set, and an existing one is deleted.

If you create an account, these details are attached to it at sign-up, so we can see which campaigns, sites and plans bring people to octopora. Once attached, they are kept with your questionnaire answers: visible to the octopora team, cleared when you clear your answers from your Profile, and deleted with the account.

8. Onboarding questionnaire

Right after you create an account, a short questionnaire helps us set up your workspace. Three answers are required: how you will use octopora, your role and your team size (someone who joins a teammate's project answers only their role). Everything else is optional: your company name and size, industry, country, goals, the tools you use today, whether you have used octopora before, how you heard about us, how you would like to start, teammates to invite, and whether you want product news by email (see below). It also offers a link to book a setup call with us. If you invite teammates, their email addresses are used only to send the invitations and are not kept.

We use your answers to tailor your setup and the guided tour, understand who uses octopora, improve the product, and suggest plans and help that fit your team.

Your answers are visible to you and to the octopora team. You can change or clear them at any time from your Profile. They are kept while your account exists and deleted with it.

9. Product news emails

We send product news by email only to people who opt in, and the box is never ticked for you. When you opt in, we record when you agreed and the wording you agreed to. You can withdraw at any time from your profile settings. Emails needed for your account, such as sign-in codes, are separate and do not depend on this choice.

10. Retention, security, and rights

We retain information only as needed for the service, security, and legal duties. You may request access, correction, deletion, or restriction subject to Tunisian law and applicable INPDP procedures.