Privacy Policy

Last updated: March 14, 2026

1. Introduction

Octreum ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, website, API, and related services (the "Services").

By using the Services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Billing Information: Payment method details processed through our payment provider (Stripe). We do not directly store your full credit card number
  • Waitlist Information: Email address when you sign up for early access
  • Communications: Any information you provide when contacting our support team
  • Profile Data: Preferences, watchlists, portfolio configurations, and trading settings

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, API endpoints called, and interaction patterns
  • Device Information: Browser type, operating system, device type, screen resolution
  • Log Data: IP address, access times, referring URLs, and error logs
  • Cookies: Session cookies for authentication and preference cookies for your settings

2.3 Information from Third Parties

  • OAuth Providers: If you sign in via Google, Apple, or other OAuth providers, we receive your name and email as authorized by you
  • Analytics Services: We may use third-party analytics tools that collect aggregated usage data

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Services
  • Process transactions and manage your subscription
  • Send you important updates about the Services, including security alerts
  • Send marketing communications (with your consent; you can opt out at any time)
  • Generate aggregated, anonymized analytics to improve our platform
  • Enforce our Terms of Service and protect against fraud or abuse
  • Respond to your support requests and communications
  • Comply with legal obligations

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your data with:

  • Service Providers: Third-party vendors that help us operate the Services (hosting, payment processing, email delivery, analytics). These providers are contractually bound to protect your data
  • Legal Requirements: When required by law, regulation, legal process, or governmental request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
  • Safety: To protect the rights, property, or safety of Octreum, our users, or the public

5. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure password hashing (bcrypt)
  • Regular security audits and vulnerability assessments
  • Access controls limiting employee access to personal data
  • Infrastructure hosted on secure cloud providers with SOC 2 compliance

While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Cookies & Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: To remember your settings and preferences
  • Analytics Cookies: To understand how users interact with our platform (can be opted out)

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Services.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. Specifically:

  • Account Data: Retained until you delete your account
  • Billing Records: Retained for 7 years as required by tax and financial regulations
  • Usage Logs: Retained for up to 90 days, then anonymized or deleted
  • Waitlist Data: Retained until the waitlist closes or you unsubscribe

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data ("right to be forgotten")
  • Portability: Receive your data in a structured, machine-readable format
  • Opt-Out: Unsubscribe from marketing emails at any time
  • Restriction: Request that we limit processing of your data

To exercise any of these rights, contact us at hello@octreum.com. We will respond within 30 days.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable.

10. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn we have collected data from a minor, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

hello@octreum.com