Last updated 28 September 2026
Privacy policy
Octacore is an app for building, hosting and selling websites. This policy explains what we collect when you use octacore.app, the sites we host and the emails we send, why we collect it, and the choices you have. We don't sell your personal information, and we don't use advertising or tracking cookies.
1. Who we are
“Octacore”, “we” and “us” mean the operator of octacore.app. For anything in this policy, including requests about your data, email hello@octacore.app. Your use of Octacore is also governed by our Terms of Service.
2. What we collect
Your account. Your name, email address and a hashed version of your password. We never store your password itself.
Sign-in sessions. When you sign in, we record the session along with the IP address and browser (user agent) it came from, so we can keep you signed in and protect your account.
What you create. The prompts and chat messages you send, the websites Octacore builds for you, their saved versions and notes, and any files you upload, such as logos, images and PDFs.
Billing. Payments are handled by Whop. We receive your plan, billing interval, subscription status and renewal dates, but never your card details.
Selling sites. When you sell a website, we store your client's name and email address, the price and hosting fee you set, and the payment status. When you set up payouts, we store a reference to your Whop payout account.
Octa Agents. If you use Octa Agents, we store the searches you run and the businesses you pick. To power search, Octacore keeps its own record of publicly listed business details from Google Maps, such as a business's name, address, phone number, rating and reviews, and any business email we find published on the web. That record is shared across Octacore accounts so each business is only looked up once.
Usage and logs. We count builds, messages, sites, uploads and searches to apply your plan's limits. Our hosting provider keeps short-lived request and error logs that we use to run and debug the service.
3. Site owners and their clients
When one of our users sells you a website, they give us your name and email address so we can send you an invite. When you claim the site, we create an owner account for you, and your purchase is processed by Whop on the seller's account. We use your details only to give you access to your site, send service emails about it, and handle your requests. The seller is responsible for their own use of your information.
4. How we use it
- To provide Octacore: build, edit, host and deploy your websites, and run your chats.
- To manage your account and subscription, and enforce plan limits and fair use.
- To process site sales: create checkout links, invite your client to claim their site, and pay you out.
- To send service emails, such as password resets, ownership invites and billing notices. We don't send marketing email without your consent.
- To keep Octacore secure, prevent abuse and fix problems.
- To meet our legal obligations.
Where laws like the GDPR apply, we rely on performing our contract with you, our legitimate interest in running a secure and reliable service, your consent where we ask for it, and our legal obligations.
6. What's public
Websites you publish are public at their address. Files you upload are served from long, unguessable links so your sites and the AI can use them. Anyone who has one of these links can open the file, so please don't upload anything you want kept private.
8. How long we keep it
We keep your account and what you create for as long as your account is open. When you delete your account in Settings, we permanently delete your account, chats, websites and uploads, and your live sites go offline straight away. We keep records of payments and sales for as long as tax and accounting law requires, and provider logs expire on their own.
9. Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal information, object to or restrict how we use it, and withdraw consent you've given. You can edit your details and delete your account yourself in Settings. For anything else, email hello@octacore.app and we'll reply within 30 days. You can also complain to your local data protection authority.
If you've bought a website from one of our users, or your business appears in Lead Finder, you have the same rights and can contact us the same way.
10. Security
Data is encrypted in transit and at rest, passwords are hashed, and each site's data is kept separate. No service is perfectly secure, so if we ever learn of a breach that affects you, we'll tell you promptly.
11. International transfers
Our providers may process data in the United States and other countries. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
12. Children
Octacore isn't for anyone under 16, and we don't knowingly collect their information. If you think a child has given us personal information, contact us and we'll delete it.
13. Changes to this policy
If we make significant changes, we'll email you or show a notice in the app before they take effect. The date at the top of this page shows when this policy was last updated.
14. Contact
Questions or requests about your privacy: hello@octacore.app.