Privacy Policy

1. Information We Collect

We collect information in three primary ways: directly from you, automatically through our services, and from third-party sources, depending on the service being rendered.

• Information You Provide Directly: This includes contact details (name, email, phone number) when you inquire about our services, financial/billing information for service contracts, and information shared during project development (e.g., login credentials for client systems, project specifications).
• Data Collected via Client Projects (Website/App/AI Development):
  • Client User Data: We may temporarily access or process personal data belonging to your end-users as required to develop and test a product (e.g., dummy user accounts, diagnostic logs). In these cases, we act as a Processor, and the Client remains the Controller.
  • AI Training Data: For AI module development, data provided by the client is used strictly for model training and optimization. This data is handled according to strict contractual non-disclosure and disposal terms.
• Information Collected Automatically (Digital Marketing/Website Usage): When you visit our website, we collect information like IP address, browser type, device information, pages viewed, time spent, and referral sources. We use standard tools (e.g., Google Analytics) to gather this data.

2. How We Use the Information We Collect

We use the collected information for the following purposes:

• Service Provision & Contract Fulfillment: To develop, deliver, and maintain the software, websites, apps, and AI modules as specified in our contract with you.
• Digital Marketing & Communication: To send promotional material, newsletters, or company updates, based on your consent. We also use aggregated data to improve the performance and targeting of our digital marketing campaigns.
• Research & Improvement: To analyze usage trends, diagnose technical issues, and improve the quality and functionality of our internal tools and development processes.
• Security & Legal Compliance: To protect against fraud, unauthorized transactions, claims, and other liabilities, and to comply with legal obligations, including tax and reporting requirements.

3. Sharing and Disclosure of Information

We do not sell your personal data. We only share data in the following situations:

• Service Providers: We engage trusted third-party companies to perform services on our behalf (e.g., payment processing, cloud hosting, email delivery, analytics). These parties are obligated to handle your data securely and only for the services specified by us.
• Affiliates & Subsidiaries: We may share information with companies under common ownership or control to help us provide services, operate our business, and for administrative purposes.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal processes, protect and defend the rights or property of Oktacon, or ensure the public safety of our users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

4. Data Security and Retention

We implement industry-standard security measures, including encryption, access control, and secure development practices, to protect your information from unauthorized access, alteration, disclosure, or destruction.

We retain personal data only for as long as necessary to provide the services you have requested, comply with our legal obligations, resolve disputes, and enforce our agreements. Once data is no longer necessary, we securely dispose of it according to our data retention policy.

5. Your Privacy Rights

Depending on your location and applicable law (such as GDPR or CCPA), you may have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”):You can request that we delete your personal data under certain conditions.
• Right to Restrict Processing: You can object to or request that we stop processing your personal data.
• Right to Data Portability: You can request transfer of your data to another organization or directly to you, under certain conditions.
• Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in Section 7.

6. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy frequently.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

Email: contact@oktacon.com