Privacy Policy

Last updated 18 October 2026

The short version

• We collect only what we need to publish your posts and run your account.
• Your data is stored in the EU (Frankfurt). We never sell or share it for advertising, and never use your content to train AI.
• Analytics never see your captions, files, emails or links, and in the EU they only run if you say yes.
• You can download or delete everything from the app at any time. Deleting your account also removes Octoque’s access to your platforms.
• Questions or requests: hello@octoque.com or the privacy request form.

Who we are

Octoque is run by Zenproducts Technology Private Limited, Block B-400, 2nd Floor, Greenfield, NHPC Colony, Faridabad, Haryana 121010, India (“we”). We decide how your account data is used: we are the “controller” under the EU and UK GDPR and similar laws, and the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023.

When a business uses Octoque to publish content about other people (for example, a team member’s video featuring customers), we process that content on the business’s instructions as its “processor”; our Data Processing Addendum covers this.

What we collect

We don’t ask for sensitive data such as health, religion or biometrics, and we ask you not to put it in captions we don’t need. Giving us your name, email and password is needed to create an account; everything else is up to you.

Why we use it, and the legal basis

We don’t make decisions about you based only on automated processing that have legal or similarly significant effects. Golden-hour times are suggestions you can ignore. Automated checks flag possible abuse, and a person reviews any decision to restrict an account.

Connected platforms

When you connect a platform, you sign in on its own page and choose what to allow. We ask only for what Octoque needs: publishing your posts and reading their results. We publish only what you schedule or approve, and we show you exactly what will be posted before it goes out.

• YouTube. Octoque uses the YouTube API Services. By using our YouTube features you agree to the YouTube Terms of Service, and Google’s use of your data is covered by the Google Privacy Policy. We use YouTube data only to publish your videos and show their results, and we don’t share it with anyone except our service providers who help us do that. You can remove Octoque’s access at any time in your Google security settings, as well as in Octoque. Octoque’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Instagram and Facebook (Meta). We use Meta data only to publish your posts and show their results. We never sell it, and never use it for profiling, advertising or decisions about eligibility. Step-by-step deletion instructions for every platform are on Deleting your data.
• TikTok, X and LinkedIn. We use their data only to publish what you ask and show results; we don’t sell it, use it for advertising or combine it to identify people. We keep only what we need and delete it when you disconnect or ask us to.

Continue with Google

You can sign up and sign in with your Google account instead of a password. We ask Google only for basic sign-in information (the “openid”, “email” and “profile” permissions): your name, email, whether that email is verified, and your Google account ID, which we use to recognise you next time. We don’t use your profile photo, and we don’t ask for access to your Gmail, Drive, contacts or anything else. We keep your Google account ID and email while Google is linked; you can unlink it in You → Sign-in & security once you’ve set a password, and remove Octoque from your Google account’s connections at any time. Our use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements (above).

Who we share it with

Each service provider works under a written contract that limits it to providing its service to us, requires security safeguards and passes the same duties to anyone it uses. The list, with locations, is on our service providers page. We also share data when the law requires it, to protect people from harm, or with a company that takes over Octoque (we’d tell you first). We do not sell or “share” personal information for cross-context behavioural advertising, and haven’t in the past 12 months.

International transfers

Your data is stored in the EU. It is accessed from India, where our company is, and some service providers process it in the United States and other countries. When data moves to a country without an adequacy decision, we use the EU Standard Contractual Clauses (and their UK addendum), the EU-US Data Privacy Framework where the provider is certified, and equivalent contract terms required by the laws of India, the UAE, Saudi Arabia and Singapore. Ask us for a copy of the safeguards.

How long we keep it

We keep data only while it’s needed for what you use Octoque for, or while the law requires it. A daily job erases each kind on time.

Your rights

Wherever you live, you can:

• see and download your data (You → Privacy & data → Download your data, and Download your files);
• correct it (You → Profile) and delete it (delete your account, or ask us);
• withdraw consent and object to analytics or emails (You → Notifications, You → Privacy & data);
• ask us to restrict how we use it, and get a summary of who we shared it with;
• nominate someone to act for you, or use an authorised agent; and
• complain to us, and then to a regulator (below). We never treat you differently for using your rights.

How to ask: use the app, the privacy request form, or email hello@octoque.com from your account email (that’s how we confirm it’s you). We acknowledge requests at once and answer within 30 days (one month in the EU and UK; 45 days in California), and tell you if we need longer and why. If we refuse, we explain why and how to appeal: reply to our answer, and a different person will review it within 45 days.

Where you live

European Union and United Kingdom

You have all the rights above, plus portability, and the right to object to processing based on legitimate interests. You can complain to the data protection authority where you live or work (in the UK, the Information Commissioner’s Office). In the UK, you can first complain to us with the complaint form: we acknowledge within 30 days, and in practice the same day.

United States

Under California and other state privacy laws: in the past 12 months we collected identifiers (name, email, IP address), customer records, commercial information (plan and billing status), internet activity (use of the app), and the content you upload, from the sources and for the purposes above. Your account login is sensitive information that we use only to provide the service. We don’t sell or share personal information, don’t use it for targeted advertising or profiling, and don’t knowingly collect data of anyone under 16. We honour Global Privacy Control: if your browser sends it, we switch analytics off for that browser. Every US resident can use the rights above, including appeal; if we deny your appeal you can contact your state Attorney General.

India

You have the rights under the Digital Personal Data Protection Act, 2023, including to nominate someone to exercise them if you die or can’t act. Contact our Grievance Officer first; we acknowledge within 24 hours and resolve within 7 days. If you aren’t satisfied, you can complain to the Data Protection Board of India.

United Arab Emirates, Saudi Arabia and the Gulf

You have the rights under your country’s personal data protection law, including to know, access, correct, delete and port your data and to object to direct marketing. We answer within 30 days. You can complain to us, and to your regulator (in Saudi Arabia, the Saudi Data and AI Authority).

Singapore

You can access and correct your data and withdraw consent under the Personal Data Protection Act 2012. Our Data Protection Officer is listed above. You can complain to the Personal Data Protection Commission.

Cookies and similar technology

We use one essential cookie to keep you signed in (plus a 10-minute one while you continue with Google) and store a few choices on your device (language, theme, workspace, your analytics choice). Product analytics use a random ID stored on your device, only with your consent in the EU, UK and Switzerland, and never for advertising. We don’t use advertising trackers, and no third party serves ads or content on Octoque. Details are in the Cookie Notice.

Children

Octoque is only for people aged 18 and over. We don’t knowingly collect data of anyone under 18. If you think we have, tell us and we’ll delete it.

Security and breaches

We encrypt data in transit and at rest with our hosting providers, hash passwords, keep platform access tokens with our posting service providers rather than in your browser, limit staff access, log and monitor access, rate-limit sign-in, and keep backups. If a breach affects your data, we tell you without delay (what happened, the likely effects, what we’re doing and what you can do) and notify the authorities within the time the law sets (for example 72 hours in the EU, UK, India and Saudi Arabia, and 3 days in Singapore).

Changes and contact

We tell you about material changes by email and in the app before they apply. Questions: hello@octoque.com · Zenproducts Technology Private Limited, Block B-400, 2nd Floor, Greenfield, NHPC Colony, Faridabad, Haryana 121010.