Privacy Policy

hrefdata LLC ("hrefdata") provides octofact.com subject to this Privacy Policy. By accessing this site, you agree to the practices described below. These privacy practices apply to all visitors. Paid subscribers are also governed by any additional data processing terms in their subscription agreements.

Key Points

This policy outlines how we collect, use, and protect your information. We are committed to transparency about our data practices and want to make sure you understand how your information is handled. Below is a summary of our key commitments to your privacy and data security.

• We collect contact information and website analytics (your personal information).

• We use your personal information to provide and improve our services.

• We do not sell your personal information.

• You may request access, correction, or deletion of your personal information.

• We do not use your personal information to train AI models.

Information We Collect

Publicly Available Data. We primarily process publicly available business information and company-level data. Personal information is collected only as described in this policy.

Information You Provide. We collect your name, business email, job title, company, and phone number when you contact us, request a trial, or become a customer. Payment information is processed by third-party providers and not stored on our systems. Clients are responsible for ensuring they have appropriate authorization to provide information about their employees or agents.

Information Collected Automatically. We use cookies and similar technologies to collect data about your browsing activity including IP address, browser type, pages viewed, time spent, and device information. This helps us understand how visitors use our site and improve our services.

How We Use Your Information

We use the information we collect to provide and improve our services, respond to your inquiries, send product updates and marketing communications, analyze site usage, prevent fraud, and comply with legal obligations. We may combine information from various sources and use the combined information for the purposes described in this Policy.

We do not use your personal information to train artificial intelligence models. Our processing of publicly available business data is not subject to this restriction. Any personal data you provide remains strictly for the purposes described in this policy.

Sharing Your Information

We share your information with service providers who help us operate our business including hosting, analytics, and payment processing. We may disclose information when required by law, to regulatory authorities, or in connection with a merger or acquisition. We do not sell your personal information.

Security

We implement appropriate technical and organizational measures to protect your information from misuse, loss, or unauthorized access. However, no internet transmission is ever completely secure. In the event of a data breach affecting your personal information, we will notify you without undue delay and in compliance with applicable legal requirements.

Infrastructure Security. Our systems are hosted on secured cloud infrastructure with firewalls, intrusion detection, and network segmentation. We maintain physical and environmental controls through our hosting providers to protect data centers.

Access Controls. Access to your data is restricted to authorized personnel on a need-to-know basis. We enforce multi-factor authentication, role-based access controls, and periodic access reviews to minimize unauthorized access risk.

Encryption. Data in transit is protected using TLS encryption. Data at rest is encrypted using industry-standard encryption protocols. Encryption keys are managed and rotated according to security best practices.

Monitoring and Incident Response. We continuously monitor our systems for suspicious activity and security vulnerabilities. We maintain an incident response plan to detect, respond to, and recover from security incidents in a timely manner.

Vulnerability Management. We conduct regular security assessments and promptly address identified vulnerabilities. We patch systems and dependencies in a timely manner to protect against known threats.

Data Retention

We retain your information for as long as needed to provide our services and comply with legal obligations. Active customer data is retained for the duration of the business relationship. Post-termination business records are retained for 3-7 years depending on the type of information and applicable requirements. Marketing data is retained until you opt out or for 24 months after your last interaction.

Your Rights

All Users. You may request access to, correction, or deletion of your personal data by contacting us through this website. We will verify your identity before responding to such requests.

California Residents. Under the CCPA/CPRA, you have the right to know what personal information we collect, access your data, delete your data, and not be discriminated against for exercising these rights. We do not sell personal information. Business contact information such as job title, business email, and business phone number may be exempt from such requests under applicable law.

EEA/UK Residents. Under GDPR, you have rights to access, rectify, erase, restrict processing, and data portability. We process data based on contract performance, legitimate interests, or consent. Your data may be transferred to the United States using appropriate safeguards such as Standard Contractual Clauses.

Data Residency

Your data is stored and processed on servers located in the United States. For EEA/UK residents, we use Standard Contractual Clauses to ensure adequate protection for cross-border data transfers. Enterprise clients with specific data residency requirements should contact us to discuss available options.

Cookies

We use essential cookies required for site function, analytics cookies to understand usage, and functional cookies to remember preferences. You can control cookie settings in your browser, though blocking some cookies may limit site functionality.

Changes to This Policy

We may update this policy periodically. The updated version will be posted on this page with a new effective date. Your continued use of the site after changes constitutes acceptance of the modified Policy.