Privacy Policy

Data we collect

We collect the following categories of data:

• Account data — name, email address, company and authentication details you provide when you sign up.
• Project content — prompts, brand assets, generated code, copy and other material you create or upload.
• Usage data — pages visited, features used, device and browser information, collected only with your consent where required.
• Billing data — handled by our payment processor; we receive limited details such as plan, country and the last four digits of your card.
• Communications — messages you send to our support or sales teams.

How we use your data

• To provide the service — generating, hosting, auditing and exporting your projects.
• To secure our platform, prevent abuse and enforce our Acceptable Use Policy.
• To communicate with you about your account, billing and important product changes.
• To improve Oceantix using aggregated, de-identified usage data.
• To send marketing emails, only where you have opted in. You can unsubscribe at any time.

AI processing and model training

Oceantix uses large language models provided by Anthropic (Claude) to generate and analyse your projects. Prompts and relevant project context are sent to Anthropic solely to produce outputs for you.

We do not use your prompts, projects or content to train AI models, and our agreements with model providers prohibit them from doing so.

Legal bases for processing

Where the EU/UK GDPR applies, we rely on: performance of a contract (providing the service), legitimate interests (security, product improvement), consent (non-essential cookies, marketing) and legal obligation (tax and accounting records). Under India's Digital Personal Data Protection Act, 2023, we process personal data on the basis of your consent or for legitimate uses permitted by the Act.

Sharing and sub-processors

We never sell your personal data. We share it only with service providers who help us run Oceantix, under written data processing agreements:

• AI model providers (Anthropic) — content generation and analysis.
• Cloud hosting and content delivery providers — infrastructure and storage.
• Payment processors — subscription billing.
• Email and support tooling — transactional email and customer support.

We may also disclose data where required by law or to protect the rights and safety of our users.

International transfers

Your data may be processed outside your country, including in the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

Retention

We keep account and project data while your account is active. When you delete a project or your account, we delete the associated data within 30 days, except where we must retain it for legal, tax or security reasons.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Erase your data, or restrict or object to its processing.
• Withdraw consent at any time, without affecting earlier processing.
• Port your data to another service.
• Nominate another person to exercise your rights (DPDP Act) and lodge a complaint with your data protection authority or the Data Protection Board of India.

To exercise any of these rights, email privacy@oceantix.in. We respond within 30 days.

Security

We use encryption in transit and at rest, least-privilege access controls and regular security reviews. No system is perfectly secure, but we work hard to protect your data and will notify you of any breach as required by law.

Children

Oceantix is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in the product before they take effect.

Contact & grievance officer

Questions or complaints about this policy can be sent to our Grievance Officer at privacy@oceantix.in.