Privacy Policy

1. Controller and contact

DAOstack Technologies Ltd., trading as Octopod, is the controller for personal data collected through Octopod, except where a payment provider acts as an independent controller for its own processing.

2. Information we collect

• account information, such as name, email address, authentication identifiers, and account status;
• prompts, reference images, generated assets, edits, and related project metadata;
• usage and operational data, including actions, timestamps, generation status, costs, and error records;
• device, browser, IP address, security, and diagnostic information;
• support requests and other communications you send us.

The payment provider displayed at checkout collects payment and billing information. Octopod does not receive or store your full payment-card number.

3. Why we use information

• to create and manage your account and provide requested generation and editing services;
• to process entitlements and credit fulfillment following a confirmed purchase;
• to secure the service, prevent abuse and fraud, and diagnose failures;
• to support users, enforce our terms, and comply with legal obligations;
• to measure and improve quality, reliability, accessibility, and performance.

4. Legal bases

We process information as necessary to perform our contract with you, to meet legal obligations, and for legitimate interests such as securing, operating, supporting, and improving Octopod. Where consent is legally required, including for non-essential cookies or direct marketing, we rely on consent and you may withdraw it.

5. Who receives information

We share information only as needed with:

• authentication, cloud-hosting, database, storage, monitoring, and support providers;
• AI image and 3D generation providers used for the workflow you request;
• Stripe, Paddle, or PayMe, as the selected payment processor or merchant of record, for sales, fraud prevention, refunds, and payment support;
• professional advisers such as accountants, lawyers, and auditors;
• authorities or other parties where required by law or necessary to protect rights, safety, and security.

We do not sell personal information.

6. International transfers

Octopod is operated from Israel and uses providers in Israel, the United States, Europe, and other countries. When legally required, transfers use safeguards such as adequacy decisions, standard contractual clauses, or equivalent contractual protections.

7. Retention

We keep account and project information while your account is active and afterwards only as long as reasonably needed to provide retrieval, resolve disputes, prevent fraud, maintain transaction and entitlement records, or meet legal obligations. When information is no longer needed, we delete or anonymize it. Payment providers retain transaction information under their own policies and legal duties.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, object to some processing, withdraw consent, and complain to a data-protection authority. Contact us to exercise a right. We may need to verify your identity and may retain information where law requires it.

9. Security

We use appropriate technical and organizational safeguards, including encrypted transport, access controls, least-privilege credentials, and provider security controls. No system is completely secure, so we cannot promise absolute security.

10. Cookies

Octopod currently uses essential browser storage and cookies for authentication, security, session continuity, interface preferences, and payment flow continuity. We do not currently use optional advertising cookies. If optional analytics or marketing cookies are added, we will provide the notices and controls required by applicable law.

11. Changes

We may update this policy as Octopod evolves. We will post the revised version and its effective date, and provide additional notice when a material change requires it.