Privacy Policy

OccupancyOS ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

• Email address: Used for account creation, authentication, and communications.
• Password: Stored in encrypted form via Supabase authentication.
• IP address: Collected at signup and during usage for security and fraud prevention.
• Timestamp: Date and time of account creation and TOS acceptance.
• TOS version: Version of Terms of Service you accepted.

1.2 Listing Data

• Property titles and descriptions you submit for AI analysis.
• Property type and target audience selections.
• Amenity selections and preferences.
• Audit scores, recommendations, and analysis results.
• AI-generated content we produce for you.

1.3 Payment Information

• License keys purchased through Gumroad.
• Transaction IDs and purchase timestamps.
• Credit/audit usage history.
• Note: We do NOT store credit card numbers. Payments are processed by Gumroad.

1.4 Usage Data

• Pages visited and features used.
• Browser type, version, and operating system.
• Device information (type, screen resolution, etc.).
• Referral source (how you found our Service).
• Time and date of visits and actions.
• Session duration and interaction patterns.
• Error logs and debugging information.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide the Service: Process AI analysis requests, manage accounts, and deliver features.
• To improve the Service: Analyze usage patterns, identify bugs, and optimize performance.
• To train AI models: Your listing data may be used to improve our AI algorithms and recommendations.
• For authentication and security: Verify identity, prevent fraud, and protect against abuse.
• For customer support: Respond to inquiries and troubleshoot issues.
• For analytics: Understand user behavior and Service performance.
• For marketing: Send promotional emails, feature announcements, and updates (you may opt out).
• For legal compliance: Comply with laws, regulations, and legal processes.
• To enforce Terms: Detect violations and enforce our Terms of Service.

3. Data Sharing and Disclosure

We may share your information with:

3.1 Third-Party Service Providers

• Supabase: Database hosting and authentication (stores all user data).
• Groq: AI processing (listing content is sent to Groq for analysis).
• Gumroad: Payment processing and license key verification.
• Vercel: Web hosting and infrastructure (if applicable).

3.2 Legal Authorities

• When required by law, subpoena, or court order.
• To protect our rights, property, or safety.
• To investigate fraud, abuse, or violations of our Terms.
• To comply with legal obligations or government requests.

3.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.

3.4 Aggregated/Anonymous Data

We may share aggregated, de-identified, or anonymous data that cannot reasonably be used to identify you for research, marketing, or other purposes.

WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES FOR MARKETING PURPOSES.

4. AI Processing and Third-Party Risks

When you submit listing content for analysis, it is transmitted to Groq's API for AI processing. While we use secure HTTPS connections:

• We cannot guarantee the security of data once it leaves our servers.
• Groq may retain copies of requests for their own purposes (subject to their privacy policy).
• AI providers may use your data to improve their models.
• Third-party services have their own privacy policies which you should review.

⚠️ Do not submit sensitive, confidential, or personally identifiable information in listing content.

5. Data Retention

We retain your data according to the following schedule:

• Active accounts: Data is retained indefinitely while your account is active.
• Deleted accounts: We may retain certain data for up to 90 days, or longer if required by law.
• Legal compliance: Data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements.
• Backups: Data in backups may persist beyond deletion for up to 30 days.
• Audit logs: Access logs and security records may be retained for up to 1 year.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Authentication: Keeping you logged in (session cookies).
• Preferences: Remembering your settings and choices.
• Analytics: Understanding how users interact with the Service.
• Security: Detecting and preventing fraud.

You can disable cookies in your browser, but this may limit Service functionality.

7. Your Rights (Jurisdiction-Dependent)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Portability: Request export of your data in a machine-readable format.
• Objection: Object to certain data processing activities.
• Opt-out: Unsubscribe from marketing emails.

To exercise these rights, contact us at privacy@occupancyos.com

Note: We may require identity verification before fulfilling requests. We are not obligated to honor requests if prohibited by law or necessary for legal compliance.

8. Data Security

We implement reasonable technical and organizational security measures, including:

• Encrypted password storage (via Supabase).
• HTTPS/TLS encryption for data transmission.
• Role-based access controls.
• Regular security monitoring and updates.

⚠️ HOWEVER, NO SYSTEM IS 100% SECURE. We cannot guarantee absolute security of your data. You use the Service at your own risk.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will delete their account and data.

10. International Data Transfers

Your data may be transferred to and stored on servers located in the United States and other countries. By using the Service, you consent to such transfers. Data protection laws in these countries may differ from those in your jurisdiction.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used.
• Right to delete personal information (subject to exceptions).
• Right to opt-out of the "sale" of personal information (we do not sell personal information).
• Right to non-discrimination for exercising your rights.

To exercise these rights, email privacy@occupancyos.com with "CCPA Request" in the subject line.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, erase, restrict, and port your data.
• Right to object to processing and withdraw consent.
• Right to lodge a complaint with a supervisory authority.

Legal basis for processing: Consent, contract performance, legitimate interests, and legal obligations.

13. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time, for any reason, with or without notice. Changes are effective immediately upon posting. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

It is your responsibility to review this Privacy Policy periodically.

14. Do Not Track (DNT)

We do not currently respond to "Do Not Track" browser signals.

15. Contact Information

For privacy-related questions, requests, or concerns, contact us at:

Email: privacy@occupancyos.com

We will make reasonable efforts to respond within 30 days, but response is not guaranteed.