Your data, under the same rules we sell

01 — Data controller

Octo Inc. SpA, Avenida Ossa 235, Of. 305, La Reina, Santiago, Chile. Contact for data protection matters: contact@octo.is.

02 — What we process and why

Data	Purpose	Lawful basis	Retention
Name, company and email from the contact form	Answering your inquiry and managing the business relationship	Pre-contractual measures at your request	24 months from last contact
Self-assessment answers and score + email	Generating and sending your gap report	Consent (explicit checkbox on the form)	12 months; you may request earlier deletion
Analytics cookies (Google Analytics 4, anonymized IP)	Understanding aggregate site usage	Consent (cookie banner)	Up to 14 months (GA4 setting)
Technical server logs (IP, user-agent)	Site security and availability	Legitimate interest (infrastructure protection)	90 days

We make no automated decisions with significant effects about you and do no commercial profiling. Self-assessment answers are used only to generate your report.

03 — Who we share data with

• Amazon Web Services (site hosting, USA) — data processor.
• Pipedrive (commercial contact management, EU/USA) — data processor.
• Google (Analytics 4, USA) — only if you accepted analytics cookies.

These international transfers are covered by each provider's data processing agreements and standard protection clauses. We do not sell or hand over your data to third parties for their own purposes.

04 — Cookies

The site works fully without any tracking cookie. Only if you accept in the banner do we load Google Analytics 4 (_ga cookies). Your preference is stored locally in your browser and can be changed anytime via "Cookie preferences" in the footer.

05 — Your rights

You can exercise your rights of access, rectification, erasure, objection and portability at any time by writing to contact@octo.is with the subject "Data rights". We will verify your identity and respond within legal deadlines. You also have the right to lodge a complaint with the Chilean Personal Data Protection Agency.

06 — Security

The site is served exclusively over HTTPS, hosted on infrastructure with restricted access controls, and lead data is stored in systems with authentication and access logging. We apply the same standard we audit in our clients.

07 — Changes to this policy

Any change will be published here with its version date. Material changes to how we process your data will be highlighted on the site.