Privacy Policy

Ocita (“Ocita”, “we”, “us”) is a Canadian company. This policy explains what personal information we collect through the website at ocita.ai, the Ocita app and the emails we send, why we collect it, who we share it with, and the choices and rights you have.

We try to collect as little as we need. The public website sets no cookies of its own, we don’t sell personal information, and we don’t use your data or your answers to train AI models.

Our privacy practices follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). If you’re in the European Economic Area, the United Kingdom or a US state with its own privacy law, see the sections for you near the end.

What we collect

When you visit the website

No cookies of our own. The public site sets no cookies and stores nothing on your device that identifies you. The one exception is the experiment cookie described below, which is off.
Where your visit came from. If site analytics is on, the site keeps a short record of how this visit began (campaign tags in the link, the referring site’s domain, the page you landed on, and which AI assistant sent you, if one did) in your browser tab’s sessionStorage. It holds no identifier, and your browser deletes it when you close the tab. If you sign up in that same tab, it’s copied onto your new workspace so we can tell which channels bring customers.
Page analytics. If site analytics is on, each page load sends page views and clicks (such as which button or question you opened) to our analytics provider, PostHog, through our own server. Each page load gets a new random identifier, so visits can be counted but not linked to each other or to you. Our server removes cookies, your IP address and your browser’s user agent before forwarding anything.
Experiments. We may show different versions of a page to compare them. This uses a cookie, ocita_ab, that holds a random identifier for 30 days. It is off today: it’s set only while an experiment is running, and none is. Browsers that send a Global Privacy Control or Do Not Track signal never get it. We’ll update this policy before we turn an experiment on.
The free AI crawler checker receives the domain you type, and keeps a copy of that domain’s public robots.txt for up to a day. It counts checks by IP address to prevent abuse, and keeps no record of who asked about which domain.

When you use the app

Account: your name and email address, and the profile photo Google provides if you sign in with Google.
Sign-in: a cookie that keeps you signed in for up to 7 days. The session record may include the IP address and browser you signed in from.
Workspace: its name, branding (logo, color, report footer), billing email, plan, the card brand and last four digits shown in Billing, and the email addresses of people you invite.
Content you add: brand names, domains, categories and products, prompts, competitors and their aliases, locations, tags, notes, report settings and share links.
Answers: the full text of the answers ChatGPT, Gemini, Google AI Mode and Google AI Overviews give to your prompts, with their links. Answers can mention people and companies.
Usage: which pages you open and which actions you take in the app, sent to PostHog with your account and workspace identifiers, never your name or email address. Addresses are stripped of query strings and report links before sending.
Errors: if something breaks, an error report with the page or route and browser details goes to Sentry, with its option to send personal data turned off.
Feedback you send from the app, such as interest in an integration.

From others

Google, if you sign in with it: your name, email address and profile photo.
Stripe, which sells our plans through its Link service as merchant of record: whether a payment succeeded, your subscription status, the billing email, and the card brand and last four digits. Your billing name, address and card details go straight to Stripe at checkout, which uses them to take the payment and work out tax under its own privacy policy; card numbers never reach us. If you ask Link to delete your payment data, Stripe cancels the subscriptions it sold you and deletes that data, including from our Stripe account.

How we use it

To provide Ocita: sign you in, run your prompts, score answers, build reports and show your history.
To bill you, through Stripe, and to keep the records tax law requires.
To keep Ocita safe: rate limits on sign-in, invites, report passwords and the free tool, which count requests by IP address or email address for up to a day.
To email you: sign-in links, invitations, trial emails (welcome, first results, 3 days left, trial ended), the Monday digest, report notifications, alerts about a brand’s answers or allowance, and payment problems. You can turn the digest off under Account. We don’t send marketing email.
To understand and improve the product, using the analytics and error reports above.
To answer you when you email us.
To meet legal obligations and enforce our Terms of Service.

We use personal information only for these purposes, or for others we tell you about and, where the law requires it, ask your consent for. By creating an account you consent to the uses needed to provide the service. You can withdraw consent at any time, subject to legal or contractual limits, though some withdrawals mean we can no longer provide the service.

Content you add for others

Workspaces often track brands on behalf of someone else. You’re responsible for having the right to put that information into Ocita. We use it only to provide the service to your workspace.

Anyone with a shared report link, and its password if you set one, can see that report. You choose whether a link exists, its password, its expiry and whether it allows downloads, and you can revoke it at any time.

We share personal information only with the service providers that help us run Ocita, under contracts that limit how they can use it. The current list, with links to each provider’s own security or data page, is on our security page.

Service	What it does	What it receives
Cloudflare	Hosting, storage of answers, uploads and report PDFs, queues, PDF rendering, routing engine requests and sending email	Everything below passes through it
PlanetScale	The database	Accounts, workspaces, brands, prompts, competitors, scores, citations and settings
cloro	Collecting the ChatGPT, Gemini, Google AI Mode and Google AI Overviews answers	Your prompts with the country you set
OpenAI	Small tasks: reading your homepage to suggest a brand, suggesting competitors and checking unclear mentions	Your homepage text, brand and competitor names, and the text around an unclear mention
Google	Google sign-in	Your Google profile
Stripe	Payments, tax and billing; sells our plans as merchant of record through Link	Workspace name and billing email
PostHog	Product analytics, through our own server	Identifiers, page paths and event details, without IP address or user agent
Sentry	Error reports	The error, where it happened, and browser details

cloro and the AI engines receive your prompts, but not your name or email address. Each provider handles that data under its own terms.

We may also disclose personal information when the law requires it, to protect the rights and safety of our customers or others, or to a buyer or successor if Ocita is sold or merged, who would be bound by this policy. We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.

Where it’s processed

Ocita is based in Canada, but most of our service providers are in the United States, and Cloudflare runs our code in data centers around the world, close to whoever makes the request. So your information is stored and processed outside Canada, including in the United States. While it’s there, it’s subject to the laws of that country and may be accessible to its courts and authorities. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

How long we keep it

Data	How long
Raw answer text	13 months, then deleted automatically
Scores, mentions and citations	As long as the brand exists
Account and workspace data	Until you delete it, or until we delete a closed workspace as our Terms describe
Rate-limit counters (IP or email address)	Until their window ends, at most a day, then deleted daily
Sign-in sessions, with the IP address and browser they recorded	7 days, then deleted daily once expired
How a visit began, in your browser	Until you close the tab
How a visit began, on a workspace	As long as the workspace exists
Billing records	As long as tax and accounting law requires

When you delete your account, you’re removed from every workspace, and any workspace where you’re the only member is deleted with you. When an Owner deletes a brand, its history goes with it. An Owner can also delete a whole workspace in the app, under Team, which deletes its brands, history and reports for everyone in it and cancels its subscription. When a brand or workspace is deleted, its stored files (full answer texts, report PDFs, and uploaded logos and photos) are removed automatically as well, usually within minutes and within a few hours for very large workspaces. An uploaded image that another workspace still uses stays until it’s no longer used.

Your rights

You can ask to access the personal information we hold about you, to correct it, or to withdraw your consent to how we use it. You can change your name and email address, and delete your account, under Account in the app. For anything else, email privacy@ocita.ai. We may need to confirm your identity first. We’ll respond within 30 days, or tell you if we need longer and why, as the law allows. If we can’t fully meet a request, we’ll explain why.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

If you’re in the European Economic Area or the United Kingdom

Under the GDPR and the UK GDPR, we’re the controller of the personal information described here. We use it on these legal bases:

Contract: to provide Ocita and bill you.
Legitimate interests: to keep the service secure, understand and improve it, send service emails like the digest, and answer messages. These interests don’t override your rights.
Legal obligation: to keep tax and accounting records and respond to lawful requests.
Consent, where we ask for it. You can withdraw it at any time.

You have the right to access, correct, delete or export your personal information, to restrict or object to how we use it, and to withdraw consent. Canada is recognized by the European Commission and the UK as providing adequate protection for commercial organizations covered by PIPEDA. To exercise your rights, email privacy@ocita.ai. You can also complain to the data protection authority where you live or work.

If you’re in the United States

Depending on your state, such as California, Colorado, Connecticut, Virginia and others with consumer privacy laws, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, and to get a copy of it. We don’t sell personal information, don’t share it for targeted advertising, and don’t use it for profiling that produces legal or similarly significant effects. We honor Global Privacy Control signals.

To make a request, email privacy@ocita.ai. You can use an authorized agent, and we may ask them to prove they act for you. We won’t treat you differently for exercising your rights. If we decline your request, you can appeal by replying to our answer, and if you’re still not satisfied, you can contact your state attorney general.

Security

We protect personal information with safeguards suited to its sensitivity, including encryption in transit, access controls and separating each workspace’s data. Our security page explains how. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll tell you and the Office of the Privacy Commissioner of Canada, as the law requires.

Children

Ocita is a business tool for people 18 and older. We don’t knowingly collect information from children. If you think a child has given us personal information, email privacy@ocita.ai and we’ll delete it.

Changes to this policy

We’ll post any change here with a new effective date. If a change is material, we’ll email workspace Owners at least 30 days before it takes effect.

Contact

For questions about this policy or your personal information, email privacy@ocita.ai. We’ve designated a person responsible for our privacy practices, who can be reached at that address. For anything else, email support@ocita.ai.