Oculus Intelligence Group — Privacy Policy

Summary: We collect what we need to run the platform. We don't sell your data. We use Anthropic's Claude API for AI features (prompts only, no personal data sent). GDPR-compliant. You can request deletion at any time.

1. Who We Are

Oculus Intelligence Group Ltd ("Oculus", "we", "our", "us") is the data controller for personal data collected through the OCULUS PRO platform and related services (oculus-intel.io). Contact: privacy@oculus-intel.io.

2. Data We Collect

2.1 Account Data

Name, email address, and password (hashed) on registration
Organisation name and role (optional)
Billing information (processed by Stripe — we do not store card numbers)

2.2 Usage Data

Pages visited, features used, session duration
Search queries and keyword watchlists entered into the platform
Reports generated (metadata only, not content)
IP address, browser type, and device information

2.3 Communications Data

Emails sent to or received from us
Support tickets and chat conversations

3. How We Use Your Data

Purpose	Legal Basis (GDPR)	Retention
Providing and maintaining the Services	Contract performance	Duration of subscription + 30 days
Processing payments	Contract performance	7 years (legal requirement)
Sending service emails (receipts, security alerts)	Contract performance	3 years
Product improvement and analytics	Legitimate interest	24 months (anonymised after 12)
Marketing communications (with consent)	Consent	Until unsubscribe
Legal compliance and fraud prevention	Legal obligation	As required by law

4. AI Features and Third-Party Processing

Our AI intelligence briefing features are powered by Anthropic's Claude API. When you use AI analysis features, your search query or signal content is transmitted to Anthropic's API to generate the response. We do not transmit your name, email, or other identifying personal data as part of these requests.

Anthropic processes data in accordance with their API usage policy. By using AI features, you acknowledge that query content may be processed by Anthropic's systems. Do not enter personal data about individuals into AI analysis prompts.

5. Data Sharing

We do not sell your personal data. We share data only with:

Stripe — payment processing (PCI-DSS compliant)
Anthropic — AI API processing (query content only, see Section 4)
Netlify/Vercel — hosting infrastructure
Mailchimp/SendGrid — transactional emails
Legal authorities — if required by law, court order, or to protect rights

Enterprise clients with Data Processing Agreements may have additional provisions for sub-processor management.

6. Cookies

We use essential cookies (session management, security) and analytics cookies (usage tracking). You can manage cookie preferences through our cookie banner or your browser settings. Disabling essential cookies may impair platform functionality.

7. Your Rights (GDPR / UK GDPR)

If you are in the EEA or United Kingdom, you have the following rights:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion ("right to be forgotten")
Restriction — limit how we process your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interest
Withdraw consent — for any processing based on consent

To exercise rights, email: privacy@oculus-intel.io. We will respond within 30 days. You may also lodge a complaint with your national data protection authority (ICO in the UK, relevant supervisory authority in the EEA).

8. Data Security

We implement appropriate technical and organisational measures including: encrypted data transmission (HTTPS/TLS), hashed passwords, access controls, and regular security reviews. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law within 72 hours of becoming aware.

9. International Transfers

Our hosting and some service providers are based in the United States. Data transfers to the US are made under Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms as approved by the EU Commission and UK ICO.

10. Children's Privacy

The Services are not directed to or intended for use by individuals under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact privacy@oculus-intel.io immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or platform notification. The current version is always available at oculus-intel.io/privacy.

12. Contact

Data protection enquiries: privacy@oculus-intel.io
Oculus Intelligence Group Ltd, [Registered Address]