Privacy Policy
1. Introduction
1.1 Purpose: This Privacy Policy outlines how Octahedron ("Provider") collects, uses, discloses, and protects the personal information of users ("Users") when accessing and using the Octahedron platform ("Platform").
1.2 Scope: This Privacy Policy applies to all personal information collected through the Platform and any associated services or features provided by Octahedron.
2. Information Collection
2.1 Personal Information: Octahedron may collect personal information from Users, including but not limited to names, email addresses, contact information, and any other information provided voluntarily by Users.
2.2 Usage Data: Octahedron may collect usage data automatically, such as IP addresses, browser type, operating system, referring pages, and access times. This information is used to analyze and improve the performance and functionality of the Platform.
3. Use of Information
3.1 Provision of Services: Octahedron uses the collected information to provide and improve the Platform, personalize User experience, respond to User inquiries or support requests, and communicate important information about the Platform and its updates.
3.2 Analytics and Insights: Octahedron may analyze and aggregate User data to generate insights and perform statistical analyses to improve the Platform, enhance user experience, and develop new features and functionalities.
3.3 Marketing and Communications: Octahedron may send promotional emails or communications to Users about new features, updates, or relevant offers. Users have the option to opt-out of receiving such communications at any time.
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers: Octahedron may engage trusted third-party service providers to perform certain functions on its behalf, such as hosting, data storage, analytics, and customer support. These service providers have access to personal information only to the extent necessary to fulfill their obligations and are bound by confidentiality obligations.
4.2 Legal Compliance: Octahedron may disclose personal information if required by law, regulation, or legal process, or if necessary to protect its rights, property, or the safety of Users or others.
4.3 Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of Octahedron's assets, personal information may be transferred as part of the transaction. Users will be notified of any such change in ownership or control of their personal information.
5. Data Security
5.1 Security Measures: Octahedron implements appropriate technical and organizational measures to protect personal information from unauthorized access, loss, misuse, alteration, or destruction. These measures include encryption, access controls, regular security assessments, and employee training.
5.2 Data Retention: Octahedron retains personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal information is no longer needed, it will be securely deleted or anonymized.
6. User Rights and Choices
6.1 Access and Correction: Users have the right to access, correct, or update their personal information stored by Octahedron. Users can do so by contacting Octahedron's designated contact.
6.2 Opt-out: Users may choose to opt-out of receiving promotional emails or communications from Octahedron by following the instructions provided in the communications or by contacting Octahedron's designated contact.
7. Children's Privacy
Octahedron does not knowingly collect personal information from individuals under the age of 16. If Octahedron becomes aware that personal information has been collected from a child without parental consent, steps will be taken to delete the information as soon as possible.
8. Updates to this Privacy Policy
Octahedron may update this Privacy Policy from time to time to reflect changes in its practices or applicable laws. Users will be notified of any material changes to the Privacy Policy.
9. Contact Information
For any privacy-related inquiries or concerns, Users can contact Octahedron's designated privacy contact at info@Octahedron
Security Policy
1. Introduction
1.1 Purpose: The purpose of this Security Policy is to outline the security measures and practices implemented by Octahedron ("Provider") to ensure the confidentiality, integrity, and availability of the Octahedron platform and the data stored within.
1.2 Scope: This policy applies to all aspects of Octahedron, including the infrastructure, systems, networks, and customer data hosted or processed by the platform.
2. Information Security Management
2.1 Responsibility: Provider is responsible for establishing, implementing, and maintaining an information security management system (ISMS) to protect customer data and ensure the security of Octahedron.
2.2 Risk Assessment: Provider conducts regular risk assessments to identify potential threats, vulnerabilities, and risks to Octahedron. Risk mitigation measures are implemented based on the assessment results.
2.3 Security Controls: Provider implements a set of security controls to protect against unauthorized access, disclosure, alteration, and destruction of customer data. These controls include, but are not limited to, access controls, encryption, authentication mechanisms, intrusion detection systems, and data backups.
3. Access Control
3.1 User Access: Octahedron enforces strict access controls to ensure that only authorized individuals have access to the platform. User access is granted based on the principle of least privilege, where users are granted access rights necessary for their roles and responsibilities.
3.2 Authentication: Strong authentication mechanisms, such as unique usernames and passwords, two-factor authentication, or biometric authentication, are enforced to verify the identity of users accessing Octahedron.
3.3 User Provisioning and De-provisioning: Access rights are granted and revoked promptly based on changes in user roles, employment status, or customer requirements. Timely de-provisioning of access rights is conducted when users no longer require access to Octahedron.
4. Data Security
4.1 Data Classification: Octahedron classifies customer data based on its sensitivity and criticality. Different security controls are applied to different data classifications to ensure appropriate protection.
4.2 Encryption: Octahedron employs encryption techniques, such as data-at-rest encryption and data-in-transit encryption, to protect customer data from unauthorized access or interception.
4.3 Data Backup and Recovery: Regular data backups are performed to ensure the availability and recoverability of customer data in the event of a system failure or data loss. Backup data is stored securely and tested periodically for integrity and recoverability.
5. Incident Management
5.1 Incident Response: Octahedron maintains an incident response plan to effectively detect, respond to, and mitigate security incidents or breaches. The plan includes clear procedures for reporting, investigation, containment, eradication, and recovery.
5.2 Incident Reporting: Customers are encouraged to promptly report any suspected security incidents or vulnerabilities to Octahedron's designated contact. Octahedron acknowledges and responds to reported incidents in a timely manner.
6. Physical and Environmental Security
6.1 Data Center Security: Octahedron's data centers are equipped with physical security measures, such as access controls, surveillance systems, and fire suppression systems, to protect the platform infrastructure from unauthorized access, theft, or damage.
6.2 Environmental Controls: Octahedron implements appropriate environmental controls, including power redundancy, cooling systems, and fire prevention measures, to maintain optimal operating conditions for the platform infrastructure.
7. Compliance and Auditing
7.1 Compliance with Laws and Regulations: Octahedron complies with applicable laws, regulations, and industry standards pertaining to information security, data protection, and privacy.
7.2 Auditing and Monitoring: Octahedron conducts regular audits and assessments to verify compliance with this Security Policy and relevant security standards. Continuous monitoring and log analysis are performed to detect and respond to any security breaches or suspicious activities.
8. Training and Awareness
8.1 Security Awareness Program: Octahedron implements a security awareness program to educate employees and contractors about their security responsibilities, best practices, and potential risks.
8.2 Training: Employees and contractors with access to Octahedron receive periodic training on information security, including data handling, secure coding practices, and incident response procedures.
9. Policy Review and Updates
This Security Policy is subject to periodic review and updates to ensure its effectiveness and alignment with changing security risks and regulatory requirements.
10. Contact Information
For any security-related inquiries or concerns, customers can contact Octahedron's designated security team at info@octahedron.app.