Privacy Policy
Chengdu Jiahejing Technology Co., Ltd. (成都嘉合靖科技有限公司), Chengdu, Sichuan, China (“we”) operates the Octarq websites, sells the Octarq software, and runs the Octarq Cloud hosted service.
The most important thing on this page is that the answer differs depending on how you run Octarq. Self-hosted, we never receive your operational data. On Cloud, we hold it. Everything below is split accordingly, because a single sentence covering both would be wrong for one of you.
Last updated: 12 August 2026.
If you self-host
Section titled “If you self-host”You install Octarq on infrastructure you control. Your links, mailboxes, message contents, DNS zones, server credentials, and AI provider keys stay on your servers. We have no access to your instance and receive none of it.
What we do hold about you:
- Purchase data. When you buy a licence, the payment path (see below) collects your email and payment details and passes us the email and plan so we can issue your licence. We store the email, tier, and licence record.
- Support correspondence. If you email us, we keep that correspondence.
That is the whole list. Your instance does not phone home with usage data.
If you use Octarq Cloud
Section titled “If you use Octarq Cloud”We operate the instance, so we process the content of your workspace. Being precise about it:
| What | Why we hold it |
|---|---|
| Short links, their destinations, and click records (including IP-derived location and user agent) | To serve redirects and show you analytics |
| Mailboxes, addresses, and message contents | To receive and send your mail |
| DNS zones and records | To manage the domains you point at us |
| Workspace members, their emails, and authentication data | To sign people in and enforce roles |
| AI provider credentials you configure | To make the model calls you request. Stored encrypted (AES-GCM) and scoped to your workspace |
| Usage and metering records | To apply quotas and bill you correctly |
| Billing records and invoices | To take payment and meet accounting obligations |
We process this to run the service you asked for. We do not sell it, use it for advertising, or use your workspace content to train models.
Your data, out and gone. You can export your workspace at any time from within the product. After you close the account we hold the data for 30 days so mistakes are recoverable, then purge it; backups roll off no later than 90 days. The detail is in the Cloud Service Terms.
Where it is processed. Cloud runs on Tencent Cloud infrastructure in the Tokyo, Japan region. Japan holds an adequacy decision from the European Commission, so transfers of personal data from the EEA to our Cloud infrastructure rest on that decision rather than on standard contractual clauses.
Our company is registered in China and our staff administer the service from there. Your workspace data is stored and processed in Japan; administrative access from China is limited to what operating the service requires.
Websites
Section titled “Websites”Our websites (octarq.org and docs.octarq.org) use Plausible Analytics, which
we run on our own server at plausible.jungley.net — the data is never sent to
a third-party analytics company.
Plausible sets no cookies and stores no identifier for you: it counts a page view, the page URL, the referrer or campaign tag that brought you, and coarse country/device/browser derived from the request and then discarded. It does not follow you across sites, and nothing it collects identifies you. There is no Google Analytics, no advertising pixel, and no session recorder.
If you arrive from a campaign link, our sites keep the campaign tag from that
URL (utm_source and friends) in your browser’s sessionStorage for the rest
of the visit, and re-attach it when you move between octarq.org,
docs.octarq.org and app.octarq.org — otherwise each hop would look like a fresh
anonymous arrival. It records which campaign, never who you are, and the
browser discards it when you close the tab.
Standard server logs are kept for security and debugging.
Payments
Section titled “Payments”Two paths, with different roles:
- Polar is a merchant of record — for those orders Polar is the seller, collects your payment details, and handles sales tax/VAT/GST. Their privacy policy governs what they collect.
- Stripe is a payment processor — we are the seller and Stripe handles the card data.
We never see or store full card numbers on either path.
Sub-processors
Section titled “Sub-processors”The third parties that process personal data on our behalf are listed at Sub-processors, which we keep current.
How we use data
Section titled “How we use data”To deliver and support your licence or Cloud workspace, process payments, and send essential service and transactional email. We do not sell your data.
Retention
Section titled “Retention”Purchase and licence records are kept as long as needed to support your licence and to meet legal and accounting obligations. Cloud workspace data follows the schedule above. Support correspondence is kept while it is useful for supporting you.
Your rights
Section titled “Your rights”Depending on your jurisdiction (e.g. GDPR, UK GDPR, CCPA, PIPL) you may request
access to, correction of, deletion of, or a copy of your personal data, and may
object to certain processing. Contact [email protected] and we will respond
within the time your law requires.
If you are a Cloud customer processing other people’s personal data in your
workspace, you are the controller of that data and we are your processor. We
can enter into a data processing agreement — ask at [email protected].
Contact
Section titled “Contact”Chengdu Jiahejing Technology Co., Ltd. (成都嘉合靖科技有限公司) · Chengdu, Sichuan, China