Privacy policy

Who we are

Octant Commercial Intelligence ("Octant", "we") is an independent business-information provider. This policy covers our website and API. It sits alongside our Data & compliance commitments.

Information we collect

• Account & contact data — name, work email, company, and messages you send us (contact form, disputes, sign-up).
• Payment data — processed by Stripe; we receive a customer identifier and status, never your full card number.
• Technical data — IP address, request metadata and security logs, used for rate-limiting, abuse prevention and reliability.
• Business information we report on — derived from public registers, licensed feeds and consented trade data. This is company data, not consumer data.

How we use it

To provide reports, scores, verification and monitoring; to operate accounts and billing; to respond to enquiries and disputes; to secure the service; and to meet legal obligations. We do not sell your account data, and we do not train models on your data.

Legal bases (UK/EU GDPR)

Contract (delivering the service), legitimate interests (security, product improvement), consent (marketing, where required), and legal obligation. Data-subject rights — access, rectification, erasure, restriction, portability, objection — are available; California residents have equivalent CCPA/CPRA rights. Use the dispute process for corrections to reported data.

Sharing & processors

We share data with service providers strictly to run the service: Stripe (payments), Cloudflare (hosting/CDN), and data sources such as GLEIF, SEC, Companies House, EU VIES and OpenSanctions. We do not sell personal data.

Retention & security

We keep data only as long as needed and apply encryption in transit, least-privilege access and audit logging. See our cookie policy for cookies.

Contact

[email protected] — we aim to respond within 5 business days.