Privacy Policy

Privacy and security are too important to be buried in legalese. Octograf does not own your data, nor do we sell it to others or use it for advertising. It's your data, period.

Last Updated: October 9, 2026

Our Core Philosophy

Octograf is built on a simple premise: your professional network belongs to you. We believe that you should have control over your data. We are not an ad-supported business. We make money by charging for premium software, not by selling access to your graph.

Data Ownership

When you use Octograf to manage your relationships, you are trusting us with sensitive information. Here is our promise to you:

You own your data. We claim no ownership over the contacts, notes, or graph structures you create.
We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
Access where feasible. We aim to provide ways for users to access or export their data where feasible.

Information We Process

Octograf may process account information, profile information, contacts, imported contact data, notes, reminders, relationship context, graph relationships, voice notes, transcripts, business card images, CRM workflow data, app usage data, diagnostics, and support communications when needed to provide the service.

Subscription and Purchase Data

If you purchase a subscription through Apple In-App Purchase, Apple processes the payment. Octograf does not receive or store your full payment card details.

To provide Premium access and support subscription status, Octograf may process limited subscription-related data such as product identifiers, transaction identifiers, subscription status, renewal or expiration dates, trial status, receipt data, and related account identifiers.

How We Use Information

We use information to provide Octograf's features, maintain accounts, sync data, process reminders and contact context, provide AI-assisted organization, manage subscription access, prevent abuse, provide support, improve reliability, and comply with legal obligations.

AI Processing

Octograf may use AI-assisted processing to transcribe, summarize, search, classify, extract, enrich, or organize user-provided relationship data. We do not use private contact notes or personal graph data to train foundation models.

Data Sharing

We do not sell personal data. We may share limited information with service providers that help operate Octograf, such as hosting, database, authentication, analytics, AI processing, storage, billing verification, crash reporting, notifications, and customer support providers.

Permissions

Octograf may request device permissions only when needed for user-initiated features, such as microphone access for voice capture, camera or photo access for card scanning or images, contacts access for contact import, calendar access for event-related features, and notification access for reminders and follow-ups.

Google Contacts, Google Calendar, and Gmail

These connections are optional. Signing in to Octograf does not by itself authorize access to your Google Contacts, Google Calendar, or Gmail. We request the permissions needed for the optional feature you choose to connect in the app. You can continue using Octograf without these connections.

Information we access and how we use it

Google Contacts: With the contacts.readonly permission, we read contact names, email addresses, phone numbers, organizations, job titles, and identifiers and metadata used to match records. We use this information to import contacts into your Octograf account, identify existing contacts, and avoid duplicates. Depending on the import flow and your plan, eligible contacts may begin importing after you connect; other flows let you review them first. We do not create, edit, or delete contacts in your Google account.

Google Calendar: With the calendar.readonly permission, we read your calendar list and events from the calendars you select. Event information includes titles, descriptions, locations, start and end times, time zones, status, and attendees. We use it to show upcoming meetings, match attendees to contacts, synchronize changes, and provide meeting preparation and relationship context. Read-only connections cannot change your calendars or events. If you separately enable appointment writing and grant calendar.events.owned, Octograf can create, reschedule, or cancel appointment events in a Google calendar you own. Octograf does not create or delete Google calendars.

Gmail: Contacts and Calendar permissions do not authorize Gmail access. Where available, you may separately connect Gmail with gmail.send to send a draft after reviewing and approving its exact recipients and content. We send the approved message and recipient addresses to Google for delivery. This permission does not let Octograf read your inbox.

Storage, protection, and service providers

Imported contacts and synchronized calendar information are stored in Octograf's backend to provide these features. When you use Gmail sending, we also store email drafts, recipient addresses, message content, approval records, and delivery status to support review, sending, and recovery from interrupted requests. Google access and refresh tokens are encrypted before database storage. We use HTTPS for data in transit, authenticated access, and account-scoped database access controls. No system can guarantee absolute security.

Hosting, database, storage, and relevant AI-processing providers process information needed to operate these features. For AI-assisted meeting preparation, search, and relationship assistance, relevant stored contact and calendar information may be included in requests to our AI providers to deliver those features. Information you separately choose to share through Octograf is also subject to the sharing choices you make in the app. We do not sell Google user data or use it for advertising.

Retention, disconnecting, and deletion

We retain imported contacts, synchronized calendar information, and email drafts and sending records while needed to provide your connected or imported features, unless you delete the relevant records or your account, subject to the limited retention described below. Disconnecting Google Contacts or Google Calendar in Octograf removes its stored connection credentials and stops future synchronization through that connection. Calendar disconnection also removes its synchronized calendars, events, and calendar-only attendee entries. Disconnecting Gmail disables further sending through that connection and requests revocation of its authorization. If revocation needs to be retried, encrypted revocation credentials may be retained until that request completes. Disconnecting does not recall sent email or delete events already written to Google Calendar. Contacts already imported or saved to your contact list, and information you separately saved in Octograf, are not all deleted merely by disconnecting.

You can delete contacts or your Octograf account in the app, or request help deleting your Google-derived data at support@octograf.com. You can also revoke Google's authorization in your Google Account connections settings. Revoking access stops future access through that authorization; it does not itself delete information previously imported into Octograf.

Data Retention and Deletion

We retain data for as long as needed to provide Octograf, comply with legal obligations, resolve disputes, prevent abuse, and maintain security. You may delete your account in the app. After deletion, some data may remain for a limited time in backups, logs, billing records, or records required for legal, security, or fraud-prevention purposes.

Security

We use reasonable technical and organizational safeguards designed to protect user data, including HTTPS/TLS for data in transit, authenticated access controls, database row-level security, secure local storage for authentication sessions where available, and operational monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

Octograf is not intended for children under 13 or the minimum age required in your jurisdiction.

International Processing

Your information may be processed in countries where Octograf or its service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date.

Contact

For privacy questions or data requests, contact: support@octograf.com

Last Updated: October 9, 2026