Privacy Policy

This policy explains what data Occasely collects, why we collect it, and the choices you have. The short version: we collect what we need to run the Service, we never sell your data, and your social account credentials are encrypted at rest and never sold.

1. Data we collect

• Account details: your name, email address and, if you give it, phone number.
• Brand profile: your business name, category, tone of voice, links, and any images or assets you upload.
• Social account tokens: the credentials that let us publish to your connected channels. They are encrypted at rest and never sold. TikTok, Reddit and some Pinterest connections are made through our publishing partner Zernio, which holds that connection and publishes on our instruction.
• Content: the briefs you write, the posts generated for you, and the photos you attach to posts or upload to Product Studio.
• Instagram conversations: if you use Instagram automation (Occasely Engage), the comments and messages people send your account, any email address or phone number they give in reply (saved as leads), and clicks on tracked links.
• Google reviews: if you connect a Google Business Profile, the reviews customers leave on it (reviewer name, rating and text) and the replies you draft and publish.
• Usage metrics: how you use the Service, including AI generation logs, so we can enforce plan limits and keep the product reliable.

2. How we use your data

• To provide the Service: drafting, scheduling, and publishing your posts, and showing your content calendar.
• AI generation: we use third-party model providers to generate content. Your briefs and brand context are sent to AI providers such as Google and Anthropic to produce your posts, and, if you turn on AI replies for Instagram, so are the messages being answered and your knowledge base. We do not use your data to train models.
• Payments: subscriptions are processed by Dodo Payments, which acts as our merchant of record and is the seller of record shown on your statement. We never store your card details — they go directly to Dodo Payments.
• Publishing partner: TikTok, Reddit and some Pinterest connections are made and published through Zernio, which receives the posts you schedule to those channels.
• Service communication: emails about your account, billing, and important product changes.

3. Legal bases and compliance

For users in India, we process personal data in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) — on the basis of your consent and the legitimate uses the Act recognizes. For users in the UK and EU, we process personal data under the UK GDPR and the GDPR, relying on contract performance and legitimate interests as applicable.

4. Data retention and deletion

We keep your data for as long as your account is active. You can delete your account yourself from Settings at any time. Deleting it immediately stops billing, cancels every scheduled post, and signs you out everywhere — but nothing is erased for 30 days, so that a deletion you did not mean can be undone. Email hello@occasely.com within that window and we will restore the account.

After 30 days the deletion is permanent and cannot be reversed: your personal data — brand profile, social tokens, briefs, generated posts and uploaded media — is destroyed, except where the law requires us to keep specific records (for example, billing records for tax purposes). You can also request deletion by emailing the same address. For Facebook, Instagram and Threads connections, including removing Occasely from those apps, see Data Deletion.

5. Security

• Social account tokens are encrypted at rest with keys managed separately from the database.
• Each customer’s data is isolated with database row-level security, so one workspace can never read another’s data.
• Access to production systems is restricted and logged. If you find a security issue, please report it to hello@occasely.com.

6. Cookies & analytics

We use essential session cookies — the ones that keep you signed in — and Google Analytics to understand how the product is used (pages visited, approximate location, device type) so we can improve it. Google Analytics sets its own cookies; you can opt out with the Google Analytics opt-out browser add-on. We do not use advertising trackers.

7. Your rights

You can, at any time:

• request access to the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (see section 4);
• withdraw consent for processing that relies on it.

To exercise any of these rights, email hello@occasely.com. Grievances under the DPDP Act go to the same address, which reaches the team responsible for data protection.

8. Children

Occasely is a business tool and is not intended for anyone under 18. We do not knowingly collect personal data from children; if you believe we have, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the product and the law evolve. We will post updates here with a new “Last updated” date, and notify you by email or in the app if a change is material.

10. Contact

Questions about privacy at Occasely? Write to us at hello@occasely.com.