Version 1.0. Effective 10 October 2026. Published at: https://oclever.com/privacy
This policy explains how OClever Private Limited ("OClever", "we", "us") collects, uses and protects personal data when you visit oclever.com, use our free AI visibility check, contact us, or use the OClever platform as a customer or invited user.
Who we are. OClever Private Limited, CIN U62090KA2026PTC229436, GSTIN 29AAFCO4101Q1Z4, Hanto Workspace, No. 2734, 3rd Floor, 16th Cross, HSR Layout, Bangalore South, Bengaluru 560102, Karnataka, India. For the personal data described in this policy, we are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the UK and EU GDPR.
What this policy does not cover. When our customers use OClever, they may connect or upload data that includes personal data, for example website visitor logs or documents. We process that data on our customer's behalf and under their instructions, as their data processor. Our customer's own privacy notice governs that data, and our Data Processing Addendum governs how we handle it. If your data is in a customer's account and you want to exercise your rights, please contact that customer. We will help them respond.
1. Summary
- We collect only what we need to run our website, deliver your free report, provide the platform, bill customers and keep things secure.
- We do not sell personal data. We do not run advertising trackers or retargeting on our website. We do not build profiles of individual visitors.
- Sales follow-up emails are sent only if you opt in, and you can opt out at any time.
- Our platform data is hosted in India (Amazon Web Services, Mumbai region). Some service providers process data in the United States.
- You can contact our Grievance Officer at [email protected].
2. What we collect and why
2.1 Visiting our website
| Data | Purpose | Basis |
|---|---|---|
| Visit counts, pages viewed, referral source, approximate location (city or country) and device type, collected by Google Analytics using first-party cookies, with Google's advertising features turned off | Understand how our website is used and improve it | Your consent where required by law (for example, for visitors in the UK and EEA); otherwise our legitimate interest in running our website |
| IP address, browser type and request details in our server and security logs | Keep the website secure, prevent abuse, meet legal log-retention requirements | Legitimate interest; legal obligation |
See our Cookie Notice at https://oclever.com/cookies.
2.2 Using the free AI visibility check
| Data | Purpose | Basis |
|---|---|---|
| The website URL you enter and your work email address | Run the visibility check and email your report to you | Your consent, given when you submit the form, for this specific purpose |
| Your work email address (only if you tick the optional box) | Contact you by email about your results and about OClever's products | Your separate, optional consent |
You can use the free check without agreeing to sales follow-up.
2.3 Booking a demo, contacting us or submitting an Opportunity brief
| Data | Purpose | Basis |
|---|---|---|
| Name, work email, company, role, phone number (if provided) and the information you include in your message | Respond to your request, schedule and hold the demo | Your consent; steps you ask us to take before entering a contract |
We do not add you to a newsletter or mailing list because you submitted one of these forms.
2.4 Using the OClever platform
| Data | Purpose | Basis |
|---|---|---|
| Name, email address, organisation, role, and a salted one-way hash of your password | Create and manage your account, authenticate you, manage team access | Performance of the contract with your organisation; legitimate interest |
| Login times, IP address, browser and device information, and activity logs | Security, fraud prevention, troubleshooting, audit trail, usage-based billing (Coins) | Legitimate interest; legal obligation |
| Settings and feature usage | Operate and improve the platform | Legitimate interest |
| Support requests and communications | Provide support | Performance of contract; legitimate interest |
| Service emails (such as invitations, security alerts, renewal reminders, billing notices and scheduled reports) | Run the service you or your organisation signed up for | Performance of contract |
2.5 Billing
| Data | Purpose | Basis |
|---|---|---|
| Billing contact name, email, billing address, GSTIN or other tax identifiers, invoices and payment records | Bill, collect payment, issue tax-compliant invoices, keep statutory records | Performance of contract; legal obligation |
Card and bank details are entered directly with our payment processor (currently Razorpay). We do not receive or store full card numbers.
2.6 Connecting Google Analytics or Google Search Console
If you connect Google Analytics 4 or Google Search Console, we receive read-only access to aggregated metrics for the properties you choose, and we show them only within your organisation's OClever dashboard. The access token stays on our servers and is never exposed to your browser.
Google API Limited Use. OClever's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to train AI models. We transfer it only as necessary to provide or improve the features you use, to comply with law, or with your consent.
You can disconnect Google Analytics or Google Search Console at any time under Integrations, which revokes our access and deletes the token. Data already synced remains in your organisation's account until you ask us to delete it by emailing [email protected], or until your account is closed.
2.7 Connecting an AI assistant (MCP)
If you connect an AI assistant such as Claude, ChatGPT, Cursor or VS Code to the OClever MCP server, we store your access tokens only as one-way hashes. We log each call with metadata (such as time, tool used and token identifier) and a fingerprint of its inputs, not the content of the inputs. You can revoke tokens at any time under Settings > AI assistants.
2.8 AI answers we collect
Our platform collects answers from AI assistants such as ChatGPT, Gemini and Perplexity to measure how brands are described. These answers sometimes name individuals, for example a company's founder or a doctor at a hospital. We store such names only as part of the answer text for brand analysis. We do not search for individuals, compile information about them, or build profiles of them. If you believe an answer we hold contains inaccurate personal data about you, write to our Grievance Officer and we will review it.
3. Who we share personal data with
We share personal data only as follows:
- Service providers that host our platform, process payments, send emails, provide analytics or provide AI model processing, under contracts that restrict their use of the data. The current list is at https://oclever.com/legal/subprocessors.
- Your organisation. If you use OClever through an organisation's account, its administrators can see your name, email, role and activity in that account.
- Professional advisers such as lawyers, auditors and accountants, under confidentiality.
- Authorities, where required by law, court order or a lawful request from a government agency, or to protect our rights, users or the public.
- A successor business, if OClever is involved in a merger, acquisition, reorganisation or sale of assets, subject to this policy.
- Others, with your consent.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
4. Where your data is stored
Our platform is hosted on Amazon Web Services in the Mumbai region in India. Some service providers, including AI model providers, payment processors and Google Analytics, process data in the United States and other countries. Where we transfer personal data of UK or EEA residents outside those regions, we use safeguards recognised by law, such as standard contractual clauses. We will not transfer personal data to any country the Government of India restricts by notification.
5. How long we keep it
| Data | Retention |
|---|---|
| Google Analytics data | 14 months, then automatically deleted by Google |
| Free check: URL, email and report | 12 months from the check, unless you opted in to follow-up |
| Free check follow-up consent and contact details | Until you withdraw consent, or 24 months after our last contact with you, whichever is earlier |
| Demo, contact and Opportunity brief submissions | 24 months from our last contact, unless you become a customer |
| Account data | For the life of the account, then deleted within 30 days after the account's data export window ends |
| Security and access logs | At least 180 days and up to 1 year, or longer if the law requires |
| Billing and tax records | As long as Indian company and tax law requires (generally 8 years) |
We may keep data longer if needed to resolve a dispute, enforce our agreements, or comply with law.
6. Your rights
6.1 Everyone
You can ask us to:
- give you a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with;
- correct, complete or update inaccurate or incomplete data;
- erase your data, where we no longer need it or you withdraw consent, unless the law requires us to keep it;
- withdraw any consent you have given, as easily as you gave it (withdrawal does not affect processing already done); and
- nominate another person to exercise your rights if you die or become incapable.
6.2 UK and EEA residents
You also have the right to object to processing based on legitimate interests, to restrict processing, and to data portability. You can complain to your local supervisory authority, such as the UK Information Commissioner's Office.
6.3 California residents
You have the right to know what personal information we collect, use and disclose; to request deletion and correction; and not to be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that would require a right to limit. You may use an authorised agent to make a request.
6.4 How to make a request
Email [email protected] with the subject line "Privacy request". We will verify your identity, which may require you to confirm control of the email address linked to your data. We will respond within 30 days. If your request relates to data we hold for one of our customers, we will pass it to that customer.
7. Grievance Officer
If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer:
Name: Prashant Kashyap Email: [email protected] (subject line: "Grievance") Address: OClever Private Limited, Hanto Workspace, No. 2734, 3rd Floor, 16th Cross, HSR Layout, Bangalore South, Bengaluru 560102, Karnataka, India
We will acknowledge your grievance within 7 days and resolve it within 30 days of receipt. If you are in India and are not satisfied with our response, you may complain to the Data Protection Board of India once you have exhausted this process.
8. Marketing communications
We send marketing emails only to people who have opted in, and to business customers about products similar to those they use, where the law allows. Every marketing email includes an unsubscribe link. You can also opt out by emailing [email protected]. We will still send service emails that are needed to run your account.
9. Security
We protect personal data with measures that include encryption in transit and at rest, hashed passwords and tokens, access controls with multi-factor authentication for our staff, and monitoring. No system is completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
10. Children
OClever is a business service and is not intended for anyone under 18. We do not knowingly collect personal data of children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We will post any update on this page with a new version number and effective date. If a change materially affects how we use personal data you have already given us, we will notify you by email or through the platform before it takes effect, and ask for fresh consent where the law requires.
12. Language
This policy is available in English. If you would like it in any language listed in the Eighth Schedule to the Constitution of India, email [email protected] and we will provide it.
13. Contact
OClever Private Limited, Hanto Workspace, No. 2734, 3rd Floor, 16th Cross, HSR Layout, Bangalore South, Bengaluru 560102, Karnataka, India. Email: [email protected].