Skip to main content
Legal · Privacy Policy

Privacy Policy

What we collect. How we use it. How we keep it safe. The full disclosure, written so you can actually read it.

Last updated · April 2026

Introduction

OceanAtlasXII ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our CRM platform and services.

Information We Collect

We may collect information about you in a variety of ways, including:

Personal Data

When you create an account or use our services, we may collect personally identifiable information, such as:

  • Name, email address, and phone number
  • Organization name and details
  • Payment and billing information
  • Content you upload to the platform (contacts, documents, communications)
  • Usage data and preferences

Automatically Collected Data

When you visit our website, we may automatically collect certain information about your device, including your IP address, browser type, operating system, access times, and pages viewed.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our CRM platform
  • Process your subscription and billing
  • Communicate with you about your account and services
  • Provide customer support and respond to inquiries
  • Send marketing and promotional communications (with your consent)
  • Analyze usage patterns to improve our services
  • Comply with legal and regulatory obligations
  • Prevent fraud and protect our business

SMS / Text Messaging Consent

By providing your phone number and opting in to receive text messages from OceanAtlasXII , you consent to receive SMS/text messages regarding:

  • Application status updates
  • Appointment reminders and confirmations
  • Document requests and funding notifications
  • Account-related alerts

Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message. For help, reply HELP or contact us at .

Information Sharing

We may share your information with:

  • Service providers who assist in our operations (hosting, email, SMS, analytics)
  • AI service providers (including Anthropic and OpenAI) for AI-powered features such as lead analysis, document processing, and automated responses
  • Voice AI providers for automated calling features
  • Background job processing services
  • Payment processors for subscription billing
  • Legal and regulatory authorities when required by law
  • Business partners with your consent
  • Third-party integrations you choose to enable

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest (including OAuth integration tokens encrypted with AES-256-GCM), secure servers, role-based access controls, and immutable audit logging of security-relevant events. We offer optional multi-factor authentication (MFA) via authenticator apps to further secure your account. We also log authentication events (sign-ins, sign-outs, password changes) with IP address and timestamp for security monitoring and fraud prevention. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Financial records may be retained for up to seven years as required by law. Security audit logs are retained for 90 days. Authentication event logs are retained for 90 days. When you request account deletion, your account is deactivated immediately and permanently deleted after a 30-day grace period.

Your Rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Request correction of inaccurate data
  • Request deletion of your personal data (subject to legal retention requirements)
  • Opt out of marketing communications
  • Opt out of the sale of personal information (California residents)
  • Lodge a complaint with a supervisory authority

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. To exercise these rights, contact us using the information below or submit a request via our CCPA opt-out page.

Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors come from. You can set your browser to refuse cookies, but this may limit your ability to use certain features of our website. See our Cookie Policy for the full list.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Phone