Ocholens ("Ocholens", "we", "us", or "our") provides AI traffic analytics that show website owners when AI tools refer visitors to their site and when AI crawlers access their content. This Privacy Policy explains what we collect, why we collect it, and the choices you have. It applies to ocholens.com and the Ocholens dashboard.

We act in two roles. For information about our own account holders, we are the data controller. For the visitor and crawler analytics data our customers collect through Ocholens about their own websites, we act as a data processor on that customer's behalf.

Account information — when you create an account we collect your name and email address through our authentication provider.

Billing information — paid plans are processed by our payment provider. We receive limited billing metadata such as your plan, subscription status, and the last four digits of your card. We never receive or store full card numbers.

Analytics data we collect for our customers — when an Ocholens snippet or middleware runs on a customer's website, we record request metadata about visits and crawler hits, including:

• the URL requested and the referring URL
• the detected AI source (for example ChatGPT, Claude, Perplexity, or Gemini)
• the crawler's name, vendor, and whether it was verified
• approximate country and originating network (ASN)
• the user-agent string and a timestamp

IP addresses are used transiently to verify crawler authenticity against vendors' published IP ranges and to derive approximate country. They are not exposed in the dashboard.

Product usage data — we use a product analytics tool to understand how the dashboard is used, such as which pages and features are viewed and basic device and browser information.

Communications — if you contact us by email, we keep that correspondence so we can support you.

We use the information we collect to:

• provide, operate, and maintain the Ocholens service
• authenticate you and secure your account
• process payments and manage subscriptions
• detect AI referrals and verify AI crawlers
• produce the analytics our customers ask us to collect
• improve, troubleshoot, and develop new features
• respond to support requests and communicate with you
• comply with legal obligations and enforce our terms

We use strictly necessary cookies on ocholens.com for authentication and security. We do not use advertising or cross-site tracking cookies on our own site.

The human-visitor tracking snippet we provide to customers does not set cookies, does not fingerprint visitors, and does not track visitors across different websites.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the service you signed up for); our legitimate interests (to secure, improve, and operate the service, including crawler verification); your consent where it is required; and compliance with legal obligations.

We do not sell personal data. We share data with trusted sub-processors that help us run Ocholens, including providers for authentication, database hosting, application hosting, payment processing, and product analytics. Each is bound by contractual obligations to protect the data they handle.

We may also disclose information if required by law, to respond to lawful requests, or to protect the rights, property, and safety of Ocholens, our users, or the public. If Ocholens is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We retain account information for as long as your account is active. Analytics event data is retained according to your plan's retention window, and is deleted within a reasonable period after an account is closed. Billing records are kept for as long as required by law.

We protect information using encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Ocholens is operated with infrastructure that may process data in the United States and other countries. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing or withdraw consent. To exercise rights relating to your Ocholens account, email us using the contact details below.

For analytics data we process on behalf of a customer (the website owner), please contact that customer directly. As their processor, we will assist them in responding to your request.

Ocholens is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above, and we will provide notice of material changes where appropriate.

If you have questions about this Privacy Policy or how we handle your information, email us at hello@ocholens.com.