OCTANT by MotionFoxx
Privacy Policy
This Privacy Policy explains how MotionFoxx of Sri Lanka (“MotionFoxx”, “we”, “us”) handles personal data when you use OCTANT (the “Service”). We are the controller of the personal data described here. We follow the Personal Data Protection Act No. 9 of 2022 of Sri Lanka and, where they apply, the UK and EU General Data Protection Regulation.
1. Your scripts are not collected
Your scripts, story cards, breakdowns, schedules, call sheets, sides, locations and any other work you create stay on your device, in your browser’s storage. They are never sent to us, and we cannot read them.
2. What we collect
- Account details: your name, email address, membership status, plan and access dates, and the version and time of the Terms you accepted.
- Sign-in details: the public part of each passkey you register (the private part never leaves your device), and, if you use Google sign-in, your Google account identifier and email address.
- Device sessions: for each signed-in device, a description such as “Chrome on Android”, a shortened network address and the times of sign-in and last activity.
- Membership checks: when OCTANT is online, it asks our server whether your membership is active. This sends your session cookie and the usual details of any web request, never your work.
- Access requests: the name, email, role, company and message you send when you request access.
- Security records: a log of sign-ins and account changes, with shortened network addresses, used to protect accounts and prevent abuse.
3. Cookies
We use only cookies that are strictly necessary: one that records that you accepted the Terms, one that keeps you signed in, one that protects forms, and short-lived ones that complete a passkey or Google sign-in. We do not use advertising or analytics cookies, and we do not track you across websites.
4. Why we use your data, and the legal basis
- To create and run your account, check your membership and provide the Service (performance of our contract with you).
- To keep the Service and accounts secure and to prevent misuse (our legitimate interests).
- To reply to access requests and to contact you about your membership (our legitimate interests, or steps taken at your request before a contract).
- To meet legal obligations.
5. Who receives it
We do not sell personal data or share it for advertising. We use a hosting provider to run our servers, which processes data on our behalf. If you choose Google sign-in, Google processes your sign-in under its own privacy policy. We may disclose data where the law requires it or to protect our rights.
6. International transfers
Our servers may be located outside your country, including in the United States. Where data is transferred, we rely on appropriate safeguards required by applicable law.
7. How long we keep it
Account details are kept while your account exists and for up to 12 months after it is closed, unless the law requires longer. Device sessions end after 60 days without use. Security records and access requests are kept for up to 13 months.
8. Security
Sign-in uses passkeys or Google instead of passwords. Sign-in codes and session tokens are stored only in protected, hashed form. Connections are encrypted, and access to member data is restricted.
9. Your rights
Subject to the law that applies to you, you may ask to access, correct, update, delete or receive a copy of your personal data, object to or restrict its use, and withdraw consent where we rely on it. Contact us at milindafoxx@gmail.com. You may also complain to the Data Protection Authority of Sri Lanka or to the data protection authority where you live.
10. Children
The Service is intended for adults and is not directed at children.
11. Changes
We will post any changes to this policy on this page with a new effective date, and tell members about significant changes.
12. Contact
MotionFoxx, Sri Lanka. Email: milindafoxx@gmail.com.