← Back to CORE

Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how OC Interactive Digital Agency Corp. ("OCIDM", "we", "us", "our"), operator of the CORE platform at core.ocidm.io (the "Service"), collects, uses, discloses, and safeguards your information. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. Who we are

OCIDM is the data controller for information processed through the Service. For privacy questions or to exercise your rights, contact us at support@ocidm.io (mailing address: 558 Upper Gage Ave #203, Hamilton, ON L8V 4J6).

2. Information we collect

Information you provide

  • Account data: name, email address, and password (stored only as a salted hash — we never store it in plain text).
  • Brand & profile data: business details, brand voice, positioning, target audience, and other inputs you provide to generate content.
  • Content you create: posts, drafts, images, and other material generated or uploaded through the Service.
  • Connected accounts: when you connect a social account (e.g., LinkedIn, Facebook, Instagram), we store the authorization tokens needed to publish on your behalf, and limited profile/analytics data returned by those platforms.
  • Communications: messages you send us for support.

Information collected automatically

  • Usage & device data: pages viewed, features used, IP address, browser type, and similar analytics.
  • Cookies & tracking pixels: see Section 5.

Payment information

Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles card data directly. We retain limited billing records (plan, amounts, invoice history, and a Stripe customer/subscription reference).

3. How we use your information

  • To provide, operate, and maintain the Service;
  • To generate content using AI (see Section 4) based on your inputs;
  • To process payments, subscriptions, and billing;
  • To publish content to the third-party platforms you connect, at your direction;
  • To measure, analyze, and improve the Service, and for marketing and advertising (including the pixels in Section 5);
  • To communicate with you about your account and support;
  • To detect, prevent, and address security, fraud, or technical issues; and
  • To comply with legal obligations.

4. AI processing

CORE uses third-party artificial-intelligence providers to generate and analyze content. When you use AI features, the content and context you submit (your inputs, brand data, and prompts) are sent to these providers to produce outputs. Our current AI subprocessors include Anthropic (Claude), OpenAI, and Google (Gemini), and may include others for specialized tasks (e.g., transcription). We do not use your private content to train our own models, and we select providers that offer business/enterprise terms. AI output may be inaccurate — you are responsible for reviewing it before use.

5. Cookies and tracking pixels

We use cookies and similar technologies to run the Service and to understand and advertise it. This includes advertising/analytics pixels from:

  • Meta (Facebook & Instagram) Pixel
  • Google (Analytics and/or Ads)
  • LinkedIn Insight Tag

These pixels set cookies and share limited information (such as your device/IP and actions on our site) with the respective platforms so we can measure our advertising and reach relevant audiences. They are operated by those third parties under their own privacy policies.

Your choices: where required by law (e.g., in the EU, UK, and certain other regions), we ask for your consent before non-essential cookies and pixels are set, and you can withdraw consent or manage preferences at any time via our cookie banner. You can also control cookies through your browser settings and opt out of interest-based advertising through the platforms' own tools.

6. How we share information

We do not sell or rent your personal information, and we do not share it with third parties for their own independent marketing. We share information only as needed to operate the Service:

  • Service providers / subprocessors who process data on our behalf under contract, including: Supabase (database & authentication), Vercel (hosting), Stripe (payments), our AI providers (Section 4), our social-publishing provider(s), and the advertising/analytics platforms in Section 5.
  • At your direction — e.g., publishing your content to social platforms you connect.
  • Legal & safety — to comply with law, enforce our Terms, or protect rights and safety.
  • Business transfers — in a merger, acquisition, or sale of assets, subject to this Policy.

7. International data transfers

We are based in Canada, and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers. By using the Service you understand your information may be processed outside your country of residence.

8. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, tax, accounting, and dispute-resolution obligations. You may request deletion as described below; some records (e.g., billing) may be retained where the law requires.

9. Security

We use technical and organizational measures to protect your information, including encryption in transit, encryption of sensitive secrets at rest, row-level access controls, and restricted administrative access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live (including under Canada's PIPEDA, the EU/UK GDPR, and the California CCPA/CPRA), you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, email support@ocidm.io. We will not discriminate against you for exercising them. You may also lodge a complaint with your local data-protection authority.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, where appropriate, notify you.

13. Contact us

OC Interactive Digital Agency Corp. — support@ocidm.io. See also our Terms & Conditions.