Privacy Policy

Last Updated: May 1, 2026

1. INTRODUCTION
‍Oceanito, LLC (“Oceanito,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you engage with our services, communicate with us, or visit our website at www.oceanito.com.
We recognize and respect the importance of your privacy and are dedicated to handling your personal information with transparency, care, and in compliance with applicable data protection laws worldwide, including but not limited to the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other international privacy regulations.
Oceanito provides custom AI-powered solutions and consulting services primarily for nonprofit organizations and NGOs globally. Our services focus on data integration, analytics, automation, and operational optimization through tailored AI projects. We are not a Software-as-a-Service (SaaS) provider; rather, we develop customized solutions for each client’s specific needs.
This Privacy Policy applies to all information collected through our website, email communications, phone calls, video conferences, in-person meetings, project intake forms, and any other means of interaction between you and Oceanito. By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
We encourage you to read this Privacy Policy carefully to understand our practices regarding your personal information and how we will treat it. If you have any questions or concerns about our privacy practices, please contact us using the details provided in Section 15 of this policy.

2. INFORMATION COLLECTED
Oceanito collects both personal and non-personal information to provide and improve our services. We are committed to collecting only the information necessary to deliver our services effectively and to maintain our relationship with you and your organization.

2.1 Personal Information
‍Personal information refers to any information that identifies or can be used to identify you directly or indirectly. Depending on your interaction with us, we may collect the following categories of personal information:
- Contact Information: Names, email addresses, phone numbers, job titles, and organizational affiliations.
- Organization Details: Name, address, mission, size, and structure of your nonprofit or NGO.
- Payment Information: Billing addresses, bank account details, credit card information (note that payment card details are processed through secure third-party payment processors and are not stored on our systems).
- Project Information: Details about your organization’s needs, challenges, goals, and existing systems that you share with us during consultations and project planning.
- Communication Records: Records of emails, phone calls, video conferences, and other communications between you and Oceanito.
- User Credentials: If applicable, login information for any project-related systems or platforms.
- Feedback and Survey Responses: Information you provide in response to our surveys, feedback requests, or testimonials.

2.2 Non-Personal Information
‍Non-personal information is information that does not directly identify you but provides us with usage data and analytics. This may include:
- Device Information: Type of device, operating system, browser type and version, and other technical information about the devices you use to access our website.
- Usage Data: Information about how you interact with our website, including pages visited, time spent on pages, navigation paths, and features used.
- IP Addresses: Your Internet Protocol address and approximate location derived from this information.
- Analytics Data: Aggregated information about website traffic, usage patterns, and performance metrics.
- Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar technologies (see Section 7 for more details).

2.3 Special Categories of Data
‍In general, we do not collect or process special categories of personal data (also known as sensitive personal data) such as information about your race, ethnicity, religious beliefs, political opinions, health, sexual orientation, or biometric data. However, given our work with diverse nonprofit organizations, if such information is voluntarily provided by you or is necessary for a specific project (for example, if your organization focuses on health services or advocacy for specific communities), we will only process this information with your explicit consent and in accordance with applicable laws.

3. HOW INFORMATION IS COLLECTED
Oceanito collects information through various channels and methods as described below:

3.1 Information You Provide Directly
‍We collect information that you voluntarily provide to us when:
- Completing Web Forms: When you fill out contact forms, consultation requests, or newsletter sign-up forms on our website.
- Project Consultations: During initial consultations, needs assessments, and project planning sessions, whether conducted in person, via video conference, or through other communication channels.
- Project Onboarding: When you provide information necessary for us to begin work on your custom AI solution, including organizational details, existing systems information, and project requirements.
- Communications: Through email exchanges, phone conversations, video conferences, and other direct communications with our team.
- Contracts and Agreements: When you enter into service agreements or contracts with us.
- Feedback and Testimonials: When you provide feedback about our services or agree to share your experience as a testimonial.
- Events and Webinars: When you register for or participate in events, webinars, or workshops hosted by Oceanito.

3.2 Information Collected Automatically
‍When you visit our website, certain information may be collected automatically through:
- Cookies and Similar Technologies: Small data files stored on your device that help us improve our website and your experience, remember your preferences, and provide personalized content. For more information, see Section 7 of this Privacy Policy.
- Web Analytics Tools: We use industry-standard analytics tools to collect information about how you interact with our website, including pages visited, time spent on pages, and actions taken.
- Server Logs: Our web servers automatically log information about your visit, such as your IP address, browser type, referring/exit pages, and date/time stamps.
- Device Information: Information about the device you use to access our website, including device type, operating system, and browser information.

3.3 Information from Third Parties
‍In some cases, we may receive information about you from third parties, including:
- Service Providers: Information shared by our service providers who help us deliver our services.
- Business Partners: If you are referred to us by a partner organization, they may share your contact information with your consent.
- Publicly Available Sources: Information from publicly available sources, such as your organization’s website, public social media profiles, or public directories of nonprofit organizations.
We collect and process this information only as necessary to provide our services, improve our website, and communicate with you effectively.

4. PURPOSE OF DATA COLLECTION
Oceanito collects and processes your information for specific, legitimate purposes related to our business operations and service delivery. We are committed to using your information responsibly and only for purposes that are compatible with the reason it was collected. The following outlines how we use the information we collect:

4.1 Service Delivery and Project Management
- To understand your organization’s needs and develop customized AI solutions that address your specific challenges
- To establish and maintain your client account and manage our relationship with you
- To communicate with you about project progress, milestones, and deliverables
- To provide technical support, troubleshooting, and maintenance for solutions we’ve developed
- To facilitate collaboration between your team and ours during project implementation
- To document project requirements, specifications, and outcomes

4.2 Communication
- To respond to your inquiries, requests for information, or consultation requests
- To provide you with important notices and updates about our services, policies, or terms
- To send project-related communications, including status updates, questions, and coordination of meetings
- To maintain records of our communications for continuity of service and relationship management

4.3 Service Improvement
- To analyze and improve our website functionality, user experience, and service offerings
- To identify trends, usage patterns, and areas for innovation or enhancement
- To develop new features, services, or methodologies that better serve the nonprofit and NGO community
- To measure the effectiveness of our communications and website

4.4 Marketing and Outreach (With Consent)
- To send newsletters, educational content, and resources relevant to nonprofits and NGOs (only with your explicit consent)
- To invite you to events, webinars, or workshops that may be of interest to your organization
- To share case studies or success stories (always with prior approval from the featured organizations)
- To conduct surveys and gather feedback to improve our services

4.5 Legal and Compliance Purposes
- To comply with applicable laws, regulations, and legal processes
- To enforce our terms of service, contracts, and other legal rights
- To detect, investigate, and prevent fraudulent transactions or other illegal activities
- To protect the rights, property, or safety of Oceanito, our clients, or others

4.6 Business Operations- To process payments and maintain financial records
- To manage our business operations, including quality assurance and risk management
- To maintain security of our systems, detect and prevent security incidents
- For internal administrative purposes, record-keeping, and reporting
We will not use your information for purposes that are incompatible with those described above without providing you with notice and, where required by law, obtaining your consent.

5. LEGAL BASIS FOR PROCESSING
For users and clients in the European Economic Area (EEA), United Kingdom, and other jurisdictions where applicable, we rely on the following legal bases to process your personal information in accordance with the General Data Protection Regulation (GDPR) and similar data protection laws:

5.1 Consent
‍We process certain personal information based on your explicit consent, such as:
- When you opt-in to receive our newsletter or marketing communications
- When you agree to participate in surveys or provide testimonials
- When you explicitly agree to the use of certain cookies on our website
- When you voluntarily provide sensitive information relevant to a specific project
You have the right to withdraw your consent at any time by contacting us using the details provided in Section 15 or by using the unsubscribe mechanism in our communications.

5.2 Contractual Necessity
‍We process personal information as necessary to fulfill our contractual obligations to you or to take steps at your request prior to entering into a contract, including:
- When you request a consultation or information about our services
- When we prepare proposals or quotes for potential projects
- When we establish and perform under service agreements
- When we deliver the custom AI solutions you have engaged us to provide
- When we provide support, maintenance, or updates related to our services

5.3 Legal Obligations
‍We process personal information as necessary to comply with our legal obligations, such as:
- Maintaining business and financial records for tax purposes
- Responding to legal requests from government authorities
- Complying with applicable security and privacy laws
- Fulfilling mandatory reporting requirements

5.4 Legitimate Interests
‍We process personal information based on our legitimate interests, provided these interests are not overridden by your rights and freedoms. These legitimate interests include:
- Improving and personalizing our services
- Ensuring the security and proper functioning of our website and systems
- Managing our client relationships and business operations
- Developing new services and features that benefit our nonprofit and NGO clients
- Analyzing the use of our services to enhance user experience
- Protecting our legal rights and preventing fraud
We carefully consider the potential impact on your rights before processing personal information for our legitimate interests. You have the right to object to this processing as described in Section 8 of this Privacy Policy.

6. DATA SHARING AND DISCLOSURE‍
Oceanito is committed to protecting your privacy and maintaining the confidentiality of your personal information. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:

6.1 Service Providers
‍We may share your personal information with trusted third-party service providers who perform services on our behalf to help us deliver and improve our services. These service providers are contractually bound to use your information only for the purposes of providing the services we have engaged them to perform and are required to maintain appropriate security measures to protect your information. Examples of service providers include:
- Cloud hosting and storage providers
- Email and communication service providers
- Payment processorsAnalytics providers
- Project management and collaboration tools
- Customer relationship management systems

6.2 Business Partners
‍With your consent, we may share information with business partners with whom we collaborate to deliver specific services or projects. For example, if a project requires specialized expertise beyond our core capabilities, we may engage trusted partners and share necessary project information to ensure seamless service delivery.

6.3 Legal Requirements
‍We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:
- Enforce our terms of service or other agreements
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing in connection with our services
- Protect the personal safety of users of our services or the public
- Protect against legal liability

6.4 Business Transfers
‍If Oceanito is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

6.5 With Your Consent
‍We may share your personal information with third parties when you have provided your explicit consent to do so. For example, if you agree to be featured in a case study or testimonial, we may share your organization’s name and the results achieved through our collaboration.

6.6 International Data Transfers
‍Oceanito is based in the United States but operates globally. Your personal information may be transferred to, stored, and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.
For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules for transfers to data controllers or processors
- Derogations for specific situations, such as your explicit consent or contractual necessity
By providing your personal information to us, you consent to the transfer, storage, and processing of your information in accordance with this Privacy Policy.


7. COOKIES AND TRACKING TECHNOLOGIES
7.1 What Are Cookies
‍Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the website owners. Cookies enhance your browsing experience by allowing the website to remember your preferences and understand how you interact with the site.

7.2 How We Use Cookies
‍Oceanito uses cookies and similar tracking technologies (such as web beacons, pixels, and tags) on our website for the following purposes:
- Essential Cookies
‍These cookies are necessary for the website to function properly and cannot be switched off in our systems. They are usually only set in response to actions you take that constitute a request for services, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block these cookies, but some parts of the site may not function properly.
- Analytics Cookies
‍These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website. They help us understand which pages are the most and least popular and see how visitors navigate around the site. All information these cookies collect is aggregated and anonymous. If you do not allow these cookies, we will not know when you have visited our site.
- Preference Cookies
‍These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.

7.3 Third-Party Cookies
‍Some cookies may be placed by third-party services that appear on our pages. We use third-party analytics services, such as Google Analytics, to help us understand how visitors use our website. These service providers may use cookies and similar technologies to collect information about your use of our website and other websites. This information is used to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage.

7.4 Cookie Management
‍Most web browsers allow you to control cookies through their settings preferences. You can typically find these settings in the “options” or “preferences” menu of your browser. You can also use the “Help” feature in your browser for more information.
Additionally, you may opt-out of certain third-party cookies and tracking technologies through these mechanisms:
- For Google Analytics, you can opt-out by downloading and installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout
- You can opt-out of interest-based advertising through the Network Advertising Initiative (NAI) at http://www.networkadvertising.org/choices/ or the Digital Advertising Alliance (DAA) at http://www.aboutads.info/choices/

7.5 Do Not Track Signals
‍Some browsers have a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. Due to the lack of a common understanding of how to interpret these signals, our website does not currently respond to “Do Not Track” signals. However, you can manage your privacy preferences through the cookie management options described above.

8. USER RIGHTS
Oceanito respects and is committed to facilitating your rights regarding your personal information. Depending on your location, you may have various rights under applicable data protection laws, including those outlined below.

8.1 Rights for All Users
Regardless of your location, you have the right to:
- Access your personal information: You can request a copy of the personal information we hold about you.
- Correct inaccurate information: If you believe that any information we hold about you is incorrect or incomplete, you can request that we correct it.
- Opt-out of marketing communications: You can unsubscribe from our marketing communications at any time by clicking the “unsubscribe” link in any email or by contacting us directly.

8.2 Additional Rights for EEA, UK, and California Residents
If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, CCPA, or CPRA, including:
- Right to deletion: You can request that we delete your personal information in certain circumstances.
- Right to restrict processing: You can request that we restrict the processing of your personal information in certain circumstances.
- Right to data portability: You can request that we provide you or a third party with your personal information in a structured, commonly used, machine-readable format.
- Right to object: You can object to our processing of your personal information based on our legitimate interests.
- Right to withdraw consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time.
- Right against automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

8.3 How to Exercise Your Rights
‍To exercise any of these rights, please contact us using the information provided in Section 15 of this Privacy Policy. To help protect your privacy and maintain security, we may take steps to verify your identity before granting access to your information or complying with your request.We will respond to your request within the timeframe required by applicable law (typically within 30 days for GDPR requests and 45 days for CCPA/CPRA requests). In some cases, we may need to extend our response time, in which case we will notify you.

8.4 Limitations
‍In some circumstances, we may not be able to fully comply with your request, such as if it would impact the privacy rights of others, prejudice the execution or enforcement of the law, interfere with pending or future litigation, or infringe upon a company’s intellectual property rights. If we are unable to comply fully with your request, we will provide you with the reasons.

8.5 Complaints
‍If you are not satisfied with our response to your request or have concerns about how we process your personal information, you have the right to lodge a complaint with a supervisory authority. For EEA and UK residents, this would be the data protection authority in your country of residence. For California residents, this would be the California Attorney General’s office.

9. DATA SECURITY MEASURES
Oceanito takes the security of your personal information seriously and employs appropriate administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

9.1 Administrative Safeguards
- Security Policies and Procedures: We maintain comprehensive information security policies and procedures that are regularly reviewed and updated.
- Staff Training: Our team members receive regular training on privacy and security best practices and are bound by confidentiality obligations.
- Access Controls: We implement strict access controls that limit access to personal information to authorized personnel on a need-to-know basis.
- Risk Assessments: We conduct periodic risk assessments and security audits to identify and address potential vulnerabilities.
- Incident Response Plan: We maintain an incident response plan to promptly address any suspected or actual data security breaches.

9.2 Technical Safeguards
- Encryption: We use industry-standard encryption technologies to protect data in transit and at rest, including Secure Socket Layer (SSL) technology for data transmitted through our website.
Firewalls and Intrusion Detection: Our systems are protected by firewalls and intrusion detection systems to prevent unauthorized access.
Authentication Controls: We implement strong authentication mechanisms, including multi-factor authentication where appropriate, to verify the identity of users accessing our systems.
Regular Updates and Patches: We regularly update our systems and software to address security vulnerabilities.
Monitoring: We continuously monitor our systems for suspicious activities and potential security threats.

9.3 Physical Safeguards
Secure Facilities: Our physical infrastructure is housed in secure facilities with controlled access.
Environmental Controls: We implement environmental safeguards to protect against physical threats such as fire, flood, and power outages.
Secure Disposal: We ensure secure disposal of physical documents and electronic storage devices when they are no longer needed.

9.4 Third-Party Security
‍When we engage third-party service providers, we conduct due diligence to ensure they maintain appropriate security measures. We require these providers to agree to contractual terms that include obligations to implement security measures that are at least as protective as those we maintain.

9.5 Limitations
‍While we take reasonable steps to protect your personal information, no security system is impenetrable, and we cannot guarantee the absolute security of your information. Factors beyond our control, such as the security of your internet connection or device, may impact the security of your information.

9.6 Your Role in Security
‍You also play a role in protecting your information. We encourage you to:
- Use strong, unique passwords for any accounts related to our servicesKeep your login credentials confidential
- Be vigilant about phishing attempts or suspicious communications
- Ensure your devices have up-to-date security software
- Contact us immediately if you suspect any unauthorized access to your account or misuse of your information

10. DATA RETENTION
Oceanito retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, or to fulfill our legitimate business interests.

10.1 Retention Periods
‍The length of time we retain different types of personal information varies depending on the purpose of processing, the nature of the information, and applicable legal requirements:
- Client Project Information: We retain information related to client projects for the duration of our service relationship plus a reasonable period thereafter (typically 7 years) to address any follow-up questions, provide ongoing support, and comply with legal and contractual obligations.
- Business Contact Information: We retain business contact information for as long as we have an ongoing relationship with you or your organization, or as needed to provide you with information or services you have requested.
- Website Usage Data: We retain website usage data and analytics for a limited period (typically 26 months) to understand trends and improve our website.
- Marketing Communications: If you have consented to receive marketing communications, we retain your contact information until you opt-out or request deletion.
- Financial Records: We retain financial records, including payment information, for the period required by applicable tax and financial regulations (typically 7 years).

10.2 Criteria for Determining Retention
‍In determining appropriate retention periods, we consider:
- The amount, nature, and sensitivity of the personal information
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the information and whether we can achieve those purposes through other means
- Applicable legal, regulatory, tax, accounting, or other requirements
- Our ongoing relationship with you or your organization

10.3 Data Minimization
‍We regularly review our data holdings to ensure we only retain personal information that is necessary for the purposes for which it was collected. We implement data minimization practices to limit the collection and retention of personal information to what is directly relevant and necessary.

10.4 Secure Deletion
‍When personal information is no longer needed, we securely delete or anonymize it. Our deletion processes are designed to ensure that data cannot be reconstructed or read after deletion. Physical documents containing personal information are securely shredded, and electronic data is deleted using appropriate technical methods.

10.5 Archiving
‍In some cases, instead of deletion, we may archive data so that it can be accessed if needed for legal, tax, or regulatory purposes but is not used for day-to-day business operations. Archived data is subject to appropriate access controls and security measures.

11. THIRD-PARTY LINKS
11.1 External Websites and Services
‍Our website may contain links to third-party websites, plugins, applications, or services that are not owned, operated, or controlled by Oceanito. These links are provided for your convenience and information only. When you click on these links, you may leave our website and be directed to third-party sites.

11.2 No Endorsement or Responsibility
‍The inclusion of any links to third-party websites does not imply endorsement, approval, or control by Oceanito of these websites or their content. We do not monitor, verify, or endorse the content, privacy practices, or policies of third-party websites. We strongly recommend that you review the privacy policy and terms of use of each third-party website you visit.

11.3 No Liability
‍Oceanito is not responsible for the privacy practices, content, accuracy, or security of any linked third-party websites. We cannot guarantee the safety and privacy of any information you provide to these third parties. Any interactions you have with these third parties, their websites, or services are governed by their own terms and privacy policies, not ours.

11.4 Social Media Features
‍Our website may include social media features, such as the Facebook “Like” button or LinkedIn sharing widgets. These features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing them.

12. CHILDREN’S PRIVACY12.1 Age Restrictions
‍Oceanito’s website and services are not directed to or intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18 years of age. Our services are designed for nonprofit organizations and NGOs, and we expect our users to be adults acting in a professional capacity.
‍
12.2 Inadvertent Collection
‍If we learn that we have inadvertently collected personal information from a child under the age of 18, we will take appropriate steps to delete this information as quickly as possible. If you believe that we might have collected information from a child under 18, please contact us immediately using the contact information provided in Section 15 of this Privacy Policy.
‍
12.3 Parental Consent
‍In the rare case where we might need to collect information from a child under 18 (for example, if a nonprofit client’s project specifically involves services for minors), we will only do so with verifiable parental consent and in compliance with applicable laws, such as the Children’s Online Privacy Protection Act (COPPA) in the United States.
‍
12.4 Special Considerations for Youth-Focused Organizations
‍We recognize that many nonprofit organizations and NGOs work with children and youth. If your organization focuses on services for minors and you engage Oceanito for a project that might involve data about minors, we will work with you to ensure appropriate safeguards are in place to protect children’s privacy and comply with all applicable laws.

13. CHANGES TO THE PRIVACY POLICY
13.1 Policy Updates
‍Oceanito reserves the right to modify this Privacy Policy at any time. We may update this Privacy Policy periodically to reflect changes in our practices, services, legal requirements, or other factors. We will post the revised Privacy Policy on our website with an updated “Last Updated” date at the top of the policy.

13.2 Material Changes
‍For material changes to this Privacy Policy that significantly affect your rights or how we use your personal information, we will provide a more prominent notice:
- By displaying a notice on our website before the changes take effect
- By sending an email notification to clients and users who have provided us with their contact information
- By other means as required by applicable law

13.3 Review Recommendation
‍We encourage you to review this Privacy Policy periodically to stay informed about our information practices and your privacy rights. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

13.4 Historical Versions
‍If you would like to access previous versions of this Privacy Policy, please contact us using the information provided in Section 15.

14. INTERNATIONAL USERS
14.1 Global Operations
‍Oceanito is based in the United States but provides services to clients globally. If you are accessing our website or using our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our servers and service providers are located.

14.2 Data Protection Standards
‍The data protection laws in the United States and other countries may not be as comprehensive or provide the same level of protection as those in your country. However, Oceanito is committed to protecting your personal information in accordance with this Privacy Policy and applicable laws, regardless of where that information is stored or accessed.

14.3 European Economic Area (EEA) and United Kingdom
‍If you are located in the EEA or the United Kingdom, we comply with applicable data protection laws when transferring your personal information outside these regions. We implement appropriate safeguards to ensure that your personal information receives an adequate level of protection, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules
- Adequacy decisions, where applicable
- Other legally approved mechanisms

14.4 California Residents
‍If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as detailed in Section 8 of this Privacy Policy. Additionally:
- We do not sell personal information as defined by the CCPA/CPRA
- We do not share personal information for cross-context behavioral advertising
- We process sensitive personal information only for permitted purposes

14.5 Other Jurisdictions
‍If you are located in other jurisdictions with data protection laws (such as Canada, Australia, Brazil, or others), you may have similar rights to access, correct, or delete your personal information. Please refer to Section 8 of this Privacy Policy for information on how to exercise your rights.

14.6 Data Localization
‍Some countries have laws requiring that certain types of data remain within their borders. If you are located in such a country, we will comply with applicable data localization requirements or work with you to find a compliant solution for your specific needs.

15. CONTACT INFORMATION‍
15.1 Privacy Officer
‍Oceanito has designated a Privacy Officer who is responsible for overseeing our privacy program and ensuring compliance with this Privacy Policy and applicable data protection laws. For any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer.

15.2 How to Contact Us
You can contact us regarding privacy matters through the following methods:
Email: privacy@oceanito.com
Postal Address:
Oceanito, LLC
Attn: Privacy Officer
123 Innovation Way, Suite 500
Wilmington, DE 19801
United States

15.3 Response Time
‍We strive to respond to all legitimate inquiries within a reasonable timeframe, typically within 30 days. For more complex requests or inquiries, it may take us longer to respond. In such cases, we will notify you and keep you updated on our progress.
‍
15.4 Complaints
‍If you have a complaint about how we have handled your personal information, please contact us first. We will investigate your complaint and work to resolve any concerns as quickly as possible.If you are located in the European Economic Area or the United Kingdom and believe that we have not adequately resolved your complaint, you have the right to lodge a complaint with your local data protection authority.
‍
15.5 Changes to Contact Information
‍If our contact information changes, we will update this section of the Privacy Policy and, if necessary, notify our clients and users of the change.