Last updated: October 19, 2026
This Privacy Policy describes how Oculix LLC ("Oculix," "we," "us," or "our") collects, uses, and discloses information in connection with your use of our websites, APIs, and services (collectively, the "Services").
We collect information you provide directly, such as your name and email address when you sign up for a free tier API key or contact us. We also collect information automatically, including API usage metadata (timestamps, request counts, error rates) needed to enforce quota limits, and standard server logs.
Website analytics. We use Google Analytics 4, a web analytics service provided by Google, on oculix.io and on our product blogs (docpatch.dev, nodecache.dev, propdescai.io and chainledgerai.io) to understand how the sites are used. It records page views, the page you came from, your approximate location (derived from your IP address, which Google Analytics does not store), your device and browser type, and interactions such as clicks on links, using cookies and a randomly generated identifier. When you move between our sites, that identifier may be passed in the web address so one visit is counted once. We do not send your name, email address or any content you submit to the Services to Google Analytics. You can opt out by installing the Google Analytics Opt-out Browser Add-on or by blocking cookies in your browser settings. Google retains event-level analytics data for two months and user-level data (such as cookie identifiers) for up to 14 months. We do not use advertising or retargeting tools on these websites.
Sign-in details. If you sign in with GitHub we receive your GitHub numeric ID, username, and your verified email address (we request only the user:email permission). We use the ID to recognize you when you return. During sign-in we set a short-lived cookie (about 10 minutes) that protects the sign-in from forgery; it is not used for tracking.
Free demo abuse prevention. The no-signup demos on our product pages count requests per visitor to keep them available. We store a shortened one-way hash of your IP address with a counter, not the IP address itself, and these counters expire automatically after about two days (daily counters) or two months (monthly counters).
Documents and content you submit to DocPatch (or our other API products) for processing are used solely to generate the requested output. They are passed through to our AI processing provider (Google Cloud Vertex AI) and the converted result is returned to you — we do not store submitted document content afterward. We do not use customer-submitted content to train any models. Content is held in memory only briefly (up to one hour) so that an identical repeat request can be answered without a second AI call. Separately, Google Cloud may cache prompts and responses on its side for up to 24 hours to speed up repeated requests, and, under Google's Cloud terms, may log prompts for abuse monitoring. Google states that it does not use this data to train its models without permission. This section describes our API products. Our fixed-fee audit and review services work differently and are described in Section 3A.
PropDesc-AI audit log. For each listing request PropDesc-AI records a one-way hash of the input and of the output, the version of the fair-housing rules applied, and the result of each check. It does not record the listing text or your notes. These records are kept for 90 days and then deleted automatically.
NodeCache. NodeCache forwards read-only Ethereum JSON-RPC requests to an upstream node provider and keeps responses in memory for a few seconds. These are queries about public blockchain data.
This section applies only to fixed-fee audit and review services you buy from Oculix LLC under a signed order form. It does not apply to our API products.
What we receive. We give you open, read-only scripts that collect Google Cloud billing, configuration and byte-count metadata. You read the resulting files before you send them. You upload them through a single-use link. We also receive the information needed to run the engagement: contact details, company name, project identifiers, what you tell us on scoping calls, and payment details handled by Stripe.
What we do not accept. Do not send application data, database contents, log message text, personal data about your own customers or staff, secrets, credentials or payment-card data. Our checks redact secret-like values and reject files that contain payment-card numbers. If your use case needs data of those kinds, the service is not the right fit.
How we use it. Only to produce your report, review it ourselves, deliver it, and support you afterward. We do not sell it, use it for advertising, or use identifiable client data for benchmarks or training without your written permission. The analysis and the report text are produced by software rules and templates, and we do not send your files to an AI model. If that changes, we will update this page before it applies to your engagement.
Where it is stored. In a private, isolated Google Cloud project that holds no other Oculix workload, with no public access and no exported service-account keys. Each client has a separate location. Only the founder has access.
How long we keep it. Uploaded files are deleted when your engagement is complete, and in any case no later than 30 days after upload. We keep a record of counts only, not content, and check that the files are gone. Our copy of your report is deleted 30 days after the readout, or earlier if you ask in writing. If you need follow-up work after that, you will need to send the original files again. Account, contract, support and payment records are separate business records kept as described in Section 6.
Delivery. We deliver reports through an expiring link, not as an email attachment.
What we do not do. We do not request access to your environment, change your systems, or guarantee savings. Our reports are recommendations.
Processing agreement. If your data protection law or your procurement team requires a data processing agreement, ask us for one at consulting@oculix.net before you upload.
Incidents. If we discover an incident affecting your files we will tell your designated contact promptly, state only confirmed facts, and send updates until it is resolved.
We use the following third parties to operate the Services:
If you subscribe to a paid plan, payment is processed by Stripe. We do not directly store your full payment card details.
We retain account information for as long as your account is active, plus 90 days after closure, unless a longer period is required by law. Files and reports for audit and review services follow the shorter periods in Section 3A.
Depending on your location, you may have rights to access, correct, delete, or export your personal information. To exercise these rights, contact us at info@oculix.net.
If you are located in the European Economic Area, UK, or California, you may have additional rights under GDPR or the CCPA/CPRA, including the right to request deletion of your data or opt out of the sale of personal information. We do not sell personal information. Contact us at the email above to exercise any of these rights.
The Services are not directed to individuals under the age of 18.
We may update this Privacy Policy from time to time. Material changes will be noted by updating the "Last updated" date above.
Questions about this policy can be sent to info@oculix.net, or by mail to Oculix LLC, 8735 Dunwoody Place, Ste N, Atlanta, GA 30350.