Last updated October 2026
This Privacy Policy explains how Cloctopus, LLC, a North Carolina limited liability company (“Cloctopus,” “we,” “us”), collects, uses, shares, and protects information when you use our mobile apps, the web app at app.cloctopus.app, and the website at cloctopus.app (together, the “Service”). By using the Service you agree to the practices described here and to our Terms of Service.
Cloctopus is intended for adults (18+) using it for their business in the United States.
Information you give us:
Information about your clients and other people: You may enter information about your own clients, such as names, emails, addresses, and what you billed them. See section 5.
Information collected automatically:
Information from payment and store providers: if you subscribe or connect a payment account, we receive limited details such as your subscription status, billing period, and customer or account identifiers, and whether an invoice was paid. We do not receive or store full payment card numbers.
What we use location for: only to detect and record your trips and calculate mileage for you. We do not use it for advertising, we do not sell it, and we do not use it to profile you.
When location is used:
What is stored: when a trip ends, your account stores its start and end points (as coordinates and as a street address or place name), the start and end times, and the distance. The detailed GPS points the phone gathers while you drive are kept on your device only to work out the trip and are not uploaded or kept as a route map on our servers. To turn coordinates into street addresses, your phone uses your operating system’s location service (Apple or Google), which receives those coordinates.
Who can see it: your trips are protected by access rules in our database so that other Cloctopus users cannot see them. You can see them in your account. Our team and our infrastructure providers can technically access stored data when needed to run, secure, and support the Service; we do that only when necessary, for example to fix a problem you ask us about, to investigate security or abuse, or to follow the law. Trips can appear in invoices, PDFs, and exports that you choose to create and share.
Your controls: turning Always Track off stops background location collection right away. Turning it off does not delete trips already recorded; they stay in your account until you delete them or delete your account. You can also change location permission in your device settings at any time, and signing out stops tracking on that device. Some mileage features will not work without location permission.
We do not sell your personal information, we do not use it for third-party advertising, and we do not use your business, client, invoice, mileage, or location data to market to you or to your clients.
When you enter information about your own clients, you decide what to put in and why. You are responsible for having the right to use it and for any notices or consents you owe those people. For that information we act as your service provider: we process it only to provide the Service to you, and we don’t use it for our own marketing or sell it.
If one of your clients contacts us about their information, we may refer them to you. We may also tell you about the request so you can respond.
Please don’t enter sensitive information that Cloctopus isn’t designed for, such as full card numbers, government ID numbers, or health data.
We share information with the service providers below only as needed to provide their part of the Service. Each receives only what it needs.
We may also disclose information:
We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not allow our providers to use your information for their own advertising.
We do not use advertising, tracking, or analytics cookies. The web app stores your sign-in session and preferences in your browser so it works, and the mobile app stores similar data on your device. Stripe’s checkout and Connect pages set their own cookies under Stripe’s policies. We do not track you across other websites, and we don’t respond to “Do Not Track” signals because we don’t track.
We keep your information while your account is active and as needed to provide the Service.
When you delete your account in the Account tab, we remove your account and the business, client, time, mileage, invoice, and receipt data in it from our active systems, delete your uploaded logos and receipt photos, and cancel a web (Stripe) subscription. This can’t be undone.
Some information can remain for a limited time after that: in backups and logs until they expire or are overwritten; in diagnostic reports held by our error-reporting provider for its retention period; and in billing, tax, and transaction records kept by Stripe, Apple, and Google as the law or their policies require. We may also keep limited information we are required or permitted to keep to comply with law, resolve disputes, prevent fraud, or enforce our agreements, and only for as long as needed for that purpose.
Apple and Google subscriptions are managed by those companies and are not cancelled by deleting your account; cancel them in your store account.
Data kept on your own device, such as an unsent trip, is cleared when you sign out of the app or delete your account.
Within Cloctopus you can: view and edit your data; export it (PDF and CSV exports of time, mileage, invoices, and receipts); turn Always Track and notifications off; sign out; and delete your account.
Depending on where you live, you may have the right to ask us to: tell you what personal information we hold about you; correct it; delete it; give you a portable copy; or stop certain uses of it. You may also have the right to appeal a decision about your request and to complain to your state’s attorney general or privacy regulator. We do not sell or share personal information for advertising, so there is nothing to opt out of in that respect, and we will not treat you differently for exercising your rights.
To make a request, email help@cloctopus.app with “Privacy request” in the subject line. We may need to confirm it’s really you before we act, and we will respond within the time the law requires. If an authorized agent makes a request for you, we may ask for proof of that authority.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. For example, the Service connects over encrypted (HTTPS) connections, database access rules keep each account’s records separate, and in the mobile apps your sign-in session is stored in encrypted form on your device. No system is perfectly secure, so we can’t guarantee absolute security. Please use a strong, unique password and keep your devices secure.
If we learn of a security incident that affects your personal information, we will investigate and notify you and any regulators as required by law.
Cloctopus is for adults. You must be at least 18 to hold an account. We don’t knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email help@cloctopus.app and we will delete it.
Cloctopus, LLC is based in North Carolina and operates the Service from the United States. The Service is intended for use here. Your information is processed in the United States and may be processed in other countries where our service providers operate. If you use Cloctopus from outside the United States, you understand that your information will be transferred to and handled in the United States, which may have different data-protection laws than your country.
We may update this Policy as Cloctopus and the law change. We’ll post the new version with a new “Last updated” date. If a change materially affects how we use or share your personal information, we’ll give you notice in the app or by email before it takes effect, and where the law requires it, we will ask for your consent.
Cloctopus, LLC, North Carolina. Questions or privacy requests? Email help@cloctopus.app.