Octopus Deploy Privacy Policy

This policy was last updated on 17th March 2026.

Effective from: 17/03/2026 (View previous policy)

Octopus Deploy respects your privacy. All information you give us is treated with the utmost care and security.

Please take time to read this policy, as it explains the types of data we collect and how we treat your personal information. 

We do not sell, rent, or loan any identifiable information about you or any of our customers to any third party. Only in the circumstances described within this Privacy Policy would we share your information with any third party.

We process personal data in accordance with the UK GDPR (as tailored by the Data Protection Act 2018) and the EU GDPR (Regulation (EU) 2016/679), as applicable to our processing activities.

If you're visiting our websites, using our products and services, working with any of our teams, meeting us at events or applying for a role with us, this privacy policy sets out what data we collect, and how we use it. It also describes your rights regarding our use of your data.

We collect common types of personal information, such as: name, company, postal address, email address, and phone number.

We use this information to:

• Provide, operate, maintain and improve our website, products and services
• Process and complete transactions and orders, and send you related information
• To meet our legal and compliance responsibilities
• Send transactional messages, such as responding to your comments or feedback, providing customer service and support, and sending you technical notices such as alerts or status updates
• Monitor and analyze trends, usage and activities for marketing or advertising purposes
• For other purposes, for which we will obtain your consent
• Compiling aggregate analytics about how you use features of our products, in order to improve them
• Customize the service we provide to you
• Administrate or otherwise carry out our obligations in relation to any agreement you have with us
• Send you our newsletter, where this is requested by you
• Track your engagement with us, including through our website, articles and newsletters
• Create trial and starter licenses
• Understand how you use our products and services
• Improve our products and services
• Process your application if you apply for a job with us

Our Role as a Controller and a Processor

This Privacy Policy does not apply to the personal data we process on behalf of our customers through our services. In those cases, we act as a data processor, and that processing is governed by our Customer Agreement and Data Processing Agreement.

1. Information that you give to us directly

Our Websites, Cloud, and Server products may ask for information about you and the company you work for. This is collected as you register for an account, purchase licenses, register for product trials, or otherwise use or interact with our website. Examples of the information we collect include:

• Contact information, such as your name, email, mailing address, and phone number
• Billing information, such as credit card details and billing addresses
• Profile information, such as a username, profile photo, and job title
• Preferences, such as notification and email marketing preferences

This information is provided by you when you enter it into our website or use one of our products, and so you naturally consent to us collecting it for these purposes.

In some cases, information about you may be entered by someone else, typically a billing or system administrator at your company - for example, when they set up an account for you, or include you as a contact on an invoice. If you are providing information about someone else, you must have the authority to act for them and to consent to the collection and use of their personal information as described in this policy.

When you use our Server products, the information that we collect is limited to:

• Contact information you provide when registering for a product trial
• Statistics on how you use our Server products, such as the number of projects or deployments (learn more)
• Server-specific information such as operating system versions, CPU usage, memory, and disk size information

We also collect content that you create, input, send, submit, or upload when using our websites and support services. Examples of content you might provide include comments on blog posts, support requests, and emails that you send us, or data that you are entering in the course of using the functionality in our Websites or Cloud products (but not Server products). This content includes any personal information or sensitive information that you choose to include.

2. Information that we collect indirectly

We also gather information about you indirectly, through observing how you use our websites or Cloud products. This includes:

• Web server logs, which capture information including your IP address, browser, and operating system version, and URLs requested. This information is typically not personally identifying, though it may incidentally capture personally identifiable information if that information is included as part of the request (for example, in a URL query string).
• Analytics data, which is captured either by third-party analytics partners or by us.

This information is used to improve our website and products. As at the time this policy was last updated, we publish information about subprocessors via our Trust Centre and their respective privacy policies.

We use cookies for a number of reasons that are essential to providing the service: for example, to allow you to sign in, or to detect abuse of our systems, to remember your preferences, or to gather statistics about how our website is used without your personal information. All of the cookies we issue are provided for these reasons.

Your web browser allows you to control whether cookies can be stored by our websites. However, disabling cookies will prevent certain parts of our websites from working correctly. Your web browser’s documentation has more information on controlling cookie behavior. If you want to revoke your consent to us tracking your activity, you can do so by clearing your cookies.

Alternatively, you can view a list of cookies in use on our website, and update your preferences, by interacting with our website's cookie consent controls.

We collect certain usage and performance data through telemetry and analytics tools to help us understand how users interact with our websites and products. This helps us improve the functionality, usability, and reliability of our services:

This data may include:

• Feature usage patterns
• Device and browser type
• Navigation flow (e.g. which sections of the product are accessed)
• System diagnostics and performance data

For more information, please refer to https://octopus.com/docs/security/outbound-requests/telemetry

Where possible, this information is aggregated or pseudonymised and is not used to personally identify individual users. Some of this information may be collected using cookies or third-party analytics tools, which are listed on our Trust Centre.

Some telemetry is collected automatically during product trials to help us improve the experience. If you have specific questions about data collection during the trial periods, please contact us at support@octopus.com

Octopus Deploy does not sell or rent your personal information to marketers or unaffiliated third parties. We may share your personal information with trusted third parties, including:

• Third parties: We may share your personal information with third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock.
• Service providers: We may share your personal information with service providers who help us provide our services. Service providers help us with things like payment processing, website hosting, data analysis, information technology and related infrastructure, customer service, email delivery, and auditing.
• A list of our current subprocessors is maintained on our Trust Centre, where you can also subscribe to receive notifications about changes. 
• Safety, legal, and law enforcement: We use and disclose personal information as we believe necessary: (i) under applicable law, or payment method rules; (ii) to enforce our terms and conditions; (iii) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (iv) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.
• To the public: for content that you have explicitly given us permission to publish, such as on a public forum or as a testimonial. We may also use your company name in order to promote our products.

You have choices regarding our use and disclosure of your personal information.

• You can choose to "Decline" consent for third party cookies and tracking of how you interact with our site
• You can opt-out of receiving promotional emails from us by clicking the 'unsubscribe' link on any promotional email we send you.
• If you have provided a testimonial or we have used your company as an example of a customer using our products, you can require that we stop doing so.
• You can request to see what personal information we have about you, and ask us to delete it. We may not always be able to delete information we have: for example, it may be needed for legal or compliance reasons.

We retain personal data for as long as necessary to provide our services, fulfill the purposes described in this Privacy Policy, and comply with applicable legal, regulatory, or contractual requirements. 

When your relationship with us ends, we will either delete or de-identify your personal data within a reasonable period, unless we are required or permitted to retain it for legal, regulatory, or compliance reasons.

You can also request the deletion of your personal data at any time by contacting us at  support@octopus.com . If we are unable to delete certain data (e.g. due to legal requirements), we will inform you and ensure it is securely stored and not used for any other purpose.

Our services are not directed to individuals under the age of 13, and we request that they not provide personal information through our websites, products or services.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:

• To know what categories and specific pieces of information we have collected about you
• To request deletion of your personal information (subject to exceptions)
• To request correction of inaccurate personal information
• To opt out of the sale or sharing of personal information (if applicable)
• To limit the use of sensitive personal information (if applicable)

You can exercise these rights by contacting us at support@octopus.com . We will respond in accordance with California law and will not discriminate against you for exercising your privacy rights.

We may update our Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make changes, we will update the "Effective from” date at the top of this page.

If the changes are significant, we will provide an update via our Trust Centre, which you can subscribe to here. We will also maintain an archive of all previous versions of this Privacy Policy, which you can review here.

We encourage you to review this page regularly to stay informed about how we protect your information. If you do not agree with the updated policy, you may need to stop using our services.

If you have any questions about this privacy policy, please contact us at privacy@octopus.com. Happy deployments!

• Customer Agreement
• Privacy Policy
• Acceptable Use Policy
• GDPR Policy