The answers that usually hide in the small print

Then a replacement model from DeepSeek steps in — a provider based in China.

Normally Claude Sonnet 5 from Anthropic does the thinking for you (USA, EU standard contractual clauses, non-storage requested). If Anthropic is unreachable, DeepSeek V4 Pro takes over. The fallback deliberately sits with a different provider: if Anthropic is down, a second Anthropic model is no help.

Even then, only the excerpt your order needs is transmitted — never your whole mailbox, never your filing. What matters to us is that you know this before it happens, not afterwards in the small print.

Because Meta forbids automating private accounts — and anyone who does it anyway risks having their number blocked.

Out of the box, passenger mode therefore applies: OCTOVO reads along, drafts a reply and puts it in front of you. You send it, with one click. Nothing goes out without you.

For business accounts there is Meta’s official interface. Over that, OCTOVO may send by itself — that is the only permitted route, and Meta charges per conversation for it.

Reading, searching and the memory — everything that lives on your device stays usable.

Thinking needs the line: the order goes via our server to the language model and comes back the same way. Without a connection it waits, instead of producing an invented answer.

Missed schedules are caught up the next time you start it — with a note saying when they should have run. OCTOVO does not pretend everything was on time.

Because neither can be undone — and because a misunderstanding there gets expensive rather than merely annoying.

In all three autonomy levels, permanent deletion and anything that moves money remain subject to approval. That holds even on the highest level: it makes it faster, not careless.

You can release that lock individually — per order, not wholesale. Someone who says “you may pay this one invoice” rarely means “all invoices”.

Your account, the quota you have used and your payment status. No content.

On our server sit your email address, name, licence, device names and counters. What you write, read or file is not there — not even “briefly, for debugging”. The server has no place for it.

For a fault there is a diagnostic mode. You switch it on yourself, it applies only to your account, it expires on its own after a fixed period, and whatever is recorded is stored encrypted.

You verify the checksum yourself — with a command that is already on every Mac.

On the download page, every package is listed with its checksum. If the same string comes out on your machine, the file is character for character the one we built. If a different one comes out, do not install it.

The package is signed on top of that. What is still missing, we state on the download page just as plainly as what is already there.

They stay where they are: on your device. We cannot take them with us.

Mailbox, files, contacts, appointments, memory and log live in a database on your own disk, encrypted. Cancelling changes nothing about that file — afterwards it sits there exactly as before.

On our side, the account is deleted. What goes and what has to remain for a statutory period — invoices, for instance — is set out in the privacy policy.