Privacy Policy

Last Updated: September 2026

Otavite ("we," "us," or "our") operates otavite.info, a software-as-a-service platform available at otavite.info (the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you visit or use the Service, and it describes the rights and choices available to you. This Privacy Policy applies to information collected through the Service, our websites, our applications, and our communications with you.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you should discontinue use of the Service. This Privacy Policy is incorporated by reference into, and is subject to, our Terms and Conditions and our Cookie Policy.

Where Otavite processes personal information on behalf of a business customer under a written agreement, we act as a "service provider" or "processor" and that customer's privacy notice governs the underlying processing. This Privacy Policy does not apply to third-party websites, applications, or services that we do not control, even if they are linked from the Service.

1. Information We Collect

We collect information that you provide directly to us, information that is generated automatically as you use the Service, and information that we receive from third parties. The categories and specific pieces of information we collect depend on how you interact with the Service and the features you enable.

Information You Provide Directly

  • Account and profile data, such as your name, business email address, employer or organization name, job title, username, password, and account preferences.
  • Billing and payment data, such as billing address, tax identification information, and payment card or bank account details processed by our third-party payment processors. We do not store complete payment card numbers on our own systems.
  • Customer content, such as files, datasets, records, messages, configurations, and other materials that you or your organization upload to or create within the Service.
  • Communications data, such as support tickets, chat transcripts, survey responses, feedback, and records of correspondence with us.

Information We Collect Automatically

  • Device and connection data, including IP address, device identifiers, browser type and version, operating system, language settings, and referring and exit URLs.
  • Usage data, including features accessed, pages and screens viewed, clickstream activity, session duration, timestamps, and error and diagnostic logs.
  • Approximate location data derived from IP address, which we use for security, licensing, and analytics purposes.

Information We Receive from Third Parties

We may receive information from identity and authentication providers, business intelligence and enrichment services, marketing and advertising partners, payment processors, and enterprise customers who provision accounts for their personnel. We combine this information with data we already hold, consistent with this Privacy Policy.

Sensitive and Regulated Information

We do not intentionally collect government-issued identification numbers, precise geolocation, racial or ethnic origin, religious beliefs, health information, or biometric information, and we ask that you do not submit such information to the Service. Where the Service is used in a manner subject to the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA), or other sector-specific regimes, the handling of that information is governed by the applicable business associate agreement, written contract, or separate notice.

2. How We Use Your Information

We use the information we collect to provide, operate, maintain, and improve the Service; to authenticate users and provision accounts; to process transactions and issue invoices; to respond to inquiries and provide customer support; to send administrative, technical, and security notices; and to comply with our legal and contractual obligations.

We also use information for our legitimate business purposes, including analyzing usage trends, diagnosing technical problems, developing new features, measuring the effectiveness of our communications, preventing fraud and abuse, enforcing our agreements, and protecting the rights, property, and safety of Otavite, our customers, and the public.

Where permitted by applicable law, we use information to send marketing communications about products, services, events, and offers that may be of interest to you. You may opt out of marketing communications at any time as described in Section 5. We do not use customer content uploaded to the Service for advertising purposes, and we do not use it to train generalized machine-learning models except where expressly authorized in writing by the customer.

We may aggregate or de-identify information so that it can no longer reasonably be linked to an identifiable individual, and we may use and disclose such aggregated or de-identified data for any lawful business purpose. We maintain technical and contractual controls designed to prevent the re-identification of de-identified data.

3. Information Sharing

We disclose information to third parties only as described in this Privacy Policy, as directed by you, or as required by law. The categories of recipients are set out below.

Service Providers and Processors

We share information with vendors that perform services on our behalf, including cloud hosting and infrastructure providers, payment processors, analytics providers, email and communication platforms, customer support tools, security and fraud-prevention services, and professional advisors. These providers are contractually restricted from using personal information for any purpose other than performing services for us and are required to provide a comparable level of privacy protection.

Affiliates and Corporate Transactions

We may share information with our subsidiaries and affiliates for the purposes described in this Privacy Policy. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of the transaction, subject to the commitments in this Privacy Policy.

Legal, Safety, and Compliance Disclosures

We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements; to investigate or prevent fraud, security incidents, or illegal activity; or to protect against harm to the rights, property, or safety of any person.

Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration. Certain analytics and advertising activities may constitute a "sale" or "sharing" under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.) or a "sale" under other state comprehensive privacy laws. Where that is the case, you have the right to opt out, and we honor opt-out preference signals as described in Section 4. We do not sell or share the personal information of consumers we know to be under 16 years of age without affirmative authorization.

4. Cookies and Tracking Technologies

We and our third-party partners use cookies, pixel tags, web beacons, local storage, software development kits, and similar technologies to operate the Service, remember your preferences, authenticate sessions, measure performance, and analyze how the Service is used. A cookie is a small text file placed on your device that allows us to recognize your browser on subsequent visits.

Cookies used on the Service fall into the following categories: strictly necessary cookies, which are required for the Service to function and cannot be disabled through our preference tools; functional cookies, which remember your settings and personalization choices; analytics cookies, which help us understand usage patterns; and advertising cookies, which may be used to deliver relevant content and measure campaign performance.

You may control cookies through your browser settings and through any cookie preference mechanism we make available. Disabling certain cookies may affect the functionality of the Service. You may also use the Global Privacy Control (GPC) browser signal to exercise your opt-out rights under Cal. Civ. Code §§ 1798.120 and 1798.135; we treat qualifying GPC signals as a valid request to opt out of the sale and sharing of personal information and, where applicable, as a request to limit the use of sensitive personal information. We also honor applicable industry opt-out mechanisms, including the Digital Advertising Alliance's AdChoices program.

Note that the Electronic Communications Privacy Act, 18 U.S.C. § 2511, state wiretapping and invasion-of-privacy statutes (including the California Invasion of Privacy Act, Cal. Penal Code § 631), and related decisional law may impose additional constraints on the interception, recording, and replay of communications. We configure any session-replay, chat, or recording technology we deploy to avoid the capture of sensitive fields, and we require our vendors to maintain equivalent safeguards. Please review our Cookie Policy for a complete list of cookies and tracking technologies used on the Service.

5. Your Rights and Choices

Depending on your state of residence, you may have some or all of the following rights: the right to know or confirm whether we process your personal information and to access it; the right to obtain a copy of the specific pieces of personal information we hold about you; the right to correct inaccurate personal information; the right to delete personal information we collected from you; the right to opt out of the sale or sharing of personal information, targeted advertising, or profiling in furtherance of decisions with legal or similarly significant effects; the right to limit the use and disclosure of sensitive personal information; and the right not to be discriminated against for exercising your rights.

California Consumers

California residents have rights under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), including the rights described above and the right to know the categories of personal information collected, the sources of that information, the business or commercial purposes for collection, and the categories of third parties to whom it is disclosed. You may submit a request by contacting us using the details in Section 10 or by using any request mechanism made available in the Service.

Consumers in Other States

Residents of Virginia (Va. Code § 59.1-575 et seq.), Colorado (C.R.S. § 6-1-1300 et seq.), Connecticut (Conn. Gen. Stat. § 42-515 et seq.), Utah (Utah Code § 13-11-101 et seq.), Texas, Oregon, Montana, Florida, Tennessee, and other states with comprehensive privacy legislation may exercise comparable rights, including rights to access, correct, delete, obtain a portable copy of their data, and opt out of targeted advertising, sale, or profiling. Where a state law provides a right to appeal our decision on a request, we will provide instructions for submitting an appeal in our response.

How to Exercise Your Rights

To exercise any right described in this section, contact us at [email protected] or +13016622683. We will verify your identity using information already associated with your account or by requesting additional information consistent with the sensitivity of the request. You may designate an authorized agent to act on your behalf; we may require proof of written authorization and may verify your identity directly. We will respond within the timeframe required by applicable law, generally within 45 days of receipt of a verifiable request, and we will extend that period only where permitted and with notice.

Marketing and Communications Choices

You may opt out of promotional emails by using the unsubscribe link in any such email or by contacting us directly. Even after opting out, we may continue to send transactional, administrative, and security-related messages that are necessary for the operation of the Service.

6. Data Security

We maintain a program of administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, role-based access controls, network segmentation, logging and monitoring, secure software development practices, vendor due diligence, and employee training. We review and update our safeguards periodically in light of evolving risks and industry practice.

No method of transmission over the internet, and no method of electronic storage, is completely secure. Accordingly, while we take the protection of your information seriously, we cannot and do not guarantee the absolute security of any information. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access to your account.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, Otavite SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, INTERCEPTION OF, OR DISCLOSURE OF INFORMATION ARISING FROM CIRCUMSTANCES BEYOND OUR REASONABLE CONTROL, INCLUDING ACTS OF THIRD PARTIES, CYBERATTACKS, OR YOUR FAILURE TO SAFEGUARD YOUR CREDENTIALS. NOTHING IN THIS PRIVACY POLICY LIMITS ANY LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW, AND ANY LIMITATION HEREIN IS SUBJECT TO THE LIMITATIONS OF LIABILITY SET FORTH IN OUR Terms and Conditions.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal and contractual obligations, to resolve disputes, and to enforce our agreements. Retention periods vary based on the nature of the information and the context in which it was collected. When information is no longer needed, we delete it or de-identify it in accordance with our retention schedule and applicable law.

7. International Data Transfers

Otavite is based in the United States, and the Service is hosted on infrastructure located primarily in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States and possibly in other countries where we or our service providers operate.

Data protection laws in the United States may differ from those in your jurisdiction and may not offer the same level of protection. Where we transfer personal information from jurisdictions with transfer restrictions, we implement appropriate safeguards, which may include standard contractual clauses, supplementary technical and organizational measures, and contractual commitments with our service providers.

By using the Service, you consent to the transfer and processing of your information in the United States and other jurisdictions as described in this Privacy Policy, to the extent such consent is required under applicable law. If you have questions about the safeguards applied to international transfers, please contact us using the details in Section 10.

8. Children's Privacy

The Service is designed for business and professional use and is not directed to children. We do not knowingly collect personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312). We do not knowingly collect personal information from minors under the age of 16 for the purposes of selling or sharing that information without the affirmative authorization required by applicable law.

If you are a parent or guardian and believe that a child under 13 has provided personal information to us, please contact us at [email protected]. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will take reasonable steps to delete that information promptly and to terminate the associated account.

Certain enterprise customers may configure the Service for use by students or minors in educational or institutional settings. In such cases, the customer is responsible for obtaining any required consents and for providing any required notices, and we handle the information in accordance with our agreement with that customer and applicable law.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or industry standards. When we make material changes, we will provide notice as required by applicable law, which may include posting a prominent notice on the Service, sending an email to the address associated with your account, or obtaining your affirmative consent where required.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the revisions to the extent permitted by applicable law.

We encourage you to review this Privacy Policy periodically and to retain a copy for your records. If you do not agree with any revision, you should stop using the Service and, where applicable, request deletion of your account and personal information.

10. Contact Information

If you have questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of the rights described in Section 5, please contact us using the details below. We are committed to resolving privacy concerns promptly and in accordance with applicable law.

  • Company: Otavite
  • Email: [email protected]
  • Phone: +13016622683
  • Mailing Address: 1 Bush Street, San Francisco, CA 94104, United States

Where you have granted us access to personal information as an authorized representative or end user of an enterprise customer, please direct your initial request to that customer, as we may be required to route your request through them in our capacity as a service provider.

If we are unable to resolve a privacy concern to your satisfaction, you may have the right to lodge a complaint with your state attorney general or another supervisory authority with jurisdiction over the matter. We ask that you contact us first so that we have an opportunity to address your concern directly.