Privacy Policy
Effective Date: September 22, 2025
Last Updated: September 22, 2025
1. Introduction
OTTO AI, INC (“OTTO AI,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy (“Policy”) explains how we collect, use, share, and protect information in connection with our websites, applications, and services (collectively, the “Services”).
This Policy applies to all users of the Services. It does not apply to third-party websites or services that we do not control. By using the Services, you agree to this Policy.
2. Information We Collect
We collect the following categories of information:
Identifiers: Name, email, phone number, login credentials.
Commercial Information: Purchases, subscriptions, and support history.
Internet/Usage Data: IP address, browser type, device information, referring/exit pages, and usage activity.
Voice and Audio Data: When you use our voice AI products, we may process audio inputs, transcripts, and metadata. Unless explicitly stated, we do not create or sell biometric identifiers (such as “voiceprints”).
User Content: Messages, forms, or content you submit to us.
Inferences: Limited insights derived to improve service functionality.
We collect information directly from you, automatically, and from service providers or public sources.
3. How We Use Information
We use personal information to:
Provide, maintain, and improve the Services.
Process transactions and manage accounts.
Respond to support requests.
Send updates, alerts, and promotional materials (with opt-out options).
Protect against fraud and security threats.
Comply with legal obligations.
Voice and Audio Data
We process voice and audio data to provide and improve the Services. We do not sell or share biometric identifiers.
AI Training
We may use de-identified or aggregated data to improve our AI models. If we use identifiable user data for training beyond providing the Services, we will seek consent or provide an opt-out.
SMS/MMS Communications
If you provide your phone number, we may send you transactional or promotional text messages using Twilio, Inc. as our messaging provider. Message frequency may vary. Message and data rates may apply. You ca n opt out by replying STOP or request help by replying HELP.
4. Sharing Information
We do not sell your personal information. We may share it:
With service providers that help us operate the Services, including:
Stripe, Inc. for secure payment processing.
Twilio, Inc. for SMS/MMS messaging and phone communications.
Hosting, analytics, and cloud infrastructure providers.
In business transfers (mergers, acquisitions, sales of assets).
For legal/safety purposes (compliance, fraud prevention, protecting rights).
With your consent or at your direction.
If we engage in targeted advertising, you will have the right to opt out, including via Global Privacy Control (GPC) signals.
5. Cookies and Tracking
We use cookies and similar technologies to:
Operate and secure the Services.
Analyze traffic and usage.
Improve features.
Personalize marketing (if enabled).
You can manage cookies through your browser. We do not respond to “Do Not Track” but honor GPC opt-out signals.
7. Data Retention
We keep information only as long as needed for the purposes above, or as required by law. When no longer needed, we delete or de-identify it.
CategoryTypical RetentionAccount infoUntil account is closed + 2 yearsPayment records7 years (for tax/audit)Marketing dataUntil you unsubscribeVoice/audio dataAs needed to provide Services, then deleted or de-identified
8. Security
We use administrative, technical, and physical safeguards, including encryption in transit, access controls, logging, and employee training. No system is fully secure; use of the Services is at your own risk.
9. Your Privacy Rights
Depending on your location, you may have rights to:
Access/Know the personal information we hold.
Delete your personal information.
Correct inaccuracies.
Opt Out of sale, sharing, or targeted advertising.
Portability of your data.
Limit use of sensitive personal information (including voice data).
Appeal a request denial (Virginia residents).
Non-discrimination for exercising your rights.
To exercise rights: Email Michelle@gerstergroup.com or call 602-483-4007. We may verify your identity. We will respond within 45 days (up to 90 days with notice).
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
Right to Know/Access: Request details about the categories and specific pieces of personal information we collect, use, disclose, and share.
Right to Delete: Request deletion of personal information, subject to legal exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not sell personal information. If we engage in targeted advertising or data sharing, you may opt out at any time, including via the Global Privacy Control (GPC) signal.
Right to Limit Use of Sensitive Information: Request that we limit use of sensitive personal information (such as voice/audio data) to only those purposes necessary to provide the Services.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
You may exercise these rights by emailing Michelle@gerstergroup.com or calling 602-483-4007.
Virginia Privacy Rights (VCDPA)
If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act (VCDPA):
Right to Access: Confirm whether we process your personal data and access such data.
Right to Correct: Request correction of inaccuracies in your personal data.
Right to Delete: Request deletion of your personal data.
Right to Portability: Obtain a copy of your data in a portable format.
Right to Opt-Out: Opt out of targeted advertising, the sale of personal data, or profiling with legal effects.
Right to Appeal: If we deny your request, you may appeal by contacting us using the details above. We will respond within 60 days. If your appeal is denied, you may contact the Virginia Attorney General.
Right to Non-Discrimination: We will not deny services or charge different prices because you exercise your rights.
Nevada Privacy Rights
Nevada residents may opt out of the sale of their personal information. We do not sell personal information as defined under Nevada law. If that changes, we will update this Policy and provide opt-out instructions.
Colorado, Connecticut, and Utah Privacy Rights
Residents of Colorado, Connecticut, and Utah also have rights similar to those described above, including rights to access, delete, correct, and opt out of targeted advertising. You may exercise these rights using the same methods provided in this Policy.
9. Children’s Privacy
We do not knowingly collect personal information from children under 13. If we do, we will delete it. If Services are directed to minors, parental consent is required.
10. International Users
If you are outside the United States, your information may be transferred to the U.S. or other countries. Where required, we use safeguards such as standard contractual clauses.
11. Third-Party Links
The Services may link to third-party websites. Their practices are governed by their privacy policies.
12. Changes to this Policy
We may update this Policy periodically. For material changes, we will provide notice (e.g., email or site notice). Continued use after updates indicates acceptance.
13. Contact Us
OTTO AI, INC
4539 N 22ND ST # 5349
PHOENIX, AZ 85016
Email: Michelle@gerstergroup.com
Phone: 602-483-4007