Privacy Policy

This policy applies to personal data processed through our website, dashboard, APIs, support channels, and billing workflows.

For questions or requests related to this policy, contact us at support@otakit.app.

• Account data: name, email, tenant and role information.
• Authentication data: one-time passcode events, session and security metadata.
• Billing data: subscription status, plan, invoices, and transaction references processed via Polar.
• Service usage data: app IDs, release/channel activity, API usage, event telemetry, and operational logs.
• Technical data: IP address, device/browser metadata, and diagnostic information for reliability and security.
• Support communications: messages and materials you send to support.

• Provide, maintain, and secure the Services.
• Authenticate users and manage accounts and organizations.
• Process billing, subscriptions, and credit usage.
• Operate update delivery, release workflows, and related analytics.
• Detect, prevent, and investigate abuse, fraud, and security incidents.
• Respond to support requests and communicate service updates.
• Comply with legal obligations and enforce our Terms of Use.

Where GDPR or similar laws apply, our legal bases may include: contract performance, legitimate interests (such as service security and reliability), consent (where required), and legal compliance.

We may share personal data with:

• Service providers that support hosting, storage, email delivery, and operational tooling.
• Polar (polar.sh) and payment partners for subscription and payment processing.
• Professional advisers (legal, accounting, audit) when needed.
• Authorities or counterparties when required by law or to protect rights and security.
• A successor entity in connection with a merger, acquisition, financing, or asset sale.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

Personal data may be processed in countries other than your own. We use appropriate safeguards where required by law for cross-border transfers.

We retain personal data for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business records.

Retention periods vary by data type and purpose. You may request deletion as described below, subject to legal and operational exceptions.

We use technical and organizational safeguards designed to protect personal data, including access controls, encrypted transport, and logging/monitoring practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, object, or port your personal data, and to withdraw consent where processing relies on consent.

California residents may have rights under applicable California privacy laws, including rights to know, delete, and correct personal information.

To exercise rights, email support@otakit.app. We may verify your identity before fulfilling requests.

We may use cookies or similar technologies necessary for authentication, security, session management, and service functionality. Where required by law, we request consent before using non-essential cookies.

The Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13.

We may update this Privacy Policy from time to time. The latest version will be posted at otakit.app/policy with an updated effective date.

Use of the Services is also governed by our Terms of Use.