Privacy Policy

Scope

This Privacy Policy covers ootto.ai and the Ootto for Content product, reachable at content.ootto.ai and ootto.ai/content - the paid Instagram business operator, its dashboard, and its Claude/MCP connector - not just the marketing website.

Information we collect

We keep data collection to what the product needs to run. Depending on how you use Ootto, we collect:

• Account information - the email address and authentication data you provide to sign up or sign in, including basic profile information from Google if you sign in with Google.
• Billing information - your subscription plan and payment status. Your card details are collected and processed directly by Paddle, our payment processor and merchant of record; we do not receive or store your full card number.
• Instagram connection data - when you connect an Instagram account, we and our service providers receive an OAuth access token and the account data that connection permits: profile info, media, and comments, plus the ability to reply to comments, send direct messages, and publish content on your behalf for the actions you enable.
• Brand and business information - the website, brand voice, audience, niche, products, and any other notes you provide while onboarding or editing your brand profile.
• Content you upload or that Ootto generates - images or footage you upload, and the reels, scripts, captions, and content calendar Ootto produces for your account.
• Leads - when your connected Instagram account receives a comment, we may capture the commenter's handle, a short snippet of their comment, and a link to the post so it can be shown to you as a lead.
• Claude/MCP connector activity - if you use the Ootto MCP connector, we store a connection key tied to your account and log the requests made through it.
• Scheduling information - when you book a demo, the name, email, and time you enter go to our scheduling provider (Google Calendar or Cal.com, depending on where you book) to create the appointment.
• Usage data - privacy-friendly product analytics about how visitors and customers use the site and app (pages viewed, events such as form submissions), which may include IP address, browser type, and referring page.
• Technical data - standard server and error-monitoring logs.

TikTok permissions and why we use each one

When you connect a TikTok account, TikTok shows its own consent screen and you choose to allow Ootto. We ask for these permissions and use each one only for the purpose shown:

• user.info.basic - read your TikTok display name and avatar, to show which account is connected and which account a video will post to.
• user.info.profile - read your TikTok username, bio, verified badge and profile link, to show them on your TikTok card in Accounts with a link to your profile.
• user.info.stats - read your follower, following, like and video counts, to show them on your TikTok card in Accounts.
• video.list - read the list of your public TikTok videos with their cover, title, date, views and likes, to show them under Your TikTok videos in your Library, each opening on TikTok.
• video.publish - publish a video you chose to your TikTok, only when you press Post to TikTok, with the caption, privacy, interaction and disclosure settings you picked.
• video.upload - send a video you chose to your TikTok inbox as a draft, only when you press Send to TikTok as draft; you finish and post it yourself in the TikTok app.

We never post without your action, never sell TikTok data or use it for advertising. Disconnect TikTok in Ootto at any time and we delete its stored access tokens at once; deletion steps are on our Data deletion page.

YouTube permissions and why we use each one

Ootto connects to YouTube only through our own Google app, using YouTube API Services. You choose to connect, Google shows its own consent screen with every permission, and you can disconnect at any time. By connecting YouTube you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to the data Google holds. We ask for these two permissions and use each one only for the purpose shown:

• https://www.googleapis.com/auth/youtube.readonly (see your YouTube account) - read your channel's name, handle, picture and its subscriber, video and view counts, to show your channel on your YouTube card in Accounts; and read the list of videos uploaded to your channel (title, thumbnail, date and privacy), to show them under Your YouTube videos in your Library, each opening on YouTube. We read nothing else: no comments, no watch history, no subscriptions, no other channels.
• https://www.googleapis.com/auth/youtube.upload (manage your YouTube videos) - upload a video you made in Ootto to your channel as a YouTube Short, only when you press Post to YouTube, with the title, description and privacy (private, unlisted or public; private unless you pick another) you chose on that screen. We never upload without your action, and never change or delete your existing videos.

What we store: Google's access and refresh tokens for your connection, the granted permissions, and your channel's id, name and picture, so your card shows which channel is connected. Channel statistics and your video list are read live from YouTube each time you open them and are not stored. Ootto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements: we use YouTube data only to provide these features to you, never sell it, never use it for advertising, and never share it with anyone except the service providers listed below that run Ootto for you.

How to revoke: press Disconnect on your YouTube card in Accounts. We revoke Ootto's access at Google at once and delete the stored tokens and channel details. You can also remove Ootto's access at any time in your Google Account at https://security.google.com/settings/security/permissions; Ootto loses all access to your channel at once; to have the stored connection deleted too, press Disconnect or email [email protected] and we delete it within 30 days.

Google user data: what we access, how we use it, and with whom we share it

Ootto receives Google user data in two ways, and only when you choose them:

• Sign in with Google - Google gives us your name, email address, profile picture and Google account id (Google's basic sign-in permissions: openid, email and profile). We use them to create your Ootto account and sign you in, to email you about your account and your work, to put your name and email on your checkout, and to show your first name in the consent line you read when you clone your voice.
• Connecting YouTube - the two YouTube permissions and exactly what we read, store and upload are listed in the section above.

We do not ask for any other Google permission: no Gmail, no Google Drive, no Google Calendar and no Google contacts. A Google Drive link you paste to import your own photos and videos is read as a public link, like any website, not through your Google account.

With whom we share, transfer or disclose Google user data. Only these service providers receive it, each only to run Ootto for you, under a contract that lets them use it for that purpose alone:

• Supabase - our authentication service and database. It stores your Google sign-in details (name, email, picture, account id) and, if you connect YouTube, your YouTube tokens and your channel's id, name and picture.
• Vercel - our application hosting. Our servers run there and process your Google sign-in and your YouTube requests (reading your channel, uploading a video you chose) while they run.
• Google (YouTube) - when you press Post to YouTube, we send the video you chose, with the title, description and privacy you entered, to your own YouTube channel.
• Our payment processors (Paddle and Dodo Payments) - your email address, and your name where the checkout asks for it, to make your checkout and receipts.
• Resend - our email sending service, which receives your email address to deliver the emails we send you.
• PostHog - our product analytics, which receives your email address with your account id so we can see how the product is used and fix problems.

We never sell Google user data, never use it for advertising or share it with advertisers, never transfer it to data brokers or information resellers, and never let a person read it unless you ask us to (for example in a support request), it is needed for security or abuse, or the law requires it.

We do not send your Google sign-in data or your YouTube data to AI model providers, and we never use any Google user data to develop, improve or train generalized AI or machine learning models, ours or anyone else's.

Ootto's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

How long we keep it, and how to delete it. We keep your Google sign-in details for as long as your Ootto account is open. We keep YouTube tokens and channel details only while YouTube is connected: press Disconnect and we revoke our access at Google and delete them at once. You can also remove Ootto's access in your Google Account at https://myaccount.google.com/permissions. To delete your account and every piece of Google user data we hold, email [email protected] from your account's address and we delete it within 30 days, except what the law makes us keep for billing records.

How we use your information

• To provide the product: run the Instagram operator you configure, generate and store your brand profile and reels, and surface leads captured from your connected account.
• To process payments and manage your subscription and credit balance.
• To authenticate you and secure your account, including the Claude/MCP connector key.
• To contact you, schedule and run product demos, and respond to your requests.
• To send you product updates you have asked for.
• To measure and improve the website and the product.
• To detect, prevent, and address technical issues and abuse.

Third-party services

We rely on a limited set of service providers, each of which processes data under its own privacy policy:

• Supabase - authentication and application database.
• Paddle - payment processing, subscription billing, and merchant of record.
• Dodo Payments - payment processing and subscription billing.
• Resend - sending our emails to you.
• Composio - brokers the Instagram (Meta) OAuth connection and the API calls your connected account authorizes.
• Meta / Instagram - the platform your connected account belongs to; we only receive Instagram data through the permissions you grant during that connection.
• Google / YouTube - the platform your connected YouTube channel belongs to. We connect directly through our own Google app and only receive YouTube data through the two permissions described above.
• Anthropic (Claude) - powers brand-profile generation, the in-app assistant, and reel scripting.
• Runway - used by our reel-rendering engine to generate certain images inside your reels.
• Vercel - application hosting.
• Sentry - error monitoring.
• PostHog - privacy-friendly product analytics.
• Google Calendar / Cal.com - demo scheduling.

Cookies and tracking

We use cookies and similar technologies for authentication (keeping you signed in), essential site functionality, and analytics. You can control cookies through your browser settings, though blocking authentication cookies will prevent you from staying signed in.

Your cloned voice

If you clone your voice, we keep what the clone needs: the recordings you give us, a transcript of them, the consent line you agreed to, and the voice made from them. The voice is made and spoken by a voice provider we use (Cartesia, and as a backup Fish Audio or ElevenLabs), which keeps its own copy of the clone so it can speak your reels.

Ootto never uses your voice, your recordings or your clone to train any AI model. We use them only to speak your reels, and only for your account.

Our voice providers have their own terms for the content sent to them:

• Cartesia's terms (cartesia.ai/legal/terms, sections "Models" and "Training Opt-Out") say inputs and outputs may be used to train its models unless the account opts out through its training opt-out form.
• Fish Audio's terms (fish.audio/terms) say usage data and content may be used to develop, train or enhance its models, and that it may not be possible to completely delete content from its service.
• ElevenLabs' privacy policy (elevenlabs.io/privacy-policy) lets an account opt out of training in its Data use settings, and says it keeps data it generates about a voice for no longer than 3 years after the last interaction.

To delete your cloned voice, press Delete voice clone on your voice page, or email [email protected]. We delete our copies at once: the recordings in our storage and on our servers, and our record of the voice on every brand of yours that uses it, with its consent line and transcript. In the same step we ask each provider to delete its clone through its own delete function. Copies in a provider's backups follow that provider's terms above. Reels already made keep their sound until you delete them. You get a written confirmation by email when it is done.

Data retention

We keep account, billing, brand, and lead data for as long as your account is active, and for a reasonable period afterward as needed for legal, tax, security, or dispute-resolution purposes. If you disconnect an Instagram account or revoke a connector key, we stop using it going forward; already-generated reels, captured leads, and billing records are not automatically deleted. Email us to request deletion of specific data or your account.

Your rights

You can request access to, correction of, or deletion of your personal information, or ask us to revoke a specific Instagram connection or MCP key, at any time by emailing us at [email protected].

Security

We take reasonable measures to protect your information - including relying on our providers' own security controls for authentication, payments, and hosting - but no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy from time to time. We will post the new version here with an updated date.

Contact

Questions? Email us at [email protected].