Privacy Policy

Effective date: July 22, 2026

Ottohand Technologies LLC (“Ottohand,” “we,” “us,” or “our”) provides a CRM and website platform for small businesses. This Privacy Policy explains how we collect, use, and protect information — both from the businesses (“Tenants”) that subscribe to Ottohand, and from those Tenants’ own customers who interact with a Tenant’s website, forms, or text messages.

1. Information we collect from Tenants (business account holders)

When you sign up for and use Ottohand as a business, we collect:

• Account information: your name, email address, phone number, business name, business address, and password (stored as a secure hash, never in plain text).
• Billing information: our payment processor, Stripe, collects and stores your payment card details directly. We don’t store your full card number.
• Business content: information and media you add to run your CRM and website — service/offering listings, page content, photos (including before/after photos), estimates and e-signature records, and similar content.
• Connected account tokens: if you connect a social media account (e.g., Facebook, Instagram, Google Business Profile) so Otto can help manage posts, we store the access token for that connection, encrypted at rest.
• Usage information: how you use the dashboard and website builder, to operate and improve the Service.

2. Information we collect from Tenants’ customers (end customers)

If you’re a customer of a business that uses Ottohand — for example, you booked an appointment or filled out a contact form on their site — we collect:

• Contact information you provide (such as your name, phone number, and email address).
• Information related to your interactions with that business through our platform, including appointment bookings, form submissions, and messages exchanged with the business.

3. How we use information

We use information to:

• Operate, maintain, and improve the Ottohand platform.
• Enable Tenants to manage their customer relationships and run their websites.
• Enable a Tenant to communicate with their own customers, including appointment reminders and replies to inquiries.
• Power Otto, our AI-assisted feature that drafts suggested replies and actions for a Tenant’s review. This involves sending relevant business and customer-interaction data to our AI provider, Anthropic, to generate those drafts. Otto’s drafts are never sent or published without the Tenant’s explicit approval, and this data is not used by Anthropic to train models on Ottohand’s behalf.
• Process payments (via Stripe) for Tenant subscriptions.
• Send transactional emails and text messages related to your use of the Service.

4. Who we share information with

We do not sell personal information. We share information only:

• With the specific business you’re interacting with, if you’re an end customer — that’s the point of the platform.
• With service providers who help us operate the Service, under confidentiality and data-processing obligations, including:
  • Neon — our database hosting provider
  • Vercel — our application hosting provider
  • Stripe — payment processing
  • Resend — transactional and inbound email delivery
  • Twilio — text messaging delivery
  • Anthropic — AI processing that powers Otto’s drafted suggestions
  • Social media platforms (e.g., Meta/Facebook/Instagram, Google) — only when a Tenant connects an account for posting assistance
• When required by law, or to protect the rights, safety, or property of Ottohand, our Tenants, or others.

5. SMS / text messaging

If you provide your phone number to a business using Ottohand, that business may send you text messages, such as appointment reminders or replies to your inquiries, via our platform.

• We do not sell or share your mobile phone number with third parties or affiliates for marketing or promotional purposes. Your number is used solely to enable communication with the specific business you provided it to.
• Message frequency varies depending on your interactions with the business.
• Message and data rates may apply, depending on your mobile carrier and plan.
• You can opt out of text messages at any time by replying STOP. You can request help by replying HELP.

6. Data retention

We retain Tenant account information and end-customer interaction data for as long as needed to provide the Service, or as required by law. If a Tenant’s account is closed, we handle their data per our Data Deletion page.

7. Security

We take reasonable technical and organizational measures to protect information, including encrypting connected-account tokens at rest, hashing passwords, and verifying webhook signatures on inbound email and SMS to prevent spoofed data. No system is perfectly secure, and we can’t guarantee absolute security.

8. Children’s information

Ottohand is intended for use by business owners and their adult customers, and is not directed at children. Some Tenants (for example, daycare or childcare businesses) may collect information about a child through a form filled out by that child’s parent or guardian; that information is provided and controlled by the Tenant business, not collected by Ottohand directly from a child. If you believe a child has provided us with personal information directly, contact us at jguzik@ottohand.com and we will take appropriate steps to address it.

9. Your choices and rights

• Reply STOP to any text message to opt out of future messages from that business.
• If you’re an end customer of a Tenant, contact that business directly, or contact us at jguzik@ottohand.com, to request access to, correction of, or deletion of your information.
• If you’re a Tenant, you can update your account information directly in your dashboard settings, or contact us to request deletion — see our Data Deletion page.
• Depending on your location, you may have additional rights under laws like the CCPA/CPRA (California) to know, delete, or opt out of the sale/sharing of personal information. We do not sell personal information. Contact us to exercise any applicable rights.

10. International use

Ottohand is based in the United States and our service providers primarily process data in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S.

11. Contact us

Ottohand Technologies LLC
43 Kenneth Terr W, Middletown, NJ 07748
jguzik@ottohand.com

12. Changes to this policy

We may update this Privacy Policy from time to time. We’ll update the effective date above when we do.