Privacy Policy

1. Introduction

Otoq ("we", "our", or "us") operates the Otoq platform at getotoq.com. Otoq is operated from Manila, Philippines. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using Otoq, you consent to the data practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and company name. If you subscribe to a paid plan, payment information is processed securely by Stripe — we do not store your credit card details.

Knowledge Base Data

You may upload documents, provide URLs, or enter text to train your AI agent. This data is stored in our database and used exclusively to power your agent's responses. We do not use your business data to train any third-party models.

Conversation Data

We store conversations between your website visitors and your AI agent. This includes visitor messages, agent responses, and any contact information visitors voluntarily provide (name, email, phone). Visitors are identified by anonymous browser-generated IDs, not personal identifiers.

Usage Data

We automatically collect information about how you use the platform, including pages visited, features used, and conversation metrics. This helps us improve the service.

3. How We Use Your Information

To provide, operate, and maintain the Otoq platform
To process your transactions and manage your subscription
To power your AI agent with your knowledge base data
To send you service-related communications (account verification, billing, support)
To improve and develop new features
To detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services:

Anthropic (Claude) — AI language model for generating agent responses. Conversation messages are sent to Anthropic's API for processing. Anthropic does not use this data for training.
OpenAI — Text embedding generation for knowledge base search. Document content is sent to OpenAI's API for embedding. OpenAI does not use this data for training.
Supabase — Database hosting, authentication, and file storage.
Stripe — Payment processing. See Stripe's Privacy Policy.
Resend — Transactional email delivery.
Vercel — Application hosting and deployment.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data — including agents, knowledge bases, conversations, and leads — is permanently deleted from our systems. Backups may retain data for up to 30 additional days before full deletion.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encrypted database connections, row-level security policies, and secure authentication. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (via account settings)
Export your data (leads, conversations)
Withdraw consent at any time by deleting your account

8. Cookies

We use essential cookies for authentication and session management. The chat widget uses localStorage to maintain visitor identity across sessions. We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

Otoq is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@getotoq.com.

Otoq is operated from Manila, Philippines.