Privacy Policy
LAST UPDATED: MAY 25, 2026
Our Core Privacy Philosophy
Otto was built because burnout is a design problem—and so is data privacy. We believe your time off is yours alone. That is why **your vacation plan is stored inside your own local browser storage by default, with accounts being entirely optional for cross-device synchronization**. Otto does not sell, track, or share your plans with anyone.
1. Information We Collect
Otto operates under a local-first architecture. We only collect details required to manage your account and help you optimize your time off:
- Account Data (Optional / Coming Soon):When active, signing up using Google SSO securely stores your email address in our database via Supabase to authorize secure synchronization. *Note: Google SSO is temporarily disabled and marked as “Coming Soon” in the current release.*
- Browser Session Cache:Your vacation budget, anchor days, and styling parameters are cached in your browser's local storage so you can plan instantly without latency.
- Operational Logs: When you access the app, we log basic technical diagnostics (e.g. rate-limiting counts associated with your IP address) strictly to safeguard our endpoints against spam.
2. Google OAuth & Calendar Integration (Coming Soon)
Otto is preparing direct synchronization to Google Calendar (currently disabled and marked as “Coming Soon”). When enabled and authorized:
- We strictly use your OAuth access token to write your newly optimized vacation breaks as events.
- We never read, store, or modify your existing personal or business calendar entries.
- Your temporary credentials remain client-side and are never uploaded or aggregated on our servers.
3. Analytics & Diagnostics
To keep Otto performant and lightweight, we use privacy-respecting third-party utilities:
- Vercel Analytics & Speed Insights: Used strictly to measure loading speeds and frontend rendering bottlenecks. This data is entirely aggregated and anonymized.
- Upstash Redis: Used strictly to implement an in-memory, sliding-window rate limit on our feedback endpoints to secure services against DDoS attempts.
4. Data Retention & Control
You maintain total control over your planning data:
- Local Reset: Clearing your browser cookies and local storage immediately wipes all planning sessions.
- Account Deletion: If you wish to permanently delete your Supabase sync profile, simply reach out to us using the in-app Feedback Hotline, and we will purge your profile within 48 hours.
5. Contact Us
For any questions regarding your privacy, data controls, or oauth consent integrations, please use the Feedback Hotline directly inside the application Settings dashboard.