Privacy Policy

Last updated: February 19, 2025

Overview

Otta ("we," "us," "our") is an AI-powered travel planning assistant. We help you organize trip bookings and coordinate with your travel group across WhatsApp, iMessage, and our mobile app. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account Data

When you sign in with Google or Apple, we receive your name, email address, and profile picture from the identity provider. We store this to identify you across sessions.

Messages & Conversations

We store messages you send to Otta through WhatsApp, iMessage, or the in-app chat. This includes text, images, voice messages, PDFs, and shared links. Message content is used to understand your requests and extract booking information.

Forwarded Emails

When you forward booking confirmation emails to Otta, we process the sender, subject, body, and any attachments to extract travel details (dates, locations, confirmation numbers, pricing).

Trip & Booking Data

We store trip details you create or that we extract from your bookings: destinations, dates, accommodation details, flight information, activity reservations, and transfer arrangements.

Contact Information

We store your phone number and the messaging channel you use to reach Otta, so we can identify you and respond on the right channel.

Device Data

If you enable push notifications, we store your device token to deliver notifications about new messages and booking updates.

2. How We Use Your Data

  • AI-powered trip planning — Your messages and forwarded emails are processed by AI models to understand requests, extract booking details, and generate helpful responses.
  • Booking organization — Extracted travel data is structured and stored so you and your group can view your trip plan in one place.
  • Cross-channel continuity — We maintain conversation context across WhatsApp, iMessage, and the app so you get a seamless experience regardless of which channel you use.
  • Notifications — We send push notifications when Otta responds to your messages or when new bookings are added to your trip.
  • Service improvement — We use aggregated, non-identifiable usage patterns to improve Otta's accuracy and reliability.

3. Third-Party Services

We use third-party services to operate Otta. Each processes data only as necessary for its function:

  • AI providers — Language models for understanding messages, extracting booking data, and generating responses. Speech-to-text models for transcribing voice messages.
  • Cloud infrastructure — Database hosting, user authentication, file storage, web hosting, and background job processing.
  • Messaging platforms — Sending and receiving messages on WhatsApp and iMessage.
  • Push notifications — Delivering notifications to your mobile device.
  • Travel data — Flight search results when you ask Otta to look up flights.

We do not sell your data to any third party. Data shared with these services is limited to what is needed to provide Otta's functionality.

4. Data Retention

We retain your account data and trip information for as long as your account is active. Messages and conversation history are retained to maintain context for ongoing trips. Debug and diagnostic logs are automatically deleted after 30 days (90 days for error logs). You can request deletion of your data at any time by contacting us.

5. Security

We implement multiple layers of security: row-level database policies that restrict access to your own data, cryptographic verification of all incoming webhooks, private storage buckets for uploaded files, and encrypted connections for all data in transit. Authentication is handled through established OAuth providers (Google and Apple).

6. Your Rights

You have the right to:

  • Access your data — request a copy of the personal data we hold about you.
  • Correct your data — update inaccurate or incomplete information.
  • Delete your data — request that we erase your personal data and account.
  • Export your data — receive your trip and booking data in a portable format.

To exercise any of these rights, contact us at the address below.

7. Children's Privacy

Otta is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or via email. Continued use of Otta after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Reach us at hello@otta.travel.