OttoDash privacy policy
This policy covers the OttoDash service. For the ZET Studios website and other products, see zetstudios.ca/privacy.
Who we are
OttoDash is provided by ZET Studios Inc., Langley, British Columbia, Canada ("ZET", "we"). Contact: hello@zetstudios.ca.
Two kinds of data
Customer data is what your company brings into OttoDash: bank transactions, invoices, customers, remittances, payouts, emails you choose to connect, and the work your team saves. We process it on your behalf, only to provide OttoDash to you. Your company controls it.
Account data is what we need to run the service: the name and email of each person who signs in, their role, sign-in times, an access log, and billing details for the subscription (handled by our payment processor; we don't store card numbers).
What we do with it
- Run OttoDash: match, check and show your data to the people in your company, and keep your settings and saved work.
- Keep it secure: access logs, abuse prevention, troubleshooting a problem you report.
- Bill your subscription and contact admins about the service.
We do not sell customer or account data, use it for advertising, or use your customer data to train AI models.
Service providers
We use a small number of providers to run OttoDash, each bound to use the data only to provide their service to us:
| Provider | What for |
|---|---|
| Cloud hosting and database | Running the application and storing data |
| Cloudflare | Website delivery and network protection |
| Anthropic (Claude) | Reading PDF statements and unreadable emails, only if switched on for your company |
| Stripe | Subscription billing |
| Microsoft, Google | Sign-in, and mail or Sheets if you connect them |
Data you connect from NetSuite, Shopify, Amazon, Stripe, PayPal or your bank stays subject to those providers' own terms as well.
Where it's kept and for how long
- We aim to host customer data in Canada; the hosting region is confirmed in your order. Some providers above may process data in other countries under contractual safeguards.
- Customer data is kept while your company's account is active. When an admin deletes the company, its data is removed from the application database, with backups expiring within 35 days.
- Access logs are kept for up to 2 years for security.
Your choices
- Admins can export all of the company's data or delete the company from Settings.
- Anyone can ask us what account data we hold about them, or ask us to correct or delete it, at hello@zetstudios.ca. Requests about customer data are passed to the company that controls it.
- You can complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
Changes
We'll post changes here and tell company admins by email before a material change takes effect.