legal

Privacy at otto.

Plain language. What we collect, why, who sees it, how to get it deleted.

Last updated 14 June 2026

What's inside

  1. Who we are
  2. What we collect
  3. Why we collect it
  4. Who sees your data
  5. Where it's stored
  6. How long we keep it
  7. Your rights
  8. Cookies and tracking
  9. Changes to this policy
  10. Contact

1. Who we are

otto (ottopilot) is operated by Daniel Dmitriouk, based in Zürich, Switzerland. You can reach us at hi@ottopilot.ch for any privacy question.

We're the data controller for the information you give us when you use otto.

2. What we collect

Only what we need to run your studio's scheduling and cover automation:

  • Account info: your name, email, studio name, role.
  • Schedule data: classes, times, locations, who teaches what, your studio's calendar.
  • Coach info: name, contact details, availability, response history.
  • Sling sync (optional): if you connect Sling, we read schedule and coach data from your existing account.
  • Usage data: actions you take in otto, so we can fix bugs and improve the product. No mouse tracking, no session replay.

We don't collect payment details directly. Those are handled by Stripe.

3. Why we collect it

Three reasons:

  • To run otto: schedule classes, find covers, send notifications, keep your website in sync.
  • To support you: when you email us, we need to know who you are.
  • To improve the product: anonymised usage data tells us what's working and what's broken.

Legal basis: contract performance (running the service you signed up for) and legitimate interest (improving the product).

4. Who sees your data

Only the services that help us run otto. We don't sell or share your data with anyone else.

  • Supabase (EU): database and authentication.
  • Vercel (EU): hosting.
  • Stripe: payment processing, when you subscribe.
  • Sling: only if you connect your Sling account. We read your schedule, never write.
  • Resend: sending transactional emails (cover offers, confirmations).
  • Web push providers (Apple, Google, Mozilla): for push notifications to your devices.

Each provider has its own privacy policy. We choose providers that meet GDPR standards.

5. Where it's stored

All your data sits in EU data centres. Supabase and Vercel both host in Frankfurt by default. We don't move data outside the EU unless legally required.

6. How long we keep it

As long as you have an active studio, we keep your data so the service works. When you cancel:

  • 30 days: your data stays available so you can come back or export it.
  • After 30 days: we delete it. Some backups can take up to 90 days to clear.
  • Anonymised usage data: may be kept longer for product analytics, but cannot be traced back to you.

You can export your data any time from your settings, or by emailing us.

7. Your rights

Under GDPR you have the right to:

  • Access the data we have about you.
  • Correct anything that's wrong.
  • Delete your account and data.
  • Export your data in a portable format.
  • Object to how we use it.
  • Complain to your local data protection authority. In Switzerland, that's the FDPIC.

Email hi@ottopilot.ch and you'll get a reply within a day.

8. Cookies and tracking

We use a single cookie to keep you signed in. No advertising cookies, no analytics cookies that track you across the web. If we add anonymised product analytics later, we'll ask first.

9. Changes to this policy

If we change anything material, we'll email you before it takes effect. The "last updated" date at the top is the source of truth.

10. Contact

Questions, requests, or complaints. Send them to hi@ottopilot.ch. Daniel reads every email and replies within a day.