Privacy Policy

Our privacy policy and how we use your data

1. Introduction

Ott ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PPC analytics platform (the "Service"). Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted and hashed)
  • Name and profile information
  • Account preferences and settings
  • Billing and payment information (processed securely through third-party payment processors)

2.2 Advertising Data

To provide our analytics services, we collect and process:

  • Meta (Facebook) advertising campaign data, including campaigns, ad sets, and ads
  • Performance metrics (impressions, clicks, spend, conversions, ROAS, CTR, CPC, CPA)
  • Campaign targeting information and demographics
  • Ad creative information
  • Account and billing information from Meta

2.3 Telegram Tracking Data

When using Telegram conversion tracking, we collect:

  • Telegram channel join events
  • Tracking link click data
  • Conversion attribution data
  • Telegram user identifiers (hashed/anonymized)

2.4 Custom Metrics and Templates

We store:

  • Custom KPI definitions and tracking configurations
  • Manual metric entries
  • Campaign templates and requirements

2.5 Usage Data

We automatically collect:

  • Log data (IP address, browser type, device information)
  • Usage patterns and feature interactions
  • Error reports and performance metrics
  • Cookies and similar tracking technologies

2.6 Team Account Data

For team accounts, we collect:

  • Team member information and roles
  • Client and brand organizational data
  • Permission and access control settings

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Sync and process advertising data from Meta
  • Track and attribute Telegram conversions
  • Generate analytics reports and performance insights
  • Process payments and manage subscriptions
  • Send service-related communications
  • Respond to support requests
  • Detect and prevent fraud or abuse
  • Comply with legal obligations
  • Enforce our Terms of Service

    • 4. Third-Party Integrations

    4.1 Meta (Facebook) Integration

    We integrate with Meta's advertising platform through Meta's API. When you connect your Meta account:

    • We access your Meta advertising data based on the permissions you grant
    • We sync campaign, ad set, and ad information daily
    • We process performance metrics and analytics data
    • We send conversion events to Meta's Conversion API

    Your use of Meta's services is also governed by Meta's Privacy Policy and Terms of Service. We recommend reviewing Meta's privacy practices.

    4.2 Telegram Integration

    We integrate with Telegram's Bot API to track channel joins. When using Telegram tracking:

    • We generate unique tracking links for your campaigns
    • We track when users click tracking links and join Telegram channels
    • We send conversion events to Meta's Conversion API
    • We store anonymized conversion data for attribution

    Your use of Telegram is also governed by Telegram's Privacy Policy and Terms of Service.

    4.3 Payment Processors

    We use third-party payment processors to handle billing. Payment information is processed securely and is not stored on our servers. Please review the privacy policies of our payment processors.

    5. Data Security

    We implement industry-standard security measures to protect your data:

    • Encryption: Data in transit is encrypted using TLS/SSL
    • Row Level Security (RLS): Database-level access controls ensure users can only access their own data
    • Secure Authentication: Passwords are hashed using secure algorithms
    • Access Controls: Role-based permissions limit data access
    • Regular Security Audits: We conduct regular security assessments
    • Secure API Connections: All third-party API connections use secure protocols

    However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

    6. Data Sharing and Disclosure

    We do not sell your personal information. We may share your information only in the following circumstances:

    6.1 Service Providers

    We may share data with trusted service providers who assist in operating our Service, such as:

    • Cloud hosting providers
    • Payment processors
    • Email service providers
    • Analytics and monitoring services

    These providers are contractually obligated to protect your data and use it only for specified purposes.

    6.2 Legal Requirements

    We may disclose your information if required by law or in response to valid legal requests, such as:

    • Court orders or subpoenas
    • Government investigations
    • Protection of rights, property, or safety
    • Enforcement of our Terms of Service

    6.3 Business Transfers

    In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

    6.4 With Your Consent

    We may share your information with your explicit consent or at your direction.

    7. Data Retention

    We retain your data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

    • Account Data: Retained while your account is active
    • Advertising Data: Retained according to your subscription plan and data retention settings
    • Billing Records: Retained as required by law (typically 7 years)
    • Log Data: Retained for security and troubleshooting purposes (typically 90 days)

    Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes.

    8. Your Rights and Choices

    You have the following rights regarding your personal information:

    8.1 Access and Portability

    You can access and export your data at any time through your account settings or by contacting us.

    8.2 Correction

    You can update your account information and preferences through your account settings.

    8.3 Deletion

    You can delete your account and request deletion of your data at any time. Some data may be retained as required by law.

    8.4 Opt-Out

    You can opt out of marketing communications by clicking unsubscribe links or adjusting your preferences.

    8.5 Data Processing Controls

    You can control:

    • Which Meta ad accounts are connected
    • Which Telegram channels are tracked
    • What data is synced and processed
    • Team member access and permissions

    8.6 Cookie Preferences

    You can manage cookie preferences through your browser settings. See our Cookie Policy for more information.

    9. International Data Transfers

    Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place, including:

    • Standard contractual clauses
    • Data processing agreements
    • Compliance with applicable data protection regulations

    10. Children's Privacy

    Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

    11. California Privacy Rights

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

    • Right to know what personal information is collected
    • Right to know if personal information is sold or disclosed
    • Right to opt-out of the sale of personal information
    • Right to access your personal information
    • Right to request deletion of personal information
    • Right to non-discrimination for exercising your privacy rights

    We do not sell personal information. To exercise your CCPA rights, please contact us.

    12. GDPR Rights (European Users)

    If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

    • Right of access to your personal data
    • Right to rectification of inaccurate data
    • Right to erasure ("right to be forgotten")
    • Right to restrict processing
    • Right to data portability
    • Right to object to processing
    • Right to withdraw consent

    To exercise your GDPR rights, please contact us. You also have the right to lodge a complaint with your local data protection authority.

    13. Cookies and Tracking Technologies

    We use cookies and similar tracking technologies to:

    • Maintain your session and authentication
    • Remember your preferences
    • Analyze Service usage and performance
    • Improve user experience

    For detailed information about our use of cookies, please see our Cookie Policy.

    14. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by:

    • Posting the new Privacy Policy on this page
    • Updating the "Last updated" date
    • Sending email notifications for significant changes
    • Displaying notices in the Service

    Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

    15. Contact Us

    If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

    • Through the contact page on our website
    • Via email at the address provided in your account settings
    • Through your account's support section

    Last updated: March 5, 2026