Privacy Policy

Jotter Otter Inc. ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, and applications (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

We collect several types of information from and about users of our Service:

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Account creation date and activity status

2.2 Content and Input Data

When you use our Service to generate content, we collect:

• Text inputs, ideas, and prompts you provide
• Images you upload for analysis (processed as base64 encoded data)
• Content preferences (tone, template, platform selections)
• Brand voice examples you provide
• Generated content and variations

2.3 Usage Data

We automatically collect information about how you use the Service:

• Total number of content generations
• Total number of posts generated
• Last generation timestamp
• Platform preferences and usage patterns
• Feature usage statistics

2.4 Technical Information

When you access our Service, we may collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Referral source
• Pages visited and time spent on pages

2.5 Payment Information

When you subscribe to a paid plan, payment information is processed by Stripe, our third-party payment processor. We do not store your complete payment card information on our servers. Stripe collects and processes payment data in accordance with their privacy policy.

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our Service, including generating content based on your inputs
• Account Management: To create and manage your account, process subscriptions, and provide customer support
• Content Generation: To process your inputs and generate social media content using AI models
• History and Analytics: To maintain your generation history and provide usage statistics
• Brand Voice: To store and use your brand voice examples to customize generated content
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Improvement: To analyze usage patterns and improve our AI models and Service features
• Security: To detect, prevent, and address technical issues, fraud, and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Marketing: With your consent, to send you promotional communications about our Service

We do not sell your personal information to third parties. We may share aggregated, anonymized data that cannot identify you individually for analytics and improvement purposes.

Data Storage: Your information is stored on secure servers. We use industry-standard security measures to protect your data, including:

• Encryption of data in transit using SSL/TLS
• Secure database storage with access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Data Retention: We retain your information for as long as your account is active or as needed to provide you with the Service. We may retain certain information after account closure to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

We use third-party services to operate our Service. These services may have access to your information:

5.1 AI Service Providers

We use LiteLLM and various AI model providers to generate content. When you use our Service, your inputs (text, images, preferences) are sent to these providers to generate content. These providers process your data in accordance with their privacy policies and our agreements with them.

5.2 Payment Processing

We use Stripe to process payments. Stripe collects and processes your payment information in accordance with their privacy policy. We do not store your complete payment card information.

5.3 Hosting and Infrastructure

We use cloud hosting providers to store and process your data. These providers are bound by data processing agreements and security standards.

5.4 Analytics and Monitoring

We may use analytics services to understand how our Service is used and to improve performance. These services may collect anonymized usage data.

We require all third-party service providers to maintain appropriate security measures and use your information only for the purposes we specify.

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function properly (e.g., authentication, session management)
• Analytics Cookies: Help us understand how visitors interact with our Service
• Preference Cookies: Remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We do not use cookies for advertising or tracking across other websites.

Depending on your location, you may have certain rights regarding your personal information:

7.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

7.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

7.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

7.4 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law).

You can also manage some aspects of your data through your account settings, including updating your profile information and deleting your account.

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information from our servers immediately.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 years of age.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

By using our Service, you consent to the transfer of your information to the United States and other countries where we operate. We take appropriate safeguards to ensure your information receives an adequate level of protection, including:

• Using standard contractual clauses approved by the European Commission
• Ensuring third-party service providers maintain appropriate security measures
• Complying with applicable data protection laws

If you are located in the EEA, we ensure that transfers of your personal data comply with GDPR requirements.

We retain your personal information for as long as necessary to provide you with our Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account Information: Retained while your account is active and for a reasonable period after account closure
• Content and Generation History: Retained while your account is active; may be deleted upon account closure
• Payment Records: Retained as required by law (typically 7 years for tax and accounting purposes)
• Usage Statistics: Retained in anonymized form for analytics and improvement purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (e.g., AI providers, payment processors, hosting services)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others
• With Your Consent: When you have given explicit consent to share your information

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)
• Displaying a notice on our Service

Material changes will take effect 30 days after notification, unless otherwise required by law.

Your continued use of our Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and delete your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Jotter Otter Inc.

Email: [email protected]

General Contact: https://jotterotter.com/contact

For GDPR-related requests, you also have the right to lodge a complaint with your local data protection authority.

Last Updated: January 5, 2026