LEGAL

Privacy Policy

Last updated: September 25, 2026

Who we are

Ottoframe is operated by Ajolla Inc. (“Ottoframe”, “we”, “us”). Ajolla Inc. is the controller of the personal data described here. Questions about this policy or your data can be sent to privacy@ottoframe.com or support@ottoframe.com.

What Ottoframe processes

We process account and show membership details, studio scheduling and participant information, local recording chunks, exports, direct messages and room chat, campaign briefs, brand assets, consent and rights records, review decisions, billing and subscription state, abuse reports and blocks, security logs, and support communications. Camera and microphone access begins only after browser or device permission.

Recording and participant notice

Each recording participant must be told that a session is being recorded and locally uploaded. Hosts are responsible for obtaining any notice or consent required where participants are located. Accountless guest links identify the invited participant and expire; they are not a substitute for recording consent.

Campaign Studio and AI providers

When a director starts Campaign Studio work, Ottoframe sends the approved brief, references, prompts, and only the assets required for that job through Vercel AI Gateway to the selected model provider. Routing and providers can change as our benchmark allowlist changes. We request no-training routing where supported, but a provider may retain inputs or outputs for service operation, safety, or abuse prevention under its own terms. Do not submit regulated, highly sensitive, or confidential data to Campaign Studio.

Subprocessors and transfers

We use the following service providers to operate Ottoframe. Their access is limited to running the part of the service listed, and they may process data outside your state or country.

• Supabase — Authentication, database, and private object storage for recordings, exports, and assets
• LiveKit — Realtime audio, video, and chat transport during live sessions
• Stripe — Web subscriptions, credit purchases, and marketplace payouts; card data goes directly to Stripe
• Apple (App Store) — In-app subscription purchases, renewals, and subscription status on iOS
• Vercel — Application hosting, and AI Gateway routing for Campaign Studio model requests
• Google Cloud — Durable job delivery and media processing workers for exports and campaigns
• Sentry — Error and performance monitoring so failures can be diagnosed and fixed

Campaign Studio model providers are reached through Vercel AI Gateway as described above. We do not sell personal data or share it for cross-context behavioral advertising.

Rights, likenesses, and provenance

Campaign records include rights attestations, claim approvals, consent references, model and prompt snapshots, and AI-generated labels. These records help your review; they do not independently establish that a campaign is lawful or cleared for broadcast.

Retention

Isolated recording tracks are kept for the retention window of the show owner’s plan at the time the track finishes uploading, then deleted automatically:

• Free trial — 30 days
• Solo (free) — 14 days
• Show — 180 days
• Studio — 365 days

Downgrading never shortens a window already granted. After a subscription ends, existing tracks stay available until their window closes, and no new recordings beyond the free plan’s limits are accepted. Exports, shows, messages, and other workspace content remain until an authorized member deletes them or the account is deleted. Abuse reports are kept while needed to review and act on them and to prevent repeat abuse. Operational backups roll off within their normal cycle, and we keep billing records for as long as tax and accounting law requires. Archived data from the retired product is isolated and scheduled for deletion after its stated migration window.

Account deletion

You can delete your account at any time: in the iOS app under You › Delete account, or on the web under Settings › Account. Deletion cancels any web subscription billed through Stripe, removes the shows you own with their recordings, exports, and campaign assets, removes your membership in shows others own, and deletes your profile, messages, blocks, and marketplace listing. Bookings you were part of remain in the other party’s history without your identity, and any live booking is cancelled. App Store subscriptions are managed by Apple and must be cancelled in your Apple ID settings; deleting your account does not cancel them. If deletion cannot finish, contact support@ottoframe.com and we will complete it.

Reports, blocks, and moderation

You can report a profile, direct message, room message, or thread, and block another user, from inside the app. A report records who filed it, who and what it concerns, the reason, and any details you add; the reported person is not told who reported them. Blocking stops the blocked person from opening a conversation with you or sending you direct messages, and they are not notified. Our team reviews reports within 24 hours and may remove content, restrict features, or remove accounts that violate our Terms.

Your choices

You can manage permissions in your browser or device, export completed media, update account details, and delete your account as described above. Depending on where you live, you may also request access, correction, deletion, portability, or restriction by emailing privacy@ottoframe.com. We respond within the time the law where you live requires.

Security and children

Ottoframe uses private storage, short-lived signed URLs, role-based access, verified worker callbacks, and payment providers so card data does not pass through our application. No system is completely secure. Ottoframe is not directed to children under 13, and users must be legally able to enter a contract in their location.

Changes

We will post changes to this policy here and update the date above. Material changes will be announced in the product or by email before they take effect.