Ototo Privacy Policy

Last updated September 29, 2026

Ototo connects authorized accounting software to AI assistants. This policy explains information we may process through our website, account and connection service, sales and marketing activities, support, and recruiting. The accounting software and AI assistant chosen by an organization have separate privacy practices.

1. Scope and roles

All Up, LLC, a Delaware limited liability company with a registered address of 16192 Coastal Highway Lewes, DE 19958 USA, doing business as Ototo (“Ototo,” “we,” “us”) determines how it processes information relating to website visitors, prospective customers, account users, job applicants, and people who contact us.

This policy covers ototo.ai and other Ototo sites that link to it, the Ototo account and connection service, and related communications. It does not govern the privacy practices of accounting software, AI assistant, or other sites you choose to use.

For personal information in connected accounting software, the organization that connects the accounting software generally decides which records, users, and assistants are involved. Ototo processes that information to provide the requested service for that organization. If you are a customer, vendor, employee, or other person whose information appears in the accounting software, contact the organization responsible for it about requests relating to those records.

When you use a connected AI assistant, Ototo sends the data relevant to its requested operation to that AI assistant and exchanges commands and responses with the accounting software. The AI assistant may receive sensitive information. Its provider’s retention, model training, and other uses depend on its own terms, plan, and settings. Ototo does not control those separate practices.

2. Information and sources

We collect information you provide directly, information generated when you use our site or service, information available through accounting software your organization connects, and information we may receive from service providers, referrals, business partners, or public business sources. The categories vary with your interaction and the features actually in use.

Information you provide

For an account, we may collect name, work email, username or sign-in identifier, organization, role, settings, connected-company identifiers, and permissions. For an inquiry, demo request, event, survey, or support request, we may collect name, company, title, email, telephone number, communication preferences, and the information you choose to send us. We may retain communications by email, telephone, or other support channels. If we recruit, an applicant may give us a resume, work history, profile, references, and other application information.

For paid plans, we may process billing contacts, subscription details, invoices, and payment status. A payment provider may collect card or bank details. Our payment processor is Stripe. Stripe collects card and bank details on its own pages, and Ototo does not receive or store full card or bank account numbers. From Stripe we receive a customer identifier, subscription and invoice status, and whether a payment method is on file. Stripe’s privacy policy is at stripe.com/privacy.

Connected accounting data

A request through Ototo may transmit transactions, balances, invoices, bills, customers, vendors, employees, and other information, including personal or sensitive details within the books. The exact data depends on the API called, the company selected, and the permissions the organization grants. Ototo does not store accounting data or assistant prompts and responses. Requests pass through our service to the accounting software and back without being written to our database, application logs, diagnostics, or backups. Our diagnostics record technical details such as error codes and response times, not what a request or response contained. If you choose to send us accounting information in a support request, we keep it with that support record.

To maintain connections, we may process authorization tokens or similar credentials. We encrypt these tokens before storing them, using keys held in Google Cloud Key Management Service, and decrypt them only to make a request the organization has authorized. When a company is disconnected, we revoke its tokens with the accounting software and delete them. If an organization on a paid plan disconnects a company, the connection stays available until the end of the paid term and is then removed. An organization can also revoke Ototo’s access from within its accounting software at any time.

Activity and technical data

Our website and infrastructure may also process IP address, approximate location derived from IP, device and browser type, referring page, pages viewed, links clicked, access times, authentication events, and error information, depending on the technology in use. Our servers keep standard request logs with the date and time, IP address, browser or app type, the page or address requested, the response code, and the response time.

The Ototo application activity log records the user, API called, date and time, and status result (okay or error). The activity log also records the connected company, whether the request read, wrote, or deleted data, how long it took, any error code, and the name of the assistant app that made it. Our sign-in provider records sign-in events, including IP address and browser type.

3. Cookies and similar technology

Our website may use cookies, pixels, tags, local storage, or comparable technology. These tools can support site functionality and security, remember preferences, measure visits and campaign performance, understand how visitors use pages, or deliver and measure marketing. Some tools may be provided by third parties. Session technologies generally expire when a session ends; persistent technologies may remain until their expiry or removal.

Optional analytics, advertising, remarketing, behavior analytics, and social plugins are not currently deployed on the site as of this draft date. If introduced, they may collect device identifiers, IP address, page and referral information, interactions, and campaign data, and their providers may combine that information with activity on other sites under their own policies. We will identify the active tools and provide any notice, consent, or opt-out required when deployed. Today our website and dashboard set only essential cookies: a session cookie from our sign-in provider, WorkOS, that keeps you signed in, and a cookie that remembers which organization you last selected. Stripe sets its own cookies on its payment pages to process payments and prevent fraud. Before we add any optional cookies, we will publish a cookie notice and, where required, ask for your consent first.

You can generally manage cookies in your browser; disabling essential technology may affect site functions. If we offer a cookie preference control, you may use it to change optional choices. Browser “Do Not Track” signals and Global Privacy Control or similar opt-out signals will be handled as required by applicable law and the technologies then in use. We do not currently use technology that sells or shares personal information, so there is nothing to opt out of today. If we add such technology, we will treat a Global Privacy Control signal as a request to opt out of sale and sharing for that browser.

4. Purposes and legal bases

We use information to provide and secure accounts and connections; enforce permissions; process requested reads and writes; maintain the activity log; bill paid plans; respond to inquiries and support; troubleshoot and improve performance; recruit; enforce agreements; protect rights and safety; comply with law; and communicate service changes. If we conduct marketing, we may use business contact details to send product news, invitations, and relevant offers, subject to your choices and applicable law. We may measure site and campaign effectiveness and personalize site content or advertising if those activities are enabled.

Where data protection law requires a legal basis, we rely as appropriate on performing or preparing a contract, our legitimate interests in operating and securing the business, a legal obligation, or consent for activities that require it, such as certain cookies or marketing. You may withdraw consent without affecting earlier lawful processing. A connected organization is responsible for the basis and notices applicable to information in its books.

5. Disclosures and third parties

We may share information with hosting, security, communications, customer relationship management, analytics, recruiting, payment, and support providers acting for us; affiliates and professional advisers; authorities or others when required to comply with law or protect rights; and a successor in a merger, financing, sale, or reorganization. We may disclose information at your direction or with your consent. Our main service providers are Google Workspace (email), Google Cloud (hosting, database, encryption keys, and logs), WorkOS (sign-in and account emails), and Stripe (payments). They process information for us in the United States.

If we later use advertising partners, pixels, or remarketing, information disclosed to them could count as “sale” or “sharing” for cross-context behavioral advertising under some laws even without a payment for data. Where applicable, we will provide a required opt-out and honor qualifying signals. Ototo does not sell personal information or share it for cross-context behavioral advertising. We do not use accounting data, prompts, or responses to train AI models, and we do not disclose them to third parties for their marketing.

6. Marketing choices and privacy rights

You may unsubscribe from promotional email using its link or by contacting privacy@ototo.ai. Unsubscribing does not stop service, security, billing, or other operational messages. If we enable targeted advertising, you may use the choice mechanism then offered and other controls provided by your browser, device, or advertising partner.

Depending on your location and applicable law, you may request access to, correction or deletion of, or a portable copy of personal information; object to or restrict certain processing; withdraw consent; or opt out of sale, sharing, targeted advertising, or certain profiling. These rights have exceptions. Contact privacy@ototo.ai to make a request. We may verify your identity and your authority to act for another person, respond within the period required by law, and explain any denial or available appeal process. If your request concerns information in a connected company’s books, we may refer it to that organization and assist as required.

If you are in the EEA or UK, you may also complain to the relevant supervisory authority. Ototo is offered to businesses in the United States. If we begin offering it in the EEA or UK, we will update this policy with any required representative or data protection contact.

7. Retention and deletion

We retain the defined Ototo activity log until the organization owner deletes the organization. We retain account, billing, inquiry, support, applicant, and technical information for the period reasonably needed for the purposes described above, then delete or deidentify it, subject to legal, tax, security, dispute, and backup needs. Disconnecting a company stops future access through that connection but does not undo changes or delete information already delivered to an assistant.

Specifically: account, organization, and permission data are kept while the organization is active and deleted within 30 days after the organization is deleted or you ask us to delete your account. Connection tokens are revoked and deleted when the company is disconnected or the organization is deleted. Server and technical logs are kept for 30 days. Billing records are kept for seven years for tax and accounting purposes. Support records are kept for three years after your last contact. Marketing records are kept until you unsubscribe, after which we keep only your email address on a suppression list so we do not contact you again. Applicant information is kept for two years after a hiring decision unless you are hired. Database backups are overwritten within 30 days. After an organization is deleted, we keep its billing records and a record of which accounting companies had a free trial or a paid plan, identified by the accounting software’s company ID and dates, so we can apply our trial terms.

8. Security and transfers

We use technical and organizational measures designed to protect information appropriate to the service and its risks. No method is completely secure. Organization administrators should limit permissions and protect accounting and assistant accounts. Report suspected unauthorized use to security@ototo.ai. We will make legally required breach notifications.

Information may be processed in the United States or other countries used by our providers. Where a transfer from the EEA, UK, or another jurisdiction requires safeguards, we will use an applicable mechanism and make required information available. We host Ototo in the United States on Google Cloud. Our main service providers are listed in Section 5. Where a transfer from the EEA, UK, or Switzerland requires safeguards, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, and on our providers’ certifications under the EU-U.S. Data Privacy Framework where they apply. Customers can request a data processing agreement at privacy@ototo.ai.

9. Children, external links, and changes

Ototo is a business service and is not directed to children. We do not knowingly solicit children to create an account. Our site may link to third-party sites or use integrations whose privacy terms are separate from ours.

We may revise this policy as the site and service evolve. We will post the revised date and give additional notice where law requires it. A policy describing a possible future practice does not mean that practice is active, and we will provide any required notice or choice when it begins.

10. Contact

Privacy questions or requests: privacy@ototo.ai. Mailing address: All Up, LLC, 16192 Coastal Highway Lewes, DE 19958 USA. We have not appointed a representative in the EEA, UK, or any US state.