Privacy Policy

Last updated: August 3, 2026

This Privacy Policy describes how OtterPilot (“we”, “our”, or “us”) collects, uses, and shares information when you use our platform. We are committed to protecting your privacy and handling your data in a transparent, lawful manner.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and a hashed password. If you sign in via Meta OAuth, we receive your Meta user ID and public profile information as authorized by you.

Meta Platform Data

When you connect your Meta account, we store encrypted access tokens to communicate with the Meta Graph API on your behalf. Depending on the permissions you grant, this may include:

  • Facebook Page names, IDs, and metadata
  • Instagram Business account details
  • Messenger and Instagram DM message content (for inbox display only)
  • Post, story, and ad data associated with your Pages
  • Audience analytics and insights (aggregated, non-personal)

Usage Data

We automatically collect information about how you interact with OtterPilot, including IP address, browser type, pages visited, features used, and timestamps. This is used to improve the product and diagnose issues.

Cookies

We use essential cookies to maintain your session and preference cookies to remember your settings. We do not use third-party advertising cookies.

2. How We Use Your Information

We use your data to:

  • Provide, operate, and improve the OtterPilot service
  • Authenticate you and maintain your session
  • Communicate with the Meta Graph API on your behalf
  • Send transactional emails (account confirmations, security alerts)
  • Respond to support requests
  • Analyze usage patterns to improve features and performance
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your message content for advertising purposes.

3. How We Store and Protect Your Data

All data is stored on secure servers. Meta access tokens are encrypted at rest using industry-standard encryption. Passwords are hashed using bcrypt and never stored in plaintext. We use HTTPS for all data in transit.

We retain your data for as long as your account is active, or as required by law. If you delete your account, we will delete or anonymize your personal data within 30 days.

4. Sharing of Information

We do not sell, trade, or rent your personal information. We may share data with:

  • Service providers — trusted vendors who help us operate the platform (e.g., cloud hosting, email delivery), bound by data processing agreements
  • Meta Platforms, Inc. — as required to process API requests you initiate
  • Legal authorities — when required by law, court order, or to protect the rights and safety of others

5. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your personal data
  • Withdraw consent for data processing
  • Object to processing based on legitimate interests
  • Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at privacy@ottercybertech.com or visit our Data Deletion page for instructions on removing your data.

6. Meta Data Practices

OtterPilot uses the Meta Graph API in compliance with Meta's Platform Terms. We only request permissions that are necessary to provide the features you use. We do not share your Meta data with third parties beyond what is described in this policy.

You can revoke OtterPilot's access to your Meta account at any time through your Facebook App Settings. Revoking access will not delete data already stored in OtterPilot — you must separately request data deletion.

7. Children's Privacy

OtterPilot is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately so we can delete it.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated date. Continued use of OtterPilot after the changes take effect constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions or to exercise your data rights, contact us at: privacy@ottercybertech.com