Effective date: March 23, 2026
Otto (“the Platform”, “we”, “us”) is an AI-powered real estate admin assistant built for licensed Alberta REALTORS®. The Platform is operated by its developer (“Operator”). This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with Alberta’s Personal Information Protection Act (PIPA, SA 2003, c P-6.5).
Questions or access requests may be directed to our privacy officer at: privacy@otto.app
When you register, we collect your name, email address, and a hashed password. If you set up a REALTOR® profile, we also collect your RECA licence number, brokerage name and address, and contact details.
You may store your Pillar9/MLS login credentials so the Platform can automate form filling on your behalf. Credentials are encrypted at rest using AES-256-GCM envelope encryption. They are decrypted only at the moment of use and are never stored in plain text or transmitted in logs.
The Platform processes property data (addresses, listing details, MLS fields) and real estate transaction documents that you upload. This data may include personal information about your clients (buyers and sellers) such as names, addresses, contact details, and financial terms contained in AREA forms.
Data Minimization: MLS-extracted data (document data, photo analysis data, and merged listing data) is automatically purged from our database within 24 hours of a successful listing submission. We do not retain MLS content beyond the session in which it was processed.
If you use the voice input feature, your speech is streamed in real time to ElevenLabs or Google Gemini for transcription. Raw audio recordings are not stored by Otto. Only the resulting text transcription is retained as part of your conversation history (see Section 5 for retention periods). Audio data is processed solely for the purpose of converting your spoken input into text for the AI assistant.
We maintain an audit log of credential access, listing submissions, and key platform events for security purposes. Audit logs are retained for up to two years and then deleted. We also collect standard server-side logs including IP addresses and user agents.
Billing is handled by Stripe. We store your Stripe customer ID and subscription status but do not store full credit card details. Billing records are retained for seven years for tax compliance.
We do not use your data or your clients’ data to train or fine-tune any AI model. All AI processing is performed via Anthropic’s commercial API, which does not train on customer API inputs by default.
Otto uses third-party AI services to power its core features. Before you can use the Platform, we ask for your explicit consent to share certain data with these services. The following describes exactly what data is shared, with whom, and for what purpose:
Data shared with AI services:
Third-party AI service providers:
Each of these service providers is contractually prohibited from using your data to train or improve their AI models. Data is processed only for the duration of the request (session-only processing) and is not retained by these providers beyond what is necessary to deliver the service.
You will be asked to provide explicit consent to this data sharing when you first use Otto. You may withdraw consent at any time by contacting us at privacy@otto.app, though this will prevent the Platform from providing its AI-powered features.
We share personal information with the following service providers only to the extent necessary to deliver the Platform’s services. Each processor is bound by data processing obligations:
| Processor | Purpose | Data Shared |
|---|---|---|
| Anthropic (Claude API) | AI document analysis, content generation | Listing data, document content, photos — session only, not retained for training |
| ElevenLabs | Voice transcription | Audio stream for real-time speech-to-text — audio is not retained |
| Google (Gemini API) | Voice transcription (alternative provider) | Audio stream for real-time speech-to-text — audio is not retained |
| DocuSeal | Electronic signatures | Filled AREA form PDFs, signer names and emails |
| Cloudflare R2 | File storage | Uploaded listing documents and photos |
| Supabase (PostgreSQL) | Database | All structured data described in Section 2 |
| Stripe | Payment processing | Billing details, subscription status |
| Data Type | Retention Period |
|---|---|
| MLS-extracted data (documentData, photoData, finalData) | Purged within 24 hours of successful submission |
| Listing records (metadata only, no MLS content) | Until you delete your account or the listing |
| Deal documents (signed PDFs) | 1 year from signing date |
| Conversation messages | 1 year |
| Security audit logs | 2 years |
| Billing records | 7 years (tax compliance) |
We implement the following security measures:
In the event of a security breach involving personal information, we will notify affected users and the Alberta Privacy Commissioner as required by PIPA.
As an Alberta resident, you have the right to:
To exercise these rights, contact us at privacy@otto.app. We will respond within 30 days.
When you use the Platform to process real estate transactions, you may input personal information about your clients. You are responsible for ensuring you have the appropriate consent from your clients to process their information through this Platform, consistent with your obligations under PIPA and RECA’s privacy guidelines. We act as a processor of that information on your behalf.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a notice within the Platform. Continued use of the Platform after notice constitutes acceptance of the updated policy.
Privacy Officer
Otto
Email: privacy@otto.app