Privacy Policy

This Privacy Policy describes how Ottit Inc., a Delaware corporation doing business as Ottit ("Ottit," "we," "us," or "our"), collects, uses, discloses, and protects information when you access or use the website located at www.ottit.com, including all subdomains, sub-sites, and microsites (collectively, the "Site"), or otherwise interact with us.

This Privacy Policy applies to information collected through the Site, through forms you submit to us, through email and other communications with us, and in connection with marketing or business-development activities. Information collected in connection with a paid engagement is governed by the applicable Service Agreement and any data processing terms incorporated into it.

By accessing or using the Site, or by submitting information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect the following categories of information:

1.1 Information You Provide Directly

Identity and contact information: name, business name, job title, business email, business phone number, mailing address, and similar identifiers you submit through a form (such as a contact form, audit request, or newsletter signup) or in correspondence with us.
Communications: the content of inquiries, messages, and other communications you send us.
Marketing information: preferences and interests you share, including responses to surveys or marketing communications.
Business information: information about your company, role, industry, and use case that you provide in evaluating a potential engagement.

1.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

Device and connection information: IP address, device type, operating system, browser type and version, time zone, language preferences, and referring/exit pages.
Usage information: pages viewed, links clicked, time spent on pages, session duration, navigation paths, and similar interaction data.
Cookies and similar technologies: see Section 5 below.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

Service providers that support our marketing, analytics, customer relationship management, and email infrastructure.
Publicly available sources, such as company websites, business directories, and professional networking platforms, used to verify or supplement information you have provided.

1.4 Sensitive Personal Information

We do not knowingly collect sensitive personal information (as defined under applicable U.S. state privacy laws) through the Site for purposes that require additional disclosure or opt-in. If you voluntarily submit such information to us, we will treat it consistently with this Privacy Policy and applicable law.

2. How We Use Information

We use information for the following business and commercial purposes:

(a) to operate, maintain, secure, and improve the Site;(b) to respond to your inquiries and provide information you request;(c) to evaluate, establish, and manage potential and existing engagements;(d) to communicate with you about Ottit's services, content, events, and offerings;(e) to send marketing communications, where permitted by law;(f) to analyze how the Site is used and to develop, improve, and personalize the Site and our services;(g) to develop, train, evaluate, and improve our proprietary in-house tools and workflows, including automation and artificial-intelligence-assisted systems, in accordance with Section 4 below;(h) to detect, prevent, investigate, and respond to fraud, security incidents, abuse, and unlawful activity;(i) to comply with applicable laws, regulations, legal process, and lawful requests from government authorities;(j) to enforce our Terms and Conditions and any applicable Service Agreement, and to protect our rights, property, safety, and the rights, property, and safety of others; and(k) for any other purpose for which we obtain your consent.

We may also create and use de-identified, aggregated, or anonymized data that does not identify you for any lawful purpose, including business operations, research, analytics, and improvement of our services and tools.

3. We Do Not Sell Your Personal Information

Ottit does not sell your personal information for monetary consideration, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

We share personal information only as described in Section 6 of this Privacy Policy.

4. Use of In-House Tools and Automated Processing

Ottit develops and operates proprietary in-house tools, software, automation systems, and artificial-intelligence-assisted technology (collectively, the "Tools"). The Tools support our operations, the Site, marketing, content development, and (under a separate Service Agreement) client services. We may use the Tools to process information described in this Privacy Policy.

Outputs of the Tools may be reviewed by Ottit personnel before being used or relied upon. Ottit may improve, refine, and develop the Tools over time using information lawfully available to us, including aggregated and de-identified data, internal operational data, and (subject to the applicable Service Agreement) client work product. We do not sell, rent, license, or share your personal information with any third party for the purpose of training that third party's artificial-intelligence models.

If you have questions about how the Tools may process information related to you, contact us at [email protected].

5. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, clear GIFs, software development kits (SDKs), tags, and similar technologies (collectively, "Tracking Technologies") to operate the Site, analyze traffic, understand user behavior, and (where applicable) deliver and measure marketing.

We may use Tracking Technologies for the following general purposes:

Strictly necessary — to operate the Site, authenticate users where applicable, and provide essential functionality.
Performance and analytics — to understand how visitors interact with the Site, measure usage, and improve the Site.
Functional — to remember your preferences, settings, and choices, and to personalize your experience.
Marketing and advertising — to deliver, target, and measure marketing communications, including retargeting and conversion tracking, through our marketing partners and service providers.

The specific Tracking Technologies we use, and the third-party providers that supply them, may change from time to time as we update our analytics and marketing infrastructure. Information collected through Tracking Technologies may be shared with the service providers that supply them, who are permitted to use that information only as described in Section 6.

Most web browsers allow you to control Tracking Technologies through their settings, and you may be able to opt out of certain marketing and advertising Tracking Technologies through industry opt-out tools (such as those offered by the Network Advertising Initiative at www.networkadvertising.org/choices or the Digital Advertising Alliance at www.aboutads.info/choices). Disabling Tracking Technologies may affect the functionality of the Site.

We honor opt-out preference signals (such as the Global Privacy Control) where required by applicable law.

6. How We Share Information

We may share information in the following limited circumstances:

(a) Service providers: with vendors, contractors, and other service providers that perform services on our behalf — including website hosting, email and communications infrastructure, analytics, customer relationship management, marketing, and security — who are bound by written confidentiality and data protection obligations and are permitted to use the information only as necessary to provide services to Ottit.(b) Professional advisors: with our attorneys, accountants, auditors, insurers, and similar advisors, under appropriate confidentiality obligations.(c) Legal compliance and protection: when we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or a lawful government request; to enforce our Terms and Conditions or any Service Agreement; to protect the safety, rights, or property of Ottit, our clients, our personnel, or others; or to investigate, prevent, or address fraud, security, or technical issues.(d) Business transactions: in connection with any merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, in which case information may be transferred as part of the transaction.(e) With your consent: in any other circumstance with your direction or consent.(f) Aggregate or de-identified data: we may share aggregated or de-identified data that cannot reasonably be used to identify you for any lawful business purpose.

7. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide and improve our services, to meet our legal, accounting, and regulatory obligations, to resolve disputes, and to enforce our agreements. When we no longer need personal information, we will delete, de-identify, or anonymize it, subject to applicable legal retention requirements.

8. Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect from unauthorized access, use, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security and you transmit information to us at your own risk. In the event of a security incident affecting your personal information, we will notify you as required by applicable law.

9. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information.

9.1 General Rights

Subject to applicable law and any exceptions or exemptions, you may:

Request access to the personal information we hold about you.
Request correction of personal information that is inaccurate or incomplete.
Request deletion of personal information.
Object to or restrict certain processing of your personal information.
Withdraw consent where we rely on consent to process your personal information.

To exercise a right, contact us at [email protected]. We will respond within the time required by applicable law. We may need to verify your identity before fulfilling a request and may decline a request to the extent permitted by law.

9.2 California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with the following rights, subject to certain exceptions:

Right to know: the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we have disclosed it.
Right to delete personal information we have collected from you.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing: Ottit does not sell personal information for monetary consideration and does not share personal information for cross-context behavioral advertising. Accordingly, there is no opt-out process to undertake on our end. We will continue to honor opt-out preference signals where required.
Right to limit use of sensitive personal information: Ottit does not use or disclose sensitive personal information beyond what is necessary to provide the services and operate the Site, as those terms are defined under CCPA/CPRA, so this right is not implicated by our practices. If our practices change, we will update this Privacy Policy accordingly.
Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of personal information we collect (using CCPA/CPRA categories): identifiers; commercial information; internet or other electronic network activity information; geolocation data (general); professional or employment-related information; and inferences drawn from the foregoing.

Sources of personal information: directly from you; automatically through the Site; from third parties and publicly available sources, as described in Section 1.

Purposes for collection: as described in Section 2.

Categories of third parties to whom we disclose personal information for business purposes: as described in Section 6.

To exercise California rights: submit a request to [email protected]. You may also designate an authorized agent to make a request on your behalf, in which case we will require written proof of the agent's authority and verification of your identity.

9.3 Other U.S. State Privacy Rights

If you are a resident of another U.S. state with a comprehensive privacy law (including without limitation Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Tennessee, Indiana, New Hampshire, Minnesota, Maryland, Rhode Island, New Jersey, Nebraska, and Kentucky), you may have rights similar to those described in Section 9.1 above. To exercise any such right, contact us at [email protected]. We will respond as required by applicable law.

If we deny your request, you may have a right to appeal that decision. To appeal, reply to our written denial within the timeframe specified in our response, or send an appeal request to [email protected].

10. Children's Privacy

The Site is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe a child has provided personal information to us, please contact us at [email protected].

11. International Users

Ottit is based in the United States, and the Site and our servers are located in the United States. If you access the Site or submit information to us from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection rules than your country. By using the Site or submitting information to us, you consent to this transfer.

12. Third-Party Sites and Services

The Site may contain links to, or integrations with, third-party websites and services. We are not responsible for the privacy practices or content of any third-party site or service. We encourage you to review the privacy policies of any third-party site or service you visit or use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised Privacy Policy on the Site with an updated "Effective Date" and, where required by law, provide additional notice (such as by email or a prominent notice on the Site). Your continued use of the Site after the Effective Date constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

Questions, comments, or requests regarding this Privacy Policy or our privacy practices should be directed to:

Ottit Inc.

1954 Placentia Ave, Suite 208
Costa Mesa, CA 92627

Email: [email protected]
Web: www.ottit.com

Effective Date: 06/01/26
Last Updated: 05/27/26