Ottomind privacy policy.

1. 01

   Who we are

   Ottomind is the trade name of Temp and Major Inc., which is the controller of the personal data described here for ottomind.dev, the Ottomind app for iPhone, your Ottomind account, Ottomind Search (Match), Ottomind Studio, the Ottomind Store, Cap, Finome and the affiliate programs.

   Contact us about privacy at hello@ottomind.dev.

2. 02

   What we collect

   Your account: your email, password (stored hashed by our sign-in provider), name if you add one, and when you signed in.

   Ottomind Search (Match), on the web and in the app: what you ask for, the brief we draw from it (what, where, when, budget), the businesses we showed you, your conversations with businesses, and reports or blocks you make. Your request is sent to AI models (Anthropic’s Claude models and TypeSafe AI’s Jev, through Vercel AI Gateway) to understand it and rank businesses, and to an embedding model (OpenAI’s, through Vercel AI Gateway) to find businesses that describe the same work in other words. When few or no businesses on Ottomind fit well, the request is also used for a web search (Perplexity, through Vercel AI Gateway) to suggest businesses you can contact directly. Location: if you allow it, your device rounds its location to within about 5 km before sending it, and we use that only to find the nearest town or neighborhood and nearby businesses for your search; your exact location never leaves your device, and the rounded one isn’t stored with your request. Place names and approximate grid squares are looked up with OpenStreetMap and cached without account identifiers (data © OpenStreetMap contributors). When you start a chat, the business sees your request, your brief and your first name with your last initial, never your email. Businesses on Match give us their listing details, their contact email and billing details; we place each listing on the map from the town or neighborhood it’s based in (never a street address) and turn its description into an embedding for search.

   Optional search alerts and profile previews: saving a search stores a private copy of its text and brief for automatic in-app matching. You can pause or delete it from Search alerts. Checks stop after 30 days, and the automatic cleanup removes expired saved searches and their alerts after a further 30 days. Deleting a saved search does not delete the original request or a conversation you started from it. A business-profile preview stays in your browser tab until you discard it or publish; previews older than 24 hours are not restored.

   Launch measurement: for confirmed signed-in accounts, we record which completed searches were viewed, when, and a coarse category and supported city. These events are removed after 90 days. Launch demand summaries cover the previous completed week, require at least ten distinct accounts in each group, and round counts down in groups of five; they never include prompts or account identifiers. Founding-business enrollment records eligibility, participation and promotional credits, and displays an early-member badge on the published business profile.

   Ottomind Studio and the Store: your brief and the AI analysis of it, scopes, messages, files and deliverables in your projects, your team members’ emails and roles, your orders, and your billing details. While you write a brief in the Studio intake, and when you submit it, its text is sent to AI models (Anthropic’s Claude models and TypeSafe AI’s Jev, through Vercel AI Gateway) to draft the analysis and estimate. A project lead reviews the result with you; it isn’t used to make decisions about you on its own. Card details go straight to our payment partner; we never see or store them.

   Cap, for founders: your startup profile, the decks you upload, investors you save, reveal or request intros to, your plan, and AI-assisted investor matches. When you send a deck through Cap, we store and email the recipient’s name and email address, your subject and message, and a tracked link. Intro requests share the note you write with the member you ask.

   Cap, for deck recipients: if someone sends you a deck through Cap, we record when you open the link, how long you view it and your device type, and any response you choose to give (such as “interested”), and we show these to the sender. Every deck email and deck page has an unsubscribe link. If you use it, we add your email address to a suppression list (with how and when it was added) so no founder can send you a Cap deck again. We keep that list with no end date, because it only works while it is kept; only our team can see it.

   Cap investor listings: Cap’s public investor directory is compiled from investment firms’ own websites and other public sources, such as public filings. A listing can include the firm’s name, focus, location, check size, recent activity and the contact email or application link the firm publishes. If a listing is about you or your firm, use “Remove or correct this listing” on its page (no account needed) or email hello@ottomind.dev, and we’ll act on it within 30 days. The request form stores your name, email, request and details, and when our team resolved it; we keep these records after the request is closed. A removed listing is hidden from search, matches and the sitemap, and its published contact email is added to the suppression list.

   Finome creators: your application, including your social handles, audience size and the app idea, your promotion log, and the agreement records for your partnership.

   Finome app promotions: when you follow a promoter’s link (ottomind.dev/go/…), we record the click with the app, the promoter’s code and a salted, one-way hash of your IP address (never the address itself). We then send you to the app with a click id in the link (?fnm=). The app, which may be run by a partner, can report back when that click leads to a signup or payment, with the click id, a hashed email or payment reference and the amount, so the promoter can be credited. For Ottomind’s own apps we keep the click id in a first-party cookie (om_fnm) for the app’s attribution window, 60 days unless the app’s offer says otherwise. Partner apps handle your data under their own privacy policies.

   Affiliates: if you join the affiliate program, your code, which accounts and Finome applications came through your links, clicks on your links (counted with a daily-rotating salted hash of the visitor’s IP address and browser, never the raw values) and the status of each payout. Affiliates see the people they referred only as a masked email (like j•••@example.com) and the product. If you sign up through an affiliate’s link, we record that link with your account so we can pay the affiliate. For payouts, Stripe Connect collects and holds your identity verification (KYC), bank and tax details; we see only the account’s status.

   Nigeria affiliate trial: trial payouts are made in naira by manual bank transfer, outside Stripe. When a payment is due we contact you to confirm your name, bank and account details and, if needed, your identity. We use them only to make and record the payment, and keep the transfer reference with the payout record.

   Public profiles and messages: every account has a profile with a handle and display name taken from your name (never your email), plus any bio and location you add. Profiles are private until you choose to make yours public. Direct messages you send to other members are stored so both of you can read them. You can delete a message from your inbox (it’s erased once both of you have), block a member, or report a message; a report sends our team a copy of the message, which we keep while we review it.

   Waitlists, contact form and job applications: what you type in, such as your email, name, company, message, and for applications your resume and links.

   Campaign attribution: campaign tags and advertising click IDs in the link you followed are saved with your brief to identify which campaigns bring enquiries.

   Invites: who invited whom, so we can credit the inviter. Inviters see only counts and dates, never who signed up. The page your invite link opens, and its preview in messages, shows your first name.

3. 03

   Cookies

   We use cookies the products need: sign-in cookies that keep you signed in, a cookie that remembers which Studio workspace you last opened, and, if you open someone’s invite link, a cookie that remembers the invite for 30 days, or, if you open an affiliate’s link, a cookie that remembers the affiliate for 60 days. A Finome promotion link for one of our own apps sets the om_fnm cookie described above. On campaign and intake pages, if you allow ad tracking, the Meta Pixel uses advertising cookies to measure page visits and submitted briefs. You can decline or change your choice using the ad tracking control on those pages. We remember that choice in local storage and respect Global Privacy Control. Ad tracking is optional and does not affect your ability to submit a brief.

4. 04

   How we use it

   To run the products you use: your projects, orders, plans and billing; to reply when you write to us; to send the emails you’d expect (sign-in links, invoices, waitlist and project updates); to credit and pay affiliates and promoters; to keep the records the law requires; to keep the services secure, including limiting repeated requests from the same network; and to improve the products.

5. 05

   Legal bases (EU and UK visitors)

   If you’re in the European Economic Area or the UK, we rely on these legal bases:

   • Contract: running your account, projects, orders, subscriptions, and affiliate and Finome partnerships.
   • Legitimate interests: security and abuse prevention, attributing referrals and clicks, compiling Cap’s investor directory from public sources, and improving the products. You can object to these at any time.
   • Consent: the Meta Pixel and its advertising cookies. You can withdraw consent at any time with the ad tracking control.
   • Legal obligation: tax and accounting records.
6. 06

   Who processes it

   We don’t sell your data for money. These services process it on our behalf:

   • Supabase: our database, file storage and sign-in.
   • Vercel: hosting the site and apps, and Vercel AI Gateway, which routes our AI requests.
   • AI model providers, through Vercel AI Gateway: Anthropic (Claude models) and TypeSafe AI (Jev), for analysing Studio briefs, matching Cap investors and reading public investor websites. We send only the text needed for the task.
   • Stripe: payments, invoices and subscriptions, and, through Stripe Connect, affiliate and promoter identity verification, tax forms and payouts.
   • Resend: sending our emails, including Cap deck sends.
   • Meta, only when you allow ad tracking: campaign page visits, successful intake submissions and associated browser and cookie identifiers for advertising measurement. We do not include your brief, name or email in the events we send, and we have turned off the pixel’s automatic collection of page content.

   We share data otherwise only when the law requires it, or to protect our users and services.

7. 07

   California: sharing for advertising

   We don’t sell personal information for money. When you allow ad tracking, the Meta Pixel sends Meta your page visits and cookie identifiers for advertising measurement, which California law (the CPRA) may treat as “sharing” for cross-context behavioral advertising. To opt out, choose “No thanks” on the ad tracking banner, or “Turn off ad tracking” on campaign and intake pages, or turn on Global Privacy Control in your browser, which we treat as an opt-out. You can also use the rights below. We don’t discriminate against you for using them.

8. 08

   International transfers

   We’re based in the United States, and our providers process data in the United States and other countries. If you’re outside the United States, your data is transferred there. Where EU or UK law requires it, we rely on the safeguards our providers offer for these transfers, such as the European Commission’s standard contractual clauses.

9. 09

   Your rights

   Depending on where you live, you can ask us to give you access to your data, correct it, delete it, give you a portable copy, or stop or limit using it (including objecting to uses based on legitimate interests). You can withdraw consent at any time without affecting what we did before. Email hello@ottomind.dev and we’ll respond within 30 days. We may need to confirm it’s you first.

   If you’re in the EEA or the UK and unhappy with how we handle your data, you can complain to your local data protection supervisory authority (in the UK, the ICO). We’d appreciate the chance to fix it first.

10. 10

    Keeping and removing your data

    We keep your data while your account or project is active. When you delete your account or ask us to delete your data, we delete it within 30 days, except what we must keep: invoices and payment records are kept as long as tax law requires, and payout records as long as tax and accounting rules require. Messages you sent to other members may stay in their inbox. Partner apps keep what they collect under their own policies.

    To see, correct or delete your data, email hello@ottomind.dev. In the Ottomind app you can delete your account yourself under Account → Delete account; that deletes your account, requests and conversations.

11. 11

    Children

    Ottomind is not for anyone under 18, and we don’t knowingly collect data from them. If you believe a child has given us personal data, email hello@ottomind.dev and we’ll delete it.

12. 12

    Changes and contact

    If we change this policy, we update the date at the top, and tell you by email or in the product when a change is significant. Questions or requests: hello@ottomind.dev. See also the terms of use.

Questions? Email hello@ottomind.dev. See also our terms of use.