Skip to content
Legal

Privacy Policy

Clear privacy, by default. Here is what we collect, why, and the control you have.

Last updated: 20 July 2026

Information we collect

Account details you provide — such as your name, email address, and profile information — when you create an Otaly account.

Event and registration data — the events you create or register for, RSVPs, ticket selections, and any custom questions a host asks.

Payment information — processed by third-party payment providers. Otaly does not store full card numbers; we receive only the limited transaction data needed to operate ticketing and payouts.

Usage data — device, browser, and interaction information collected to keep the service secure, reliable, and improving.

AI interactions — questions you ask our assistants and content you ask AI features to generate, used to provide and improve those features.

How we use your information

To operate the service: publishing event pages, processing registrations and tickets, sending reminders, and enabling host–attendee communication.

To provide AI assistance for descriptions, cover art, attendee questions, and voice/chat support.

To keep Otaly safe — detecting fraud and abuse — and to comply with legal obligations.

To improve the product and understand how features are used, in aggregate.

AI and your data

AI is a teammate, not a take-over. We do not train foundation models on your private event data, and hosts remain responsible for reviewing AI-generated content and attendee-facing answers before relying on them.

How we share information

With event hosts and attendees as needed to run an event you create or join (for example, a host can see who registered).

With service providers — such as payment processors, infrastructure, email, and AI providers — under contracts that limit their use of your data.

When required by law, or to protect the rights, safety, and security of Otaly, our users, and the public.

If a host enables custom-domain / branded display, visitors to that hostname may see the same channel and event information the host already publishes on Otaly. That hostname is controlled by the host; Otaly provides display and routing infrastructure only, as described in our Terms (Custom domains & branded display).

Cookies

We use only the cookies and similar technologies needed to keep the service working and secure. Where consent is required, you control non-essential cookies.

Custom-domain display may set technical cookies or similar storage needed for security and delivery on that hostname; it is not a separate analytics product unless we document otherwise.

Data retention

We keep personal data for as long as your account is active or as needed to provide the service, then retain only what we must to meet legal, accounting, or security obligations.

If you delete your account, your personal data is deleted or irreversibly anonymized within 90 days at the latest. Three narrow categories outlive deletion: billing and transaction records we are legally required to retain (kept for the statutory tax and accounting period), minimal fraud- and abuse-prevention signals, and your username — which stays permanently reserved for you alone so nobody else can ever claim it or impersonate you.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

You can also delete your account yourself at any time from Settings → Account in the Otaly app — no need to contact us. See the account deletion section below for exactly what happens.

International transfers & children

Otaly operates internationally; where data is transferred across borders we use appropriate safeguards. Otaly is not directed to children, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected here with an updated date.

Account deletion

Delete your account any time from Settings → Account in the app. Deletion is permanent: your profile and content are removed, your sign-in methods (including Sign in with Apple) are disconnected, and none of your data can be restored if you return. Your username stays reserved for you alone. Full details on the account deletion page.

Contact

Questions about privacy or a data request? Reach us through the contact page.