1. Four principles, in plain words
- We encrypt everything. Every document, scan and photograph is encrypted with a key derived separately for you — breaking one file does not open anybody else’s.
- We collect as little as possible. We never ask for a Social Security number or a driver’s license number.
- Deleting means deleting. One tap, no questions, and for real.
- We do not sell or share your personal information, and we run no advertising. Membership is our entire business model.
2. Who is responsible for your information
The business responsible for your personal information is Jakub Bárt, a sole trader registered in the Czech Republic under business ID 23594284, with a registered address at Bezručova 1643/22, 737 01 Český Těšín, Czech Republic.
This Privacy Policy covers the OTTEVA website and the OTTEVA application. For privacy questions, write to info@otteva.com and a person will answer.
OTTEVA is operated from the European Union and the provider is a Czech sole trader, which is also the contracting party for U.S. customers. Your information is stored on servers in Germany.
3. Categories of personal information we collect, and why
| Category | Examples | Why we collect it | How long we keep it |
|---|---|---|---|
| Identifiers | e-mail address, account ID | signing in, sending you reminders and confirmations | while you are a member, then 30 days |
| Your documents and the facts we read from them | contracts, bills, policies; dates, amounts, providers | organizing your paperwork and watching your deadlines | until you delete them, at the latest when you delete the account |
| Profile information you give us | first name, language, state, ZIP code | so the service speaks to you correctly and shows the right dates and units | while you are a member |
| Commercial information | plan, membership status, payment history from our payment provider | running your membership and proving what was charged | 7 years for accounting records |
| Text you write to us | feedback, what is missing, support questions | fixing the service | 12 months |
| Technical and security records | times, statuses, one-way hashes, error records | keeping the service running and detecting attacks | 6 months |
| Property listing content | photos, description, address, price of a property you advertise | publishing the listing you asked us to publish | 12 months of the listing, then removed |
We collect this information directly from you, from documents you choose to upload, and from our payment provider when you pay. We do not buy personal information from data brokers.
We do not collect sensitive personal information as defined by California law: no Social Security number, no driver’s license or passport number, no financial account credentials, no precise geolocation, no racial or ethnic origin, no religious beliefs, no union membership, no genetic or biometric data, no contents of your mail or messages, and no health information.
Health information in particular: the health module is switched off during the beta. We do not collect, read, store or transmit anything about your health.
4. What we deliberately do not collect
- Social Security number, driver’s license number or passport number.
- Your IP address. We store only a one-way hash of it.
- The original filename of anything you upload — it is personal information and does not belong on our disk.
- Anything about your health.
- Precise location. We use your state and ZIP code only, and only because you typed them.
- No tracking cookies. The website and the app carry no third-party analytics, no advertising pixels and no social media trackers; the only thing stored in your browser is your choice of language and text size.
5. Do Not Sell or Share My Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We never have, and the beta contains nothing that would.
Because there is nothing to opt out of, there is no Do Not Sell or Share My Personal Information form to fill in. If that ever changed, we would publish that link, ask you first, and honor an opt-out signal without asking you to create an account.
We also do not use your documents to train artificial intelligence models, ours or anybody else’s, and we do not let our service providers do so.
6. Categories of third parties we disclose information to
Only those who need it to run the service. These are service providers, bound by contract to use your information only for us and never for themselves:
| Who | What they get | Why |
|---|---|---|
| Hetzner Online GmbH (Germany) | everything, encrypted at rest | the servers the service runs on |
| LH.pl sp. z o.o. (Poland) | your e-mail address and the message | sending outgoing e-mail |
| fal.ai (United States) | the single document image you ask us to read | machine reading of text from a photograph of a document |
| Our payment provider, as merchant of record | your e-mail, plan and payment details | taking payment, invoices, refunds and U.S. sales tax |
We may also disclose information when the law requires it, or to protect someone from harm. If we are ever compelled to hand something over, we will tell you unless we are forbidden to.
Services OTTEVA may use later — voice synthesis, a conversational avatar, 3D — are switched off during the beta and receive nothing about you.
No third party collects personal information about you across other websites through OTTEVA, because there are no third-party trackers on our pages at all.
7. Your privacy rights, and how to use them
We give every member the same rights, wherever in the United States you live. You do not have to prove you are a Californian to use them.
- Right to know: ask what personal information we hold about you, where it came from, why we have it and who we disclosed it to.
- Right to access a copy: download everything we hold about you, in a portable file.
- Right to delete: have your account and everything in it erased.
- Right to correct: fix anything inaccurate we hold about you.
- Right to opt out of the sale or sharing of personal information, and of profiling: there is nothing to opt out of, because we do none of these things.
- Right to limit the use of sensitive personal information: we collect none.
- Right to non-discrimination: using any of these rights never costs you anything, never degrades the service, and never changes your price.
How to use them — this is also the process to review and request changes to your information: open the app and go to Me → Privacy and security. Download everything we hold and delete your account are each one tap, and both take effect immediately. You do not need to write to anyone.
If you prefer to write, or if you cannot get into your account, e-mail info@otteva.com. We confirm within 10 days and answer within 45 days, and we will tell you if we need longer. We verify a request by e-mail, from the address on the account — we never ask for a photograph of your ID. An authorized agent may act for you with your written permission.
You may also appeal a decision of ours by replying to our answer with the word appeal, and a human will look at it again. Residents of some states may then complain to their state Attorney General.
8. Do Not Track and Global Privacy Control
Some browsers send a Do Not Track signal. There is no common standard for what a website should do with it, so we do not act on Do Not Track — we simply do not track you in the first place, with or without the signal.
If your browser sends a Global Privacy Control signal, we honor it. In practice it changes nothing, because we do not sell or share personal information.
9. E-mail, and how to stop it
We use your e-mail address to run your membership and, if you want them, to send occasional beta messages. Every e-mail we send carries our physical mailing address, Jakub Bárt, Bezručova 1643/22, 737 01 Český Těšín, Czech Republic, and every optional e-mail carries a working Unsubscribe link.
Unsubscribing is immediate, free, and never requires you to sign in or explain yourself. You can also turn optional e-mail off in the app, in Me → Notifications.
We do not send text messages and we do not make phone calls. Verification codes go by e-mail only.
10. Children
OTTEVA is for adults. You must be 18 or older to use it, and the service is not directed to children. We do not knowingly collect personal information from anyone under 13 years of age.
If a child under 13 has given us information, write to info@otteva.com and we will delete it and close the account.
11. How we keep it safe, and where it lives
Documents are encrypted at rest with a key derived separately for each member. Traffic is encrypted in transit. Access is limited to what is needed to run the service, and every access is recorded.
Your information is stored on servers in Germany, in the European Union, which means it leaves the United States. One service provider, fal.ai, is in the United States and receives only the single document image you ask us to read, at the moment you ask.
No system is perfect. If your information is ever exposed, we will tell you and the authorities of your state as quickly as the law requires and, if we can, sooner.
12. Do we decide about you automatically?
No. We make no decision about you with a legal or similarly significant effect automatically, and we do not profile you or score you. Every action with a consequence is approved by you.
Machine reading of a document is an aid: the result is shown next to the original photograph and you can correct it.
13. Changes to this Privacy Policy
The effective date of this policy is shown at the top of this page. This is a beta draft; it has not yet been reviewed by a U.S. attorney, and that review will happen before full launch.
If we change this policy, we will post the new version on this page with a new effective date. For any change that affects how we use information we already hold about you, we will also e-mail you at least 30 days in advance and say exactly what is changing, so that you can delete your account first if you would rather.
We will not apply a materially different use to information we already collected without asking you first.
14. Contact
Jakub Bárt, Bezručova 1643/22, 737 01 Český Těšín, Czech Republic. E-mail info@otteva.com.
Ask us anything about your information, including what we hold and why. A person answers.