Privacy Policy

We collect the following data:

• •Account information: email, name, phone, country, language
• •Business data: company name, business category
• •Client data: your clients' information for review campaigns
• •Synced reviews: reviews from Google, Facebook, TripAdvisor, Trustpilot, Judge.me, Yotpo
• •Usage data: usage statistics, technical logs

Your data is used to:

• •Provide and improve our services
• •Send review campaigns to your clients
• •Sync and analyze your reviews from connected platforms
• •Generate AI analyses and reports
• •Process your payments via Stripe
• •Send you important notifications

We implement robust security measures:

• •Encryption of data in transit (HTTPS/TLS)
• •Secure storage on certified servers
• •Restricted access to personal data
• •Secure authentication and JWT tokens
• •Regular security audits

We never sell your data. We only share it with:

• •Stripe: for payment processing
• •Brevo: for transactional emails
• •Twilio: for SMS sending
• •Mistral AI: for AI analysis of reviews
• •Platforms you connect (Google, Facebook, etc.): according to your authorizations

Some of your data may be transferred outside the European Union:

• •Stripe: payment data is processed by Stripe Payments Europe Ltd (Ireland, EU), which may transfer some data to Stripe Inc. in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. More info: https://stripe.com/legal/privacy-shield
• •Twilio: SMS routing is processed by Twilio Inc. (United States) under SCCs.
• •Vercel: web hosting is provided by Vercel Inc. (United States), under SCCs.
• •MongoDB Atlas: database hosting may use AWS regions outside the EU; transfers are governed by SCCs.
• •Google Analytics & Meta Pixel: anonymized analytics data may be processed by Google LLC and Meta Platforms Inc. (United States) under SCCs (only when you accept analytics cookies).
• •Connected platforms (Google, Facebook): your authorizations are scoped to the specific data you grant access to.
• •You may exercise your right of access and objection to these transfers by contacting us at support@otiview.com.

Under GDPR, you have the following rights:

• •Right to access your personal data
• •Right to rectify inaccurate data
• •Right to erasure (right to be forgotten)
• •Right to data portability
• •Right to object to processing
• •Right to withdraw consent at any time

For any questions regarding your personal data or to exercise your rights, contact us at: