This Privacy Policy explains what information OtterContact ("we", "us", "our") collects through ottercontact.com and the OtterContact Mail, OtterContact Connect, and OtterContact Sync services (together, the "Services"), and how we use, store, and protect it.
1. What we collect
Account information
When you create an account, we collect your name and email address. If you purchase a license or subscription, our payment processor collects billing details directly (see Section 3) — we retain a reference to the transaction but not your card number.
License and activation data
When you activate a license key on a site running OtterContact Mail or Connect, the plugin sends us the site's URL so we can enforce your plan's site limit and validate the key on later requests. We store that URL, the activation and deactivation timestamps, and the last time the key was checked.
Download logs
When you download a plugin build, we record which product, platform, and version you downloaded, the date, and a one-way hash of your IP address (not the address itself) — used only for basic abuse prevention, never to identify you personally.
What we do not collect
OtterContact Mail, Connect, and Sync process end-customer form submissions (names, emails, and other fields your visitors submit) directly between your own site or Sync account and the provider or CRM you've connected — Mailchimp, Constant Contact, Zoho, HubSpot, Salesforce, and the others we support. That data flows from your visitor's browser to your connected provider; it is never sent to, proxied through, or stored on OtterContact's own servers. We have no visibility into and do not store your end customers' form data.
2. How we use this information
- To create and maintain your account and authenticate you when you log in;
- To issue, validate, and enforce license keys and site activation limits;
- To process payments and manage subscriptions, renewals, and refunds;
- To send transactional email — account verification, purchase confirmations and license keys, password resets, and replies to messages you send us;
- To respond to support requests sent via our contact form or directly by email;
- To detect and prevent abuse of downloads or license activation.
We do not sell your personal information, and we do not use it for advertising.
3. Payment processing
Payments for Pro/Agency licenses and Sync subscriptions are handled by a third-party payment processor acting as merchant of record (currently transitioning to Dodo Payments). When you check out, your payment details — card number, billing address, and similar — are collected and processed directly by that processor under its own privacy policy and security standards (including PCI-DSS compliance); we never receive or store your full card number. We retain the transaction/subscription reference the processor gives us, so we can match a payment to your license and handle renewals, cancellations, and refunds.
4. Cookies and analytics
This site uses only the cookies necessary to keep you signed in and to protect forms against cross-site request forgery (a session cookie and a CSRF token). We do not run any analytics, advertising, or third-party tracking scripts on ottercontact.com at this time — there is nothing here beyond what's needed to operate your login session. If that changes, we'll update this section and this page's "Last updated" date.
5. Data retention and deletion
We retain account and license data for as long as your account is active, and for a reasonable period afterward to satisfy tax, accounting, and legal obligations (typically no longer than 7 years for billing records). You can request deletion of your account and associated data at any time by emailing ello@ottercontact.com; we'll delete or anonymize what we hold within a reasonable time, except where we're required to retain records by law (for example, completed transaction records for tax purposes). Deleting your account deactivates any license keys issued to it.
6. Data sharing
We share data only with the service providers needed to run the Services: our payment processor (for billing), our email delivery provider (for transactional email), and our hosting infrastructure provider. We do not sell or rent your information to third parties for their own marketing purposes. We may disclose information if required by law or to protect the rights, property, or safety of OtterContact, our users, or others.
7. Your rights
Depending on where you're located, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. You can exercise any of these by emailing ello@ottercontact.com; most account data can also be viewed and updated directly from your Dashboard or Profile settings once logged in.
8. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above and, where practical, notify account holders by email.
9. Contact
Questions about this policy or your data can be sent to ello@ottercontact.com, or by mail to OtterContact, Mumbai, India.