What Otto keeps, and why.

Who we are

Otto (ottofnb.com) is restaurant back-office software, made in Dubai. You can reach us at hello@ottofnb.com.

What we collect

Four kinds of information:

• Account details: your name, your email, your phone number if you give one, and your sign-in codes. Sign-in is handled by Clerk.
• The business records a restaurant enters or connects: supplier bills and photos of them, sales from the point of sale, stock, recipes, waste, bank statements and tax returns.
• From the phone app: a push-notification token, so the app can tell you something is waiting. Photos only when you choose to take or attach one. Face ID or fingerprint stays on the phone and never reaches us.
• Technical records: error reports showing the screen and the workspace involved (Sentry, EU region), and server logs with IP addresses, kept briefly.

What we use it for

We use it to run the service for your restaurant, to read invoice photos automatically, to send the notifications you turned on, and to fix faults.

Reading invoice photos: Anthropic reads the image and returns the figures. The image is not used to train anything.

We do not sell data and we do not advertise.

Who else touches it

These companies handle data on our behalf:

• Supabase: the database, in Frankfurt.
• Fly.io: the servers, in Frankfurt.
• Clerk: sign-in and accounts.
• Cloudflare: the domain, the edge network, and storage of document images.
• Anthropic: automated reading of invoice images.
• Sentry: error reports, EU region.
• Apple and Google: delivery of push notifications.

Each restaurant's data sits in its own database schema. A national tax authority receives invoice data only where the restaurant switches that module on, under its own law.

How long we keep it

For as long as the restaurant is a client. When a client leaves, the owner can export everything. The workspace is then held for 30 days in case of a mistake, and after that it is permanently deleted.

Backups are taken every six hours and held in the EU. They roll off on their own schedule.

Your choices

• Owners can export every table at any time.
• Notifications can be turned off in the phone's settings.
• Camera and photo access is asked for the first time it is needed, and can be withdrawn in the phone's settings.
• To remove an account or a workspace, email hello@ottofnb.com.

Children

Otto is not for anyone under 18.

Changes

When this policy changes, we update this page and the date on it.