Your trust is our top priority. Otterleo is built on industry-standard security infrastructure, utilizing HTTPS/TLS encryption for data in transit and Row-Level Security (RLS) for data at rest. We do not sell, monetize, or trade your personal information.

To deliver an interactive AI experience, we collect information across the following categories:

• Account & Credentials: Full Name, Username, and Email Address for authentication and account management.
• User-Generated Content: Canvas drawings, sketches, and profile avatars uploaded or submitted to the app.
• Derivative & Device Logs: IP addresses, browser types, device information, and activity logs captured via infrastructure providers.

We do not share data with ad networks, affiliate programs, or business partners. We only disclose information to reliable service providers required to operate Otterleo:

Our core feature uses AI platforms to evaluate drawings and offer feedback. If you wish to opt out of AI-based personal information processing, you can:

• Manage your data preferences directly inside your Account Settings.
• Submit an opt-out request by emailing us at otterleosupport@gmail.com.

Otterleo uses standard essential cookies and local storage to keep you logged in securely (via Supabase Auth) and analyze minimal app traffic (via Vercel Analytics). You can disable cookies through your browser settings, though some authentication features may not function properly.

We retain your personal data for as long as your user account remains active. All users worldwide have the right to access, inspect, edit, or delete their personal information at any time.

Otterleo does not maintain a formally appointed Data Protection Officer (DPO). All privacy requests, access inquiries, and legal concerns are managed directly by our technical support team.