Privacy Policy

Otis is a marketing platform operated by Sawu Pty Ltd, a company registered in South Africa. When this document says “we” or “Otis”, it means Sawu Pty Ltd operating the Otis service at smartotis.co.za.

You can reach us at theo@smartotis.co.za for anything covered in this policy.

We collect three kinds of data from customers using Otis:

• Account information. Your name, email address, and the organisation you belong to. Handled by our authentication provider Clerk.
• Marketing data from platforms you connect. When you connect Meta, Google Ads, Google Analytics 4, or a customer relationship management platform, Otis reads your campaign performance, spend, impressions, clicks, conversions, revenue, and related metrics. Access is strictly read-only. We never modify anything on a connected platform.
• Business context you upload. Brand guide documents, logos, product photos, competitor references, business descriptions, and anything else you put into Otis to help the AI understand your business.
• Conversations with the AI team. Chat history with Nia, Maya, Cleo, Neo, and Quinn is stored so the team keeps context across sessions.
• Product usage telemetry. Standard web analytics on how you use Otis itself so we can improve it. No third-party ad tracking on our own product surfaces.

• Render your dashboard, briefs, and creative outputs.
• Generate marketing recommendations, campaign plans, ad copy, and images specific to your business.
• Improve the Otis service. Aggregated, non-identifying signals only. We do not train external AI models on your data.
• Send you occasional service updates (billing, downtime, security). We do not sell your data or use it for advertising to you.

Otis runs on infrastructure provided by trusted subprocessors. Each processes your data only to deliver the specific technical service we use them for.

• Anthropic (Claude API) for AI generation and analysis.
• Vercel for application hosting.
• Neon for the primary Postgres database.
• Clerk for user authentication and organisation management.
• fal.ai (or an equivalent image model provider) for AI image generation.
• Google (Analytics Data API, Google Ads API) and Meta (Marketing API) as the platforms you connect. We call their APIs on your behalf using the read-only access you grant us. We never share your data between platforms.

We do not sell your data. We do not share it with advertisers. We do not use it to train third-party AI models.

When you connect Google Analytics 4, Google Ads, or Meta to Otis, you grant us read-only access via OAuth. We use those permissions only to read the data required to render your dashboard and generate your briefs. Specifically:

• We do not create, modify, pause, or delete campaigns on your connected platforms.
• We do not change account settings.
• We do not read data from customer accounts other than the ones you explicitly connect.
• You can revoke Otis's access at any time from the connected platform's own security settings, or by disconnecting from Otis Settings.

Your data is stored on infrastructure hosted in the European Union and the United States, encrypted at rest and in transit. Backups are retained for up to 30 days.

We keep your data for as long as your account is active. If you delete your account, we remove your data from active systems within 30 days and from backups within 90 days.

You can request an export or deletion of your data at any time by emailing theo@smartotis.co.za.

Depending on where you are, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. In South Africa the Protection of Personal Information Act (POPIA) applies. If you are in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) applies.

Contact us at theo@smartotis.co.za to exercise any of these rights.

Otis uses essential cookies for authentication and session management. We do not use advertising cookies, cross-site tracking, or third-party analytics on our own product surfaces.

If we make material changes to this policy, we will notify active users by email at least 14 days before the changes take effect. Minor clarifications are noted here with an updated effective date.

Anything unclear or you want to see how a specific piece of your data is used, email theo@smartotis.co.za. We reply within two business days.