Privacy Policy

01Who we are

Otley is made by Drillby, Inc., 1111B S Governors Ave #37916, Dover, DE 19904, USA. When this policy says “we”, it means Drillby. You can reach us through the chat on this site.

02What we collect

• Joining the waitlist: your email address.
• Buying an Early Access seat: your email, the name and billing country you give Stripe, your card’s brand and last four digits, and your business tax ID if you add one.
• Writing to us: what you send in the chat or the contact form, and the name and email you give, so we can answer. The chat remembers your browser, so a conversation is still there when you come back.
• Visiting otley.me: how the site is used, like pages viewed and buttons clicked, your type of device and your approximate location from your IP address. Cookies remember your browser between visits, and we may record how you move through the pages, never what you type; our Cookie Policy explains them.
• Linking it to you: when you join the waitlist or buy a seat, your visits are linked to your email, so we can see what brought you to Otley.

03How we use it

To keep your place on the waitlist and tell you when Otley opens. To confirm your seat, send your invoice and your invite. To answer you, to understand what works on the site so we can improve it, and to keep it safe from abuse, like repeated sign-ups.

We don’t use your data for advertising, and we don’t build a profile of you.

04Who we share it with

Only the services that run Otley for us, each bound to protect it:

• Stripe for payments and invoices
• Resend to send our emails
• Vercel to host otley.me
• Upstash to keep the seat records
• Intercom for the chat where you write to us
• An analytics service to understand how otley.me is used

We never sell your data. We would only share more if the law required it.

05Where it’s processed

The services we use run in the United States, so your data is processed there. If you’re outside the US, we rely on the safeguards the law requires for that transfer.

06Your mail, once Otley opens

Otley reads your mail to do its job: screening senders, filing what matters, finding codes and receipts. Your mail is encrypted at rest and in transit, and nobody at Otley reads it.

Before the public launch we’ll publish exactly how the app handles your mail, and email you when we do.

07How we protect it

Data is encrypted in transit and at rest, and only the people who need it can reach it. No system is perfectly secure, so we can’t promise nothing will ever go wrong. If something does, we’ll tell you quickly.

08How long we keep it

• Waitlist: until you unsubscribe or ask us to delete it.
• Payments and invoices: as long as tax law requires, usually 7 years.
• Conversations with us, in the chat or by email: 2 years, unless you ask us to delete them sooner.
• Site usage: only as long as it helps us improve the site.

When you ask us to delete your data, we delete it, except records the law makes us keep, like payments, taxes and fraud prevention.

09Your rights

You can ask to see, correct, export or delete your data, unsubscribe from any email with one click, and turn off analytics cookies in your browser.Contact us and we’ll answer within 30 days. We may ask you to confirm it’s you first.

If you’re in the EU, the UK or California, you have these rights by law, and you can also complain to your local data protection authority.

10Children

Otley isn’t for anyone under 16, and we don’t knowingly collect their data.

11Changes

If we change this policy in a way that matters, we’ll email you before it takes effect.