Privacy Policy
Last Updated: September 2026
This Privacy Policy ("Policy") describes how Otwayite ("Company," "we," "us," or "our") collects, uses, discloses, retains, and otherwise processes personal information in connection with otwayite.net, available at otwayite.net, and any related applications, features, tools, and services (collectively, the "Services"). This Policy applies to individuals who visit our website, create an account, subscribe to a plan, or otherwise interact with the Services, including individual end users of our business customers ("you").
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described in this Policy, you must discontinue use of the Services. Where we act as a service provider or processor on behalf of a business customer, that customer is responsible for its own privacy practices, and this Policy does not govern the customer's use of personal information. Capitalized terms not defined herein have the meanings given in our Terms of Service and Terms and Conditions.
1. Information We Collect
We collect personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. The categories and specific pieces of information we collect depend on how you interact with the Services and the nature of your relationship with us.
1.1 Information You Provide Directly
We collect information you voluntarily submit, including: identifiers (name, email address, postal address, telephone number, account username); commercial information (subscription tier, purchase history, billing and payment details processed by our third-party payment processors); professional or employment-related information (company name, job title, role); account credentials; support correspondence; survey responses; and any other content you upload, transmit, or store through the Services.
1.2 Information Collected Automatically
When you access the Services, we and our service providers automatically collect internet or other electronic network activity information, including: IP address, device identifiers, browser type and version, operating system, referring and exit URLs, pages viewed, links clicked, session duration, timestamps, and general geographic location derived from IP address. We collect this information using cookies, pixels, web beacons, SDKs, log files, and similar technologies as described in Section 4.
1.3 Information from Third Parties
We may receive personal information from business partners, identity and authentication providers, analytics providers, advertising networks, fraud-prevention vendors, and publicly available sources. Where you access the Services through a third-party platform or single sign-on provider, we may receive your name, email address, profile image, and authentication token, subject to that provider's settings and policies.
1.4 Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined under applicable law (such as government-issued identification numbers, precise geolocation, racial or ethnic origin, health data, or financial account credentials), except where strictly necessary for authentication, payment processing, security, or as required by law. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.
1.5 Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, enforce our agreements, and protect against fraudulent or unlawful activity. Retention periods vary based on the type of information, the sensitivity of the data, the risk of harm from unauthorized use, and applicable statutory retention requirements. When information is no longer required, we delete, de-identify, or aggregate it.
2. How We Use Your Information
We use personal information to provide, operate, maintain, and improve the Services; to create and administer accounts; to process transactions and provide customer support; to communicate with you regarding updates, security alerts, invoices, and administrative matters; to authenticate users and prevent fraud, abuse, and unauthorized access; to comply with legal, tax, accounting, and regulatory obligations; and to enforce our agreements and protect our legal rights.
We also use personal information for analytics and product development, including understanding usage patterns, measuring feature performance, diagnosing technical issues, and developing new functionality. Where permitted by applicable law, we use personal information to send marketing communications about products, features, and offers that may be relevant to you.
We may combine information collected from different sources and use it for the purposes described above. Where we process personal information pursuant to your consent, you may withdraw that consent at any time, although this will not affect the lawfulness of processing carried out prior to withdrawal.
We do not use personal information to make decisions that produce legal or similarly significant effects without human review, and we do not engage in automated decision-making that materially affects you without providing appropriate notice and safeguards.
3. Information Sharing
We disclose personal information to service providers and contractors that perform functions on our behalf, including cloud hosting and infrastructure providers, payment processors, analytics providers, email and communication vendors, customer support platforms, security and fraud-prevention providers, and professional advisors. These parties are contractually restricted from using personal information for purposes other than performing services for us.
We may disclose personal information to our affiliates, subsidiaries, and parent entities for internal business and operational purposes consistent with this Policy. We may also disclose information to business partners, advertising networks, and analytics companies, which may constitute a "sale" or "sharing" under applicable law as described in Section 5.
We may disclose personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case your information may be transferred as part of the transaction. We will provide notice if such a transaction materially changes this Policy.
We may disclose personal information where required by law, subpoena, court order, or other legal process; to respond to lawful requests from public authorities, including to meet national security or law enforcement requirements; to protect the rights, property, or safety of Otwayite, our users, or the public; and to detect, prevent, or address fraud, security, or technical issues.
We do not disclose personal information to third parties for their own direct marketing purposes unless you have authorized such disclosure or applicable law permits it.
4. Cookies and Tracking
We use cookies, web beacons, pixels, local storage, and similar tracking technologies to operate the Services, remember your preferences, authenticate sessions, analyze traffic, measure the effectiveness of our marketing, and deliver relevant content and advertising. Cookies may be set by us (first-party) or by third parties (third-party), including analytics and advertising partners.
Cookies may be classified as strictly necessary, functional, performance, and advertising or targeting cookies. Strictly necessary cookies are required for the Services to function and cannot be disabled through our interface. You may control cookies through your browser settings; however, disabling cookies may limit your ability to use certain features of the Services.
Where required by applicable law, we honor opt-out preference signals, including the Global Privacy Control ("GPC"), as a valid request to opt out of the sale or sharing of personal information for cross-context behavioral advertising, as further described in Section 5. We do not respond to legacy "Do Not Track" signals for all browsers, but we treat GPC signals as described above.
For detailed information about the cookies we use, the purposes for which they are used, and how to manage your preferences, please review our Cookie Policy.
5. Your Rights and Choices
5.1 California Residents — CCPA/CPRA
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with the following rights, subject to certain exceptions and verification: the right to know the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties to whom we disclose it; the right to delete personal information we have collected from you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to receive discriminatory treatment for exercising your privacy rights.
You may exercise these rights by submitting a request using the contact information in Section 10. We will acknowledge receipt of your request within the timeframe required by law and will verify your identity, typically by matching information you provide with information we already maintain. You may designate an authorized agent to submit a request on your behalf, provided the agent presents written authorization and we are able to verify your identity directly.
5.2 Other State Privacy Laws
Residents of other states with comprehensive privacy laws — including, where applicable, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other jurisdictions — may have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of their personal information, including targeted advertising, profiling, and the sale of personal data. Where applicable law provides a right to appeal a denied request, you may submit an appeal using the contact information in Section 10, and we will respond within the timeframe required by law.
5.3 Marketing Communications
You may opt out of receiving promotional emails by following the unsubscribe instructions in those messages or by contacting us directly. We may still send you transactional and administrative messages, including security alerts, billing notices, and service updates, as permitted by law.
5.4 Non-Discrimination
We will not deny you goods or services, charge different prices or rates, provide a different level or quality of goods or services, or suggest that you will receive a different price or quality of goods or services because you exercised your privacy rights. We do not offer financial incentives in exchange for personal information unless expressly disclosed and permitted by law.
6. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. These measures include encryption in transit and at rest where appropriate, access controls, authentication requirements, network monitoring, vendor due diligence, employee training, and periodic security assessments.
No method of transmission over the internet, and no method of electronic storage, is completely secure. Accordingly, while we take commercially reasonable steps to protect your information, we cannot guarantee absolute security, and you transmit information to us at your own risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any suspected unauthorized access.
In the event of a data breach affecting personal information, we will notify affected individuals and relevant authorities as required by applicable law.
7. International Data Transfers
Otwayite is based in the United States, and the Services are hosted and operated in the United States. If you access the Services from outside the United States, you understand that your personal information may be transferred to, stored in, and processed in the United States and other jurisdictions where we or our service providers operate.
The data protection laws of these jurisdictions may differ from those of your home country and may not provide an equivalent level of protection. Where we transfer personal information from jurisdictions with data transfer restrictions, we implement appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms, and we require our service providers to protect personal information consistent with applicable law.
By using the Services, you consent to the transfer of your personal information to the United States and other jurisdictions as described in this Section, to the extent such consent is permitted or required under applicable law.
8. Children's Privacy
The Services are not directed to, and are not intended for use by, children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 in violation of the Children's Online Privacy Protection Act ("COPPA") or other applicable law. If we learn that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete that information promptly.
For users between the ages of 13 and 16, we do not knowingly sell or share personal information without the affirmative authorization required by applicable law. If you believe that we have collected personal information from a child in a manner inconsistent with this Section, please contact us using the information in Section 10 so that we can investigate and take appropriate action.
9. Changes to Policy
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date above and, where required by applicable law, provide additional notice, such as by email or through a prominent notice on the Services.
Your continued use of the Services after any modification to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your personal information.
In the event that any provision of this Policy is found to be invalid or unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.
10. Contact Information
If you have questions, concerns, or requests regarding this Policy or our privacy practices — including requests to exercise your rights under the CCPA/CPRA or other applicable state privacy laws — please contact us using the details below. We will respond to verified requests within the timeframes required by applicable law.
- Company: Otwayite
- Email: [email protected]
- Phone: +12155550114
- Address: 1608 Walnut Street, Suite 1105, Philadelphia, PA 19103, United States
To submit a privacy rights request, please include your full name, email address associated with your account, the specific right you wish to exercise, and sufficient information to allow us to verify your identity and locate your records. We may request additional information to protect against fraudulent or unauthorized requests.