The data register
You're trusting us with the most sensitive picture of your business: where the money goes. This page is the register of exactly what we access, why, and what we will never do with it.
| Source | We read | We never |
|---|---|---|
| Payments | Transactions, customers, payment status. Read-only. This is what findings are computed from. | Move money, issue refunds, change a record, or see full card numbers. Read-only access can't. |
| Uploads | Spreadsheets and exports you choose to share, for your review only. | Use them for anything beyond your own review. |
| Email / CRM | Optional, later, and only with your explicit permission. Each scope will be explained here the same way, tied to the feature it powers. | Request write or delete access, or read more than the connection needs. |
During early access, your data is used for exactly one thing: preparing your review. You share an export or a read-only connection, Otun computes your findings, and you see them.
When your review is delivered, the working copy of your data is deleted. What we keep is what you'd expect: your contact details and the findings we prepared for you.
Data in transit is encrypted. Working copies live only as long as your review takes, then they're deleted. Nothing is parked in a warehouse for later.
As Otun becomes a product with live connections, this register grows a full retention schedule, named subprocessors, and per-scope detail. It will always be this page, in this language.
Ask, and your data goes with you: connections revoked, working copies deleted, confirmation sent. No retention games, no exit interviews.
Questions about any of this: hello@otunhq.com. A person answers, usually the same day.