OOTOmojo

Privacy Policy

Last updated: March 1, 2026

SquarePoint Consulting LLC ("we," "us," "our"), an Oregon limited liability company, operates the Ootomojo platform at ootomojo.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using Ootomojo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account. If you sign in with Google, we receive your name, email, and profile picture from Google.
  • Business Information: Business name, project descriptions, goals, and other information you provide during onboarding and use of the Service.
  • Payment Information: Payment details are collected and processed by our payment processor, Stripe, Inc. We do not store your full credit card number. We receive your Stripe customer ID and subscription status.
  • Communications: Messages you send through Discord, including conversations with AI agents ("Coach" and crew members). These conversations are stored to provide persistent memory and continuity of service.
  • Customer Business Data: If you use Ootomojo to manage customers, leads, invoices, tasks, or other business records, we store that data on your behalf.

1.2 Information Collected Automatically

  • Usage Data: Token usage, interaction counts, feature usage, session timestamps, and throttle status.
  • Device Information: Browser type, operating system, IP address, and referring URLs collected via standard web server logs.
  • Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

2. How We Use Your Information

  • Provide the Service: Operate your AI crew, maintain conversation history, manage your workspace, and deliver personalized business assistance.
  • Process Payments: Manage subscriptions, billing, and usage-based features via Stripe.
  • Improve the Service: Analyze usage patterns (in aggregate) to improve features, reliability, and performance.
  • Communicate: Send transactional emails (account verification, billing receipts, service notifications). We will not send marketing emails without your consent.
  • Enforce Terms: Detect abuse, enforce usage limits, and protect the security of the Service.

3. AI Processing and Third-Party AI Providers

Ootomojo uses third-party artificial intelligence providers, including Anthropic, PBC (Claude), to power AI agent responses. When you interact with your AI crew:

  • Your messages and relevant context are sent to Anthropic's API for processing.
  • Anthropic's use of this data is governed by their Privacy Policy and Terms of Service.
  • Under Anthropic's commercial API terms, your inputs and outputs are not used to train their models.
  • We do not guarantee the accuracy, completeness, or reliability of AI-generated content. AI outputs are informational and should not be relied upon as professional advice (legal, financial, medical, or otherwise).

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

  • Service Providers: Stripe (payments), Anthropic (AI processing), Google Cloud Platform (hosting and infrastructure), Discord (communication platform), and Resend (transactional email). Each provider processes data only as necessary to provide their respective services.
  • Legal Requirements: If required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
  • With Your Consent: We may share information for any other purpose with your explicit consent.

5. Data Storage and Security

  • Data is stored on Google Cloud Platform infrastructure (including Google Cloud Firestore and Google Cloud Storage) in the United States (us-central1 region).
  • We use industry-standard security measures including encryption in transit (TLS), Firebase Authentication, and access controls.
  • AI agent workspaces are logically separated per customer. No cross-customer data access is possible through normal operation of the Service.
  • Despite our efforts, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

5.1 Data Breach Notification

In the event of a security breach involving your personal information, we will notify affected users and applicable regulatory authorities in accordance with Oregon's Consumer Identity Theft Protection Act (ORS 646A.604) and other applicable state laws, without unreasonable delay and in no case later than the timeframes required by law.

6. Data Retention

  • Active Accounts: We retain your data for as long as your account is active.
  • Canceled Accounts: After cancellation, your workspace data is retained in a hibernated state for 90 days, after which it may be permanently deleted. You may request earlier deletion.
  • Conversation History: AI conversation logs are retained as part of your workspace for service continuity. You may request deletion at any time.
  • Billing Records: Retained as required by applicable tax and accounting laws (typically 7 years).

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Data Portability: Request an export of your data in a machine-readable format.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@ootomojo.com. We will respond to verified requests within 45 days.

7A. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, our business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
  • Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
  • Authorized Agents: You may designate an authorized agent to submit requests on your behalf with proper verification.

To exercise these rights, contact privacy@ootomojo.com. We will verify your identity before processing requests and respond within 45 days.

7A.1 Financial Incentives

Our free trial offer is not a "financial incentive" for the collection of personal information under the CCPA. The trial is offered to allow you to evaluate the Service before committing to a paid subscription, and the personal information collected during the trial is the same as for paid accounts.

7B. Other State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) may have additional rights regarding their personal information. To exercise any applicable rights, contact privacy@ootomojo.com.

7C. International Visitors

If you access the Service from the European Economic Area (EEA) or other jurisdictions with comprehensive data protection laws, additional consent mechanisms may apply. The Service is primarily designed for and directed to users in the United States.

7D. Do Not Track

We do not currently respond to Do Not Track (DNT) browser signals, as there is no industry-standard technology for recognizing or honoring DNT signals.

8. Children's Privacy

Ootomojo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

SquarePoint Consulting LLC
Bend, Oregon, USA
privacy@ootomojo.com