Privacy Policy
Version 16 September 2026. This version is no longer in force. Read the current one.
Ottom sends automated shopping agents to a storefront and reports where they stall. That work needs almost nothing about you, so this page is mostly a list of things we do not hold.
In plain words: what a scan keeps, and for how long.
1. We hold no shopper personal data
Ottom never touches a merchant’s customer records. Our agents shop as a published synthetic identity, never as a real person, and they never submit payment. If you run a store we have scanned, there is no shopper of yours in our database, because there was never a shopper: there was our agent, saying so in its user agent string.
2. What we do hold
- Your email address, if you gave us one to receive a report or a newsletter. Every lifecycle email carries a one-click unsubscribe.
- The store URLs you asked us to scan, and the results of those scans. Results are private to the store owner. Category benchmarks are published only in aggregate and anonymised, per our benchmark methodology.
- Billing details, held by Stripe or by Shopify depending on how you pay. Card numbers never reach our servers.
- Business contact details, if we have talked to you or your company about Ottom: your name, work email, job title and notes of those conversations. We hold them because we have a legitimate interest in talking to businesses about our service. They are deleted after 24 months with no contact. Ask us to stop and we will, keeping only your address so we never get in touch again.
3. Analytics
We use Google Analytics to see which pages bring people to Ottom. It is off until you press Allow on the notice at the bottom of the page. Press No thanks and nothing is sent at all. The site behaves identically either way, and there is no feature behind that choice.
Two things we do differently, because the alternative would leak. The analytics tag is served from ottom.io rather than from Google’s domain, so loading it does not announce your visit to a third-party host before you have answered the notice. And no page address we send to Google ever contains a real identifier: a report link like /report/a1b2c3 is reported to us as /report/[runId], and query strings are stripped entirely. Report links, approval links and unsubscribe links are credentials. They are not shared with anyone, including our own analytics.
We run no advertising and no advertising tags. Advertising storage stays switched off whatever you choose, because there is nothing here that would use it.
5. Who else sees any of this
- Google Analytics, for site measurement, and only if you allow it.
- Anthropic, which runs the models our agents think with. Prompts describe storefronts, not people.
- Stripe and Shopify, for payment.
- Resend, which delivers our email.
- Cloudflare, which sits in front of this site.
- Slack, where our team is told when you run a scan, start a trial, or change or cancel a plan. Those messages include your email address.
We do not sell data, and we run no advertising network tags.
6. Asking us anything
To see what we hold about you, correct it, or have it deleted, write to [email protected]. To stop our agents visiting your store, the address is [email protected], and how that works is set out on our agent disclosure page.
Version history
- 22 September 2026 (in force): Rewritten in full: names the company, every service that handles personal data, where data is kept, how long, the legal basis for each use, and how to delete your account yourself.
- 16 September 2026: The privacy page as it stood before the full policy: what Ottom stores, the cookies it sets, and who else sees data.