Privacy notice

Last updated 12 November 2026

Who we are

This site, ot-otto.com, is operated by Aldabaran Inc., a Delaware corporation in the United States, which is the controller of the personal data described here. OTTO is a product of ATAURI (atauri.ai), operated by Aldabaran Inc. For anything about your data, write to daniel@atauri.ai. [TODO: confirm the operating company for ot-otto.com and add its postal address.]

Aldabaran Inc. is established outside the European Union. [TODO: state whether a representative in the EU under GDPR Article 27 has been appointed.]

What this site collects

• Unless you consent, this site sets no cookies and loads no analytics, advertising or tracking scripts.
• Fonts and images are served from this site, so your browser does not contact anyone else to show these pages. The only exceptions are Google Analytics, HubSpot and the LinkedIn Insight Tag, and only after you allow them.
• If you switch the language, the choice is kept in your browser’s local storage so the page remembers it. It never leaves your device, and you can clear it in your browser settings.
• Your answer to the cookie banner is kept in your browser’s local storage too, with its date and the version of the banner, so we do not ask on every page. It never leaves your device.
• The company that hosts these pages may record standard request data, such as IP address, browser type and time, in server logs to deliver the site and keep it secure. We do not use those logs to identify or profile visitors.

Google Analytics, only with your consent

If you choose “Accept all” in the cookie banner, or turn on “Marketing” in its settings, this site loads Google Analytics 4, a web analytics service from Google, through a script served from googletagmanager.com. Until then it is not loaded, and nothing is sent to Google.

Once loaded, it records the pages you view, the page you came from, an approximate location derived from your IP address, characteristics of your device and browser, the time of your visit, events such as page views and other interactions with the site, and an identifier kept in the Google Analytics cookies (the client ID), which tells one browser from another. According to Google, Google Analytics 4 does not log or store the IP addresses of visitors in the EU. Google signals and ad personalisation are switched off for this site.

We use it to measure traffic to this site and to understand how the site is used.

The legal basis is your consent: GDPR Article 6(1)(a) for the processing, and for storing and reading information on your device Article 5(3) of the ePrivacy Directive as implemented in national law, for example § 25(1) TDDDG in Germany. You can withdraw your consent at any time under Cookie settings, which is also at the foot of every page. Withdrawing does not affect the lawfulness of processing before the withdrawal. When you withdraw, we stop loading Google Analytics and delete its cookies stored for this site. You can also block Google Analytics on every site with Google’s opt-out browser add-on.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, in the United States, process this data for us as processors under Google’s Data Processing Terms. How Google handles data is described in its privacy policy.

Google may process this data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, and Google’s Data Processing Terms also include the European Commission’s Standard Contractual Clauses.

The Google Analytics cookies stay in your browser for up to two years, unless you delete them or withdraw your consent first. In our Google Analytics property, data linked to cookies and identifiers is kept for 2 months and then deleted automatically; aggregated statistics that do not identify you may be kept longer. [TODO: confirm the data retention setting in Google Analytics (2 or 14 months).]

HubSpot, only with your consent

If you choose “Accept all” in the cookie banner, or turn on “Marketing” in its settings, this site loads the HubSpot tracking code, a script served by HubSpot from js-eu1.hs-scripts.com, which loads further HubSpot scripts. Until then it is not loaded, and nothing is sent to HubSpot.

Once loaded, it records the pages you view, the page you came from, characteristics of your device and browser, an approximate location derived from your IP address, the times of your visits, and a visitor identifier kept in the HubSpot cookie hubspotutk, which tells one browser from another. Once you book a demo or write to us, your contact details are kept in HubSpot too and can be linked to that visitor record.

HubSpot is our customer relationship management (CRM) system. We use it to keep track of enquiries and the people who make them, and, after your consent, to measure how this site is used.

The legal basis is your consent: GDPR Article 6(1)(a) for the processing, and for storing and reading information on your device Article 5(3) of the ePrivacy Directive as implemented in national law, for example § 25(1) TDDDG in Germany. You can withdraw your consent at any time under Cookie settings, which is also at the foot of every page. Withdrawing does not affect the lawfulness of processing before the withdrawal. When you withdraw, we stop loading the HubSpot tracking code and delete the HubSpot cookies stored for this site.

HubSpot, Inc., in the United States, processes this data for us as a processor under HubSpot’s Data Processing Agreement. [TODO: confirm that the Data Processing Agreement with HubSpot is in place.] How HubSpot handles data is described in its privacy policy.

Our HubSpot account is hosted in HubSpot’s data centre in the European Union. HubSpot, Inc. and its service providers may still access or process this data from the United States. HubSpot, Inc. is certified under the EU–US Data Privacy Framework, and HubSpot’s Data Processing Agreement also includes the European Commission’s Standard Contractual Clauses. [TODO: verify HubSpot’s Data Privacy Framework certification and this wording.]

The HubSpot cookies stay in your browser for up to six months, unless you delete them or withdraw your consent first. We keep visitor records and contact details in HubSpot only as long as we need them for the purposes above. [TODO: confirm how long records are kept in HubSpot.]

LinkedIn Insight Tag, only with your consent

If you choose “Accept all” in the cookie banner, or turn on “Marketing” in its settings, this site loads the LinkedIn Insight Tag, a script served by LinkedIn. Until then it is not loaded, and nothing is sent to LinkedIn.

Once loaded, the tag sends LinkedIn the address of the page you are on, the page you came from, your IP address (which LinkedIn says it truncates or hashes), characteristics of your device and browser, the time of the visit, and the identifiers in LinkedIn’s cookies. If you are a LinkedIn member, LinkedIn can match the visit to your account. According to LinkedIn, it does not pass that personal data to us; we receive reports that do not identify you.

We use it to measure how our LinkedIn advertising and campaigns perform, to count conversions, to learn about the audiences that visit this site, and to show our ads on LinkedIn to people who have visited it (retargeting).

The legal basis is your consent: GDPR Article 6(1)(a) for the processing, and for storing and reading information on your device Article 5(3) of the ePrivacy Directive as implemented in national law, for example § 25(1) TDDDG (formerly TTDSG) in Germany. You can withdraw your consent at any time under Cookie settings, which is also at the foot of every page. Withdrawing does not affect the lawfulness of processing before the withdrawal. When you withdraw, we stop loading the tag and delete the LinkedIn cookies stored for this site. Cookies that LinkedIn has set on linkedin.com are beyond our reach; you can delete them in your browser.

The recipients are LinkedIn Ireland Unlimited Company, in Ireland, and LinkedIn Corporation, in the United States. For collecting this data on this site and sending it to LinkedIn, we and LinkedIn Ireland may be joint controllers under GDPR Article 26. [TODO: confirm the joint-controller arrangement with LinkedIn.] What LinkedIn does with the data afterwards is described in its privacy policy.

LinkedIn may process this data in the United States. LinkedIn Corporation is certified under the EU–US Data Privacy Framework, and LinkedIn also relies on the European Commission’s Standard Contractual Clauses.

Your consent choice stays in your browser until you change it or clear your browser’s storage. According to LinkedIn, it removes direct identifiers of members within seven days and deletes the remaining pseudonymised data within 180 days. We do not keep a copy of this data ourselves.

Cookies and local storage

The first two entries are needed for the site to work and are not cookies. The Google Analytics, HubSpot and LinkedIn cookies are set only after you consent. The purposes and durations of the HubSpot cookies are taken from HubSpot’s list of its cookies, and those of the LinkedIn cookies from LinkedIn’s cookie table; both may change.

When you book a demo

The “Book a demo” buttons open a booking page in a new browser tab. It is a Google Calendar appointment schedule, a Google Workspace service provided by Google (Google Ireland Limited and Google LLC), and it is on Google’s site, not on this one. Nothing is sent to Google until you open that page, and Google’s own privacy policy applies there.

The booking form asks for your first name, last name, email address and company, all of them required. When you book, we receive those details and the time you chose, and the booking creates a calendar event with a Google Meet link. The 20-minute demo is a video call on Google Meet, which is also a Google Workspace service provided by Google (Google Ireland Limited and Google LLC). We use the booking details to hold the demo and to follow up with you, and we keep them in HubSpot, our CRM, as described above.

If you are in the EU, EEA or UK, the legal basis is taking steps at your request before a contract (GDPR Article 6(1)(b)). We keep booking data only as long as that conversation, and any agreement that follows, needs it. [TODO: confirm how long booking data is kept.]

When you email us

If you write to daniel@atauri.ai, for example from the “Prefer to write?” link next to the demo button, the message goes out from your own email program; this site sends nothing. We receive your name, your email address and whatever you write.

We use it to reply and to plan a demo or a pilot with you, and we keep it only as long as that conversation, and any agreement that follows, needs it. If you are in the EU, EEA or UK, the legal basis is taking steps at your request before a contract and our legitimate interest in answering business enquiries (GDPR Article 6(1)(b) and (f)).

Material shared in a pilot

Documentation, recordings and other material shared during a pilot are covered by the written pilot agreement, not by this notice.

Your rights

Where the GDPR or the UK GDPR applies to you, you have the right to:

• access the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• have its processing restricted (Article 18);
• receive the data you gave us in a portable format (Article 20);
• object to processing based on our legitimate interests (Article 21);
• withdraw a consent you have given at any time, without affecting earlier processing (Article 7(3));
• complain to a data protection supervisory authority, in particular where you live or work (Article 77).

To use any of these rights, write to daniel@atauri.ai. To withdraw your consent to Google Analytics, HubSpot and the LinkedIn Insight Tag, use Cookie settings.

We do not make decisions about you by automated means alone, and we do no profiling of our own (Article 22).

Changes

If this notice changes, we update the date at the top of the page.