Last updated: July 13, 2026
OttoHQ ("Otto," "we," "us") provides a business X-Ray and an approval-gated accounts receivable agent for businesses using QuickBooks Online. This page describes what data we access, why we access it, how long we keep it, and how to remove it. We aim to be specific, not generic.
When you connect QuickBooks, Otto uses Intuit's OAuth flow to obtain an authorization credential scoped to your accounting data. We use the read permission to fetch:
Every QuickBooks request passes through an explicit read allowlist. Requests that could write, mutate, upload, delete, or execute a batch are blocked and audited. Approval of an email never grants permission to modify QuickBooks.
Connecting Gmail is optional. When you choose it, Otto uses Google's OAuth flow with the gmail.readonly permission only. Otto scans sent mail and invoice-like attachments from the same 14-month X-Ray window to compare emailed invoices with QuickBooks. Otto cannot send, edit, move, or delete messages in your mailbox.
Otto extracts only the evidence needed for that comparison: message identifier, date, counterparty, amount, invoice number when present, and attachment name. We do not persist full email bodies or attachment contents. Email text is screened for unsafe instructions before any model-assisted extraction, and mailbox content is not written to application logs.
Otto stores the minimum data needed to operate:
We retain this data while your account is active. On account cancellation, we delete OAuth access credentials and cached customer/invoice data within 7 days; we keep the audit log for 90 days for fraud and abuse review, then delete it. You may request earlier deletion at any time by emailing [email protected].
Otto uses the following subprocessors to operate the service:
You can disconnect Gmail from the Otto report at any time. Otto asks Google to revoke that credential and deletes it locally. You can also revoke access from your Google account connections. To disconnect QuickBooks, email [email protected] or revoke Otto from your Intuit account apps.
OttoHQ is a business product and is not directed to children under 13. We do not knowingly collect data from children.
We may update this policy from time to time. Material changes will be announced to all active customers by email at least 14 days before they take effect. The "Last updated" date at the top reflects the current revision.
Questions about this policy: [email protected]
Data deletion request: [email protected]
Security disclosure: [email protected]