Privacy policy

What we collect

Account: when you sign in with notlogin we store your notlogin identifier and, if notlogin shares it as verified, your email. With an email link we store your email.

Your ots: name, look, personality, voice, instructions and settings you create in the dashboard. API keys you add (for example your own Anthropic or OpenAI key) are stored encrypted (AES-256-GCM) and only used to call that provider for you.

Messages you send to an ot are processed to produce its reply. Devices where you run the desktop pet are linked to your account with a token stored as a hash.

Contact and feedback forms: the message and, if you give it, your name and email.

Cookies and local storage

One session cookie (ots_session, HttpOnly, 30 days) keeps you signed in, plus a short-lived cookie during notlogin sign-in and a language cookie (7ots-lang). Your browser’s local storage keeps preferences such as language and theme.

We do not use advertising or analytics cookies and do not sell or share data for advertising.

Who processes data

Hosting: Amazon Web Services (United States). AI replies: Anthropic or OpenAI (or the provider whose key you add). Voice: ElevenLabs or Fish Audio when voice is enabled. Sign-in: notlogin. Email: apumail. Calls and handles: apuchat. Projects: Orquesta, when you connect it.

Each provider receives only what is needed for that feature.

Retention and your rights

We keep your account and ots while your account exists. Sessions expire after 30 days; email sign-in links after 15 minutes.

You can ask us to access, correct, export or delete your data using the contact form; we answer within 30 days.

Children

7ots is not directed to children under 13.

Changes

If this policy changes we will update this page and its date.