Privacy Policy
Last updated 16 September 2026
Otutu AI builds AI receptionists and automations for service businesses. This policy explains what happens to personal data in three situations: when you visit this website, when you book or take a demo call, and when we run a system for a business that is our client.
Who is responsible
Otutu AI, operated by Jesse Otutu. For anything in this policy, including requests to see or delete your data, email [email protected].
This website
- No cookies. The site sets none.
- No analytics or tracking. We do not measure visits, and there are no advertising or social media trackers.
- No forms. There is nothing on the page to type into, so nothing is submitted to us.
- Fonts are served from this website, not from a third party, so visiting the page does not share your IP address with anyone else.
- Hosting. The site is hosted on Cloudflare Pages. Cloudflare processes technical request data, including IP addresses, to serve and protect the site.
Booking a call
The booking buttons open Cal.com, a separate company. When you book, you give Cal.com your name, email address, timezone and anything you type in the notes. We receive those details so we can meet you at the agreed time. Cal.com handles that booking data under its own privacy policy.
We use these details only to arrange and follow up on the call. We do not sell them, and we do not add you to a marketing list without asking.
Demo calls with the AI receptionist
If you try the AI receptionist, you are speaking to an automated system, not a person.
- The call is recorded and transcribed. That is how we show you what it heard and what it captured.
- What it captures during a demo is whatever you say: typically a name, a phone number, an address, the problem and a preferred time. Please use made up details if you would rather not share real ones.
- Who processes it. The call runs through a voice AI provider and an AI model provider, and the result is written into our own demo spreadsheet and calendar.
- How long we keep it. Demo recordings, transcripts and rows are kept only as long as we need them to show you the result, and are deleted on request.
If you email us, we keep the message and your address so we can reply and keep track of the conversation. Our email runs on Proton Mail.
When we build or run a system for a client
When a business hires us, their customers' data belongs to that business, not to us.
- Systems are built inside the client's own accounts, on their spreadsheets, CRM, calendar and phone number.
- We act on the client's instructions. In data protection terms, the client is the controller and we are a processor.
- Our access exists to build, test and support the system, and can be removed by the client at any time.
- Call recording, AI disclosure, retention and deletion are set to whatever the client decides. Rules vary by country and by US state, so each client confirms their own settings with their own advisor.
Legal bases
Where the UK GDPR or EU GDPR applies, we rely on: your consent, for demo recordings; our legitimate interest in responding to enquiries and running our business, for bookings and email; and performance of a contract, for client work.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. Email [email protected] and we will respond within 30 days. You can also complain to your local data protection authority.
Storage and transfers
We use service providers based in the United States and Europe, so data may be processed outside your country. We keep data only as long as it is useful for the purpose it was collected for.
Children
This is a service for businesses. It is not directed at children and we do not knowingly collect their data.
Changes
If this policy changes, the date at the top changes with it.