Privacy Policy

Who we are. OtisIO is a product of Siege One Limited, a company registered in England and Wales (company number 17110871), registered office 38 Angelica Avenue, Stotfold, Hitchin, England, SG5 4HH. We provide workforce management software. For workspace data, the business that owns the workspace is the data controller and we act as processor; for website and account data Siege One Limited is the controller.

What we collect. Account details (name, email), workspace content your team creates (schedules, timesheets, tasks, messages), device and usage information needed to run and secure the service, and billing details processed by our payment provider (we never store card numbers).

Location data. If your employer enables GPS or geofenced clock-in, location is captured only at clock in/out events, is visible to your workspace's managers, and is never sold or used for advertising.

How we use it. To provide and secure the service, process payments, send service emails, and improve the product. We do not sell personal data.

Product analytics. On the signed-in web app we run Microsoft Clarity, a session-analytics tool that helps us see how the product is used (which screens, navigation, and where people get stuck) so we can improve it. It is configured to mask all content: recordings capture the page layout and where people click or scroll, never the actual text on screen, so names, pay, timesheets and other personal data are not recorded. This is separate from the optional, consent-gated analytics on our public marketing pages.

Processors. We use a small set of infrastructure providers (hosting, email delivery, payments) under data processing agreements.

Retention. Workspace data is kept while the workspace is active and deleted after a retention window once it closes. You can request export or deletion at any time.

Your rights. Under UK GDPR you can request access, correction, deletion, restriction or portability of your personal data, and complain to the ICO. Where your employer controls the workspace, we will route requests to them.

Security. Data is encrypted in transit, workspaces are isolated in separate databases, access is role-based, and administrative actions are audit-logged.

Contact. Privacy questions: hello@otisio.com.