Privacy policy

Last updated October 20, 2026

Otpho is an appointments service: businesses set up their offices, staff, and hours, and customers book time with them. Otpho is operated by Jeffrey Hunter (“we”). This policy explains what we collect, why, and the choices you have. Questions go to support@otpho.com.

What we collect

• Your phone number, to sign you in with a one-time code and to send you texts about your appointments.
• Your email address, if you give us one, to send you appointment messages, or if a business invites you to join its staff.
• Your name, as you give it when you first book with a business.
• Your appointments: which business, office, service, and person, when, and any changes or cancellations.
• Your timezone and devices: the timezone your phone reports, so times are shown where you are, and the name and type of each device you sign in on, so you can see and sign out your devices.
• For businesses: the business’s name, offices, hours, holidays, staff names, services, and the phone number and website it chooses to publish.

We don’t collect your location, contacts, or anything else from your phone, and we don’t use advertising or tracking cookies.

How we keep it

Phone numbers and email addresses are kept in a separate service from appointments, encrypted, and used only to deliver messages. The appointments side knows you by a random identifier, not your number. Businesses see your name and your appointments with them, never your phone number or email address. Our logs and error reports leave out phone numbers, email addresses, and message text.

How we use it

• To sign you in and keep your account secure, including limiting repeated code requests.
• To send the messages the service exists for: sign-in codes, booking confirmations, reminders, changes, and cancellations, and, by email only, invitations to join a business’s staff.
• To show businesses their own appointments and schedules.
• To find and fix problems with the service.

We don’t send marketing messages, and we don’t sell your information.

Text messages

We text you only about your own sign-in and appointments, and only after you’ve given us your number for that. Reply STOP to any text to stop them, START to turn them back on, and HELP for help. The terms describe the text program in full.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties.

Who else handles it

We use these service providers to run Otpho. Each handles your information only to provide their service to us:

• Vercel, which hosts the service
• Neon, which runs our databases
• Twilio, which sends text messages and sign-in codes
• Postmark, which sends email
• Expo, which delivers notifications to the app
• Cloudflare, which runs our domain name
• Sentry, which receives error reports, with contact details removed

We may also disclose information when the law requires it. Your information is stored and processed in the United States.

How long we keep it

• The text of each message is removed 30 days after it’s delivered. The record that a message was sent, when, and whether it arrived is kept so businesses have their appointment history.
• Sign-in codes expire within minutes; records used to limit code requests are deleted daily.
• Appointments are kept as the businesses’ records.
• Everything else is kept while you have an account.

Your choices

• Reply STOP to stop text messages, and START to resume them.
• Sign out any of your devices from the app.
• Ask us at support@otpho.com for a copy of your information, to correct it, or to delete your account. When we delete it, your phone number and email address are erased and messages can no longer reach you. Businesses keep the appointments you made with them.

Children

Otpho isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has given us information, tell us at support@otpho.com and we’ll delete it.

Changes

When we change this policy, we’ll update the date above. If a change affects how we use your phone number or email address, we’ll tell you before it takes effect.