Your accounts stay yours

What ottoBrand accesses

Only the accounts you explicitly connect, and only the permissions needed to do what you've enabled:

• Your Facebook & Instagram, LinkedIn and Pinterest — to publish the posts you set up.
• Your Google Business Profile — to post updates, reply to reviews and manage Q&A.
• Your WordPress or Shopify site — to publish the blog posts you schedule.

How account access works

When you connect an account, the provider (Meta, Google, LinkedIn, etc.) issues ottoBrand a secure access token through their official login. We store that token securely on our servers and use it only to perform the actions you've turned on — for example publishing your scheduled posts or replying to your reviews. We never ask for your account password.

You're always in control

• Disconnect any account anytime from Settings → Integrations — this removes ottoBrand's access.
• You can also revoke access directly from the provider's own security settings (Meta, Google, LinkedIn).
• Run ottoBrand in approval mode so nothing publishes without your review.

What we don't do

• We don't post anything you haven't set up.
• We don't sell your data.
• We don't use your connected accounts for anything beyond the services you've enabled.

Reporting a security issue

Found a vulnerability? Please email support@ottobrand.in. Our responsible-disclosure contact is also published at /.well-known/security.txt.