Otto Privacy Policy

Who we are and scope

Otto is a browser extension made by Dexidia Private Limited ("Dexidia", "we", "us"). It adds tools to instagram.com on desktop. This policy covers the Otto extension and the Otto bug-report service. Our website privacy policy covers dexidia.com itself.

Otto is an independent product. It is not affiliated with, endorsed by, or sponsored by Instagram or Meta Platforms, Inc.

The short version

• Otto stores your settings, pins, drafts, scheduled items and download history in its own extension storage, on your device. We cannot see them.
• Otto talks to Instagram only to do what you ask, using the Instagram session you are already signed in to. It never reads, stores or sends your Instagram password.
• Otto has no ads, no analytics and no tracking. We do not sell or share your data.
• If you send a bug report, we receive the message, files and details you choose to send, plus a random install ID that limits how many reports can be sent, and use them only to fix the problem.

Data that stays on your device

Otto keeps this data in your browser, on your device:

• your Otto settings, such as which feed parts to hide and whether Otto's video controls are on;
• posts you pin or hide: the post link and, for pins, the account name, caption and a small thumbnail;
• posts you open in Otto's viewer page;
• story and post drafts, and stories and posts you schedule, including their media, captions and settings;
• download history: the IDs of media you downloaded and the last download date for each account, so Otto can skip files you already saved;
• a random install ID, created the first time you send a bug report (see Install ID);
• your light, dark or system theme choice for Otto's panels;
• a few technical records Otto needs to work, such as an Instagram request ID it reuses and which tab is sharing a scheduled item.

All of this, including the photos and videos in your drafts and scheduled items, is kept in Otto's own extension storage, which websites, including instagram.com, cannot read. The one exception is your theme choice, which Otto keeps in your browser's storage for instagram.com so its panels show in the right colors as soon as the page loads. Earlier versions of Otto kept the media of drafts and scheduled items in instagram.com's storage; Otto moves any it finds into its own storage the first time it opens, then deletes the old copy. Downloaded photos and videos are saved to your computer's Downloads folder.

None of this data is sent to Dexidia, except the install ID, which goes with each bug report you send. Your data stays until you delete it in Otto or remove the extension; removing Otto deletes its extension storage, including drafts and scheduled media. Your theme choice stays in instagram.com's storage until you clear that site's data.

Instagram

Otto runs inside instagram.com. When you use a feature, Otto sends the same kind of requests instagram.com itself sends, from your browser, with your existing session. For example, it loads media you choose to download, publishes the stories and posts you create or schedule (at the scheduled time Otto may open an Instagram tab in the background to publish them), and searches Instagram's music when you add a song. Otto loads profile pictures and media from Instagram's image servers (fbcdn.net and cdninstagram.com) to show and download them; the first time you download from Otto's viewer page, your browser asks you to allow access to those servers.

Otto does two things without a click: at a scheduled time it shares the item you scheduled, as above, and after it is installed or updated, or when your browser starts, it reloads open instagram.com tabs where its controls are missing, so they appear. It does not read your browsing outside www.instagram.com.

To make these requests, Otto reads the security tokens instagram.com itself uses and sends them back only to Instagram; they never leave your browser for anywhere else. These requests go directly from your browser to Instagram and Meta. They do not pass through Dexidia. Instagram's handling of that data is described in Instagram's Privacy Policy. Otto can only reach content your account is allowed to see.

Bug reports

You can report a problem from the bug icon in Otto's card. A report is sent only when you press Send. Before that, you can see and change everything that will be sent. A report can include:

• your message;
• an email address for our reply, if you choose to give one;
• screenshots or short videos you attach;
• technical details, if you leave them switched on: Otto version, browser name and version (or, in browsers that don't report these separately, the browser's user-agent string), operating system, language, page layout, the type of Instagram page you were on (for example "profile" or "home"), and your Otto settings. Technical details never include Instagram links, usernames, messages or passwords.

Screenshots can show other people's names, posts or messages. Please check your files before sending, and crop or remove anything you do not want to share.

How reports are handled

Reports are sent over HTTPS to our server at api.dexidia.com, run on Cloudflare Workers. The server checks the report and passes it to ClickUp, the project-management tool where our team tracks and fixes bugs. The server does not keep a copy. Cloudflare processes your IP address to deliver the request and to limit abuse; we do not store it with your report.

We use reports only to understand, reproduce and fix problems in Otto, and to reply to you if you gave an email address. We never use them for advertising, never sell them, and never add your email address to a mailing list.

Install ID

The first time you send a report, our server gives your copy of Otto a random ID, signed so that only our server could have made it. Otto keeps it in its extension storage and sends it with each report. The server uses it only to limit how many reports one copy of Otto can send each day, so nobody can flood our bug list. The ID is not linked to your Instagram account, your email or any device identifier, and we never use it for analytics, advertising or tracking. The server keeps a count of reports per ID for each day and deletes those counts after two days. The ID is not added to your report in ClickUp. Removing Otto deletes it; reinstalling gives you a new one.

How long we keep reports

We keep a report while we work on the problem, and delete it, with its files, no later than 12 months after the problem is closed. You can ask us to delete a report sooner at any time.

Buying Otto Pro

Our order process is conducted by our online reseller Paddle.com, the Merchant of Record for all our orders. When you buy Otto Pro, Paddle collects your name, email address, billing country and payment details to process the order. Paddle shares your name, email address, country and order details with us so we can provide Pro and support you. We never see your full card details. See Paddle's Privacy Policy.

Service providers

• Paddle.com Market Limited processes Otto Pro orders as our Merchant of Record.
• Cloudflare, Inc. runs api.dexidia.com, keeps the daily report counts for each install ID, and passes bug reports to ClickUp. See Cloudflare's Privacy Policy.
• ClickUp (Mango Technologies, Inc.) stores bug reports and their files for our team. See ClickUp's Privacy Policy.

These providers may process data in countries other than your own, under their contracts and legal safeguards. We may also disclose information when the law requires it, or to protect the safety and rights of users or Dexidia.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

This covers all data Otto handles. We use it only to provide and improve Otto's single purpose, the Instagram tools described here. We transfer it only to the service providers above to run bug reports, to comply with the law, to protect against fraud or abuse, or as part of a merger or sale of Dexidia with your consent. We never sell it, use it for advertising, or use it to decide credit-worthiness or lending. People at Dexidia read only the bug reports you choose to send us, and data needed for security or required by law.

Security

Bug reports travel over HTTPS. Only Dexidia team members who fix bugs can see them in ClickUp, and the keys our server uses to reach ClickUp and to sign install IDs are stored as encrypted secrets. Data Otto keeps on your device is protected by your browser and your computer's account security. No system is perfectly secure, so please don't send passwords or other secrets in a report.

Legal bases

Where data-protection law such as the GDPR applies, Dexidia Private Limited is the controller of bug reports. We handle a report because you ask us to (your consent, which you can withdraw by asking us to delete it), and we handle the install ID and IP-based limits for our legitimate interest in keeping the bug-report service working and free of abuse. Data kept on your device is not sent to us, so we do not process it.

Your choices and rights

• Turn technical details off, or send no report at all; Otto works the same either way.
• Delete Otto's local data by removing items in Otto, or by removing the extension, which deletes all of it except your theme choice; clear instagram.com's site data in your browser to remove that too.
• Ask us to see, correct or delete a bug report you sent by emailing info@dexidia.com. Tell us roughly when you sent it and the email you used, if any.

Depending on where you live, you may have other rights over your personal data, such as access, correction, deletion, portability and objection, and the right to complain to your data-protection authority. We reply within 30 days and will not treat you differently for using these rights. We do not sell or share personal information, as those terms are defined in California law.

Children

Otto is not meant for children under 13, and Instagram does not allow accounts for them. We do not knowingly collect data from children. If you think a child has sent us a report, contact us and we will delete it.

Changes

If Otto starts handling data in a new way, we will update this policy and its date before the change takes effect, and ask for your consent in Otto where the law or the Chrome Web Store requires it.

Contact

Dexidia Private Limited
India
info@dexidia.com
Otto support