One Touch, Total Control. The all-in-one platform for modern hotels.
Effective date: 21 October 2026
OTTO (“OTTO”, “we”, “us”, “our”) provides a hotel management platform that helps hotels run reservations, guest records, room operations, daily takings and reporting. This Privacy Policy explains how we handle personal information when a hotel subscribes to and uses OTTO, and when you visit Otto.com.ng. By using OTTO, you agree to the practices described here. Otto Technology Systems Ltd
This policy applies to two groups: (a) hotel owners and staff who hold an OTTO account (“Subscribers”), and (b) visitors to our website. Guests of a hotel deal with the hotel, not with OTTO: their information is entered into OTTO by the hotel that serves them, or by the guests themselves on the hotel’s booking page or website. See sections 7 and 8 for how guest data is handled.
Account and billing information. When a Subscriber signs up, we collect the hotel’s name, contact name, email address, phone number, number of rooms and subscription details. Payments are processed by Paystack; we receive confirmation of payment and subscription status, but we do not collect or store your full card details.
Data you enter into OTTO. To run your hotel, you enter operational data such as guest names and phone numbers, stay and booking history, visitor-log entries, room status, daily takings and expenses. This data belongs to your hotel; we process it on your behalf so the platform can work.
Information guests enter themselves. When a guest books a room, joins a waiting list or asks about an event on a hotel’s booking page or website, they enter details such as their name, phone number, email address, nationality and stay or booking information. It goes to that hotel and is guest data controlled by the hotel (see section 7).
Technical information. Like most online services, we automatically collect limited technical data such as log data, device and browser type, and general usage information, to keep the service secure and running.
We use the information above to provide and operate the platform; create and manage Subscriber accounts; process subscription payments and send billing notices; provide support; keep the service secure and prevent misuse; and improve and maintain OTTO. We do not sell your data or your guests’ data to anyone.
Where the Nigeria Data Protection Act (NDPA) applies, we process personal information on the basis of performing our contract with the Subscriber, our legitimate interest in operating and securing the service, and consent where required.
Subscription payments are handled by Paystack, a licensed payment processor. Your card and payment-authentication details are collected and stored by Paystack under its own terms and privacy policy, not by OTTO. We recommend reviewing Paystack’s privacy policy for details of how it handles payment data.
We host data with reputable cloud infrastructure providers and protect it with access controls and encryption in transit. Each hotel’s data is logically isolated so that one Subscriber cannot access another Subscriber’s records. Access to production data by our team is restricted to what is needed to operate and support the service. No system is perfectly secure, but we take reasonable measures to protect your information.
The information a hotel records about its own guests and visitors belongs to, and is controlled by, that hotel. In data-protection terms, the Subscriber is the “controller” of its guest data and OTTO is the “processor” acting on the Subscriber’s instructions. The Subscriber is responsible for collecting guest and visitor information lawfully — including giving any notices and obtaining any consents required — and for using it appropriately. OTTO processes that data only to provide the service.
Each hotel can publish a public website on OTTO, at an address such as yourhotel.otto.com.ng.
We share information only with service providers that help us run OTTO (such as our hosting provider and Paystack), under appropriate confidentiality obligations; and with authorities or third parties where we are required to by law, or to protect our rights, our users, or the public. We do not sell personal data.
Our website (otto.com.ng) and the signed-out screens of the OTTO app — the sign-in and sign-up pages — use cookies and similar technologies from three providers: Microsoft Clarity, which records how pages are used (clicks, scrolling, where people get stuck); Google Analytics, which counts visits and tells us which channel a visitor arrived from; and the Meta (Facebook) pixel, which lets us measure and target our advertising. Each of these providers may set cookies on your device and processes information under its own privacy policy.
None of these are ever active once you are signed in to OTTO. They are switched off the moment a session begins, so no screen showing a hotel's guests, rooms, staff, payments or takings is ever recorded or sent to any of them. When we report a completed sign-up to these providers, we send only the plan chosen and the country — never a hotel name, a person's name, an email address or a phone number.
Hotel websites (*.otto.com.ng) use none of these tools and set no cookies of their own. For the length of one visit, the visitor’s own browser notes that the page has already been counted, so a refresh is not counted twice; the note is gone when the browser tab is closed. A hotel’s booking page can remember a guest’s name and phone number in the guest’s own browser, so they need not type them again next time; it stays on that device.
You can refuse or delete cookies in your browser settings, and you can opt out of interest-based advertising through Google's and Meta's own ad settings. Refusing them does not affect your ability to use OTTO.
We keep Subscriber account and operational data for as long as the account is active. After an account is closed, we retain data for a limited period to meet legal, accounting and dispute-resolution needs, after which it is deleted or anonymised. Subscribers may request export or deletion of their data as described below. Waiting-list and event enquiries sent through a hotel’s booking page or website are deleted automatically 12 months after the hotel has dealt with them, and in any case 2 years after they were made.
Subject to applicable law, you may request to access, correct, update or delete your personal information, or object to or restrict certain processing. Because much of the data in OTTO is controlled by a hotel, guests wishing to exercise rights over their information should contact the hotel directly; we will support the hotel in responding. To make a request as a Subscriber, contact us using the details in section 16.
Our infrastructure or service providers may store or process data outside Nigeria. Where this happens, we take steps intended to ensure your information continues to be protected in line with this policy and applicable law.
OTTO is a business tool intended for hotels and is not directed at children. We do not knowingly collect personal information from children through the service.
We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify Subscribers. Continued use of OTTO after changes take effect means you accept the updated policy.
Questions about this policy or your data can be sent to:
Email: hello@otto.com.ng
WhatsApp: +234 905 661 1433
Otto Technology Systems Ltd · RC 9705446