How Otto handles personal data — for the customers your dealership talks to, and for the people using Otto inside your workshop.
Otto is a product of Tjekvik A/S (CVR 36072420), a company registered in Denmark with offices in London and Copenhagen. For UK customers we operate through Tjekvik UK Ltd. Reach the data team at privacy@tjekvik.com.
When your dealership uses Otto to talk to its customers, your dealership is the data controller and Tjekvik is the data processor. We only handle customer personal data on your written instructions, governed by the Data Processing Agreement signed at onboarding.
For visitors to otto.tjekvik.com (this marketing site) and people who book a demo, Tjekvik is the controller. That's what the rest of this notice covers.
| Data | Why | Lawful basis |
|---|---|---|
| Name, work email, dealership, phone (when you book a demo) | To contact you about the demo and follow up | Legitimate interest (B2B sales) |
| IP address, user agent, page views (privacy-respecting analytics, no third-party ad cookies) | To understand which pages help workshops decide | Legitimate interest |
| Anything you type into the embedded Otto demo widget | To show how Otto handles a real conversation | Consent (you choose to interact) |
We do not run third-party ad pixels, behavioural tracking, or session-replay tools on this site.
Customer name, phone number, email, vehicle registration, service and booking history, plus the audio and transcript of any call Otto handles. Source: your DMS and the customer interaction itself. All of this is processed under your instructions; full detail in the DPA.
The current sub-processor list (Vapi for voice, ElevenLabs for TTS, Twilio for SMS, Postmark for email, AWS for hosting, Cloudflare for delivery) is available at privacy@tjekvik.com. We notify dealers in advance of any change.
If you're a customer of a dealership using Otto, contact your dealership first — they're the controller. They can use Otto's built-in data subject access and erasure tools to fulfil the request within 30 days. If they don't respond, you can escalate to us at privacy@tjekvik.com and we'll route it.
If you contacted us directly (e.g. booked a demo), you have the right to access, correct, delete, port, restrict, and object to our processing. Email privacy@tjekvik.com and we'll respond within 30 days.
You can also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or the Danish Data Protection Agency (datatilsynet.dk).
Encryption in transit (TLS 1.2+) and at rest (AES-256). SSO, MFA, and role-based access on the Otto dashboard. Audit log of every access to a customer record. ISO 27001 in progress; SOC 2 Type II in scope for 2026. See the Trust & security page for the full posture.
If we change this notice in a way that materially affects you, we'll email customers (controllers) and post a banner on this site. Date at the top of the page is authoritative.