Otis Chrome Extension: Privacy Policy
Last updated: 19 October 2026
This policy covers the Otis Chrome extension (“the extension”), a side panel that shows buying signals for the company you have open in Salesforce, HubSpot or LinkedIn. It is operated by Otis (“we”, “us”). Your use of the Otis web app itself is covered by the main Otis privacy policy.
- The extension reads only the company name (and its website, when shown) of the record you're viewing.
- It sends that to your Otis account only while the side panel is open, to look up signals for that company.
- It does not read emails, notes, contacts, deal values or any other CRM or LinkedIn data, and it does not track your browsing.
- We never sell your data or use it for advertising.
What data the extension handles
| Data | Why | Where it goes |
|---|---|---|
| Company name and website of the record open in a Salesforce, HubSpot or LinkedIn tab | So the side panel can show that company's signals without you typing its name | Kept in your browser for the current session. Sent to the Otis server when the side panel is open and looks the company up. |
| Company names you type into the search box | To look up signals for that company | Sent to the Otis server. |
| Your Otis sign-in for the extension (an access token created when you sign in on the Otis website, and your account email) | To prove lookups come from your Otis account | Stored in your browser. The token is sent to the Otis server with each lookup. |
| The Otis server address and the region you pick in the panel | To know which server to call and which region's news to show | Stored in your browser. The region is sent with each lookup. |
The extension runs only on Salesforce, HubSpot and LinkedIn pages, and on Otis's own extension sign-in page (to receive your sign-in). On Salesforce, HubSpot and LinkedIn it looks only for the company name and website of the record you have open. It does not record which pages you visit, collect page content beyond that, or use analytics, cookies or trackers.
How it's stored
Your sign-in, server address and chosen region are stored in Chrome's local extension storage on your device. They are not synced to your Google account. The company detected in each open tab is held in Chrome's session storage, which Chrome clears when you close the browser or the tab.
On the Otis server, your extension token is stored only as a one-way hash, so it can't be read back. Lookups are not added to your book or dashboard. On the free plan, which allows 10 companies a day, we keep a one-way hash of each company you look up, only for the current day, to count your allowance. It can't be turned back into the company name and is discarded the next day. The server's request logs may record the company name and region of a lookup, along with the time, for troubleshooting and abuse prevention. Those logs are kept for a limited period set by our hosting provider.
To keep the service fast and to reduce costs, the server keeps a shared cache of public news and job listings for each company and region (deleted after a few days), and the results of relevance checks on public articles (deleted after about four months). This cache holds company names and public article information only. It is not linked to you or any other user.
How it's used
Only to show you signals for the company you're looking at: we search public news and public job boards for that company, filter the results to your regions, score them, and return them to the side panel. We do not use this data for advertising, profiling, credit decisions or anything unrelated to that feature.
Third parties
To find signals, the Otis server (not your browser) sends the company name or website to:
- Google News, as a search for public news about the company;
- Greenhouse and Lever public job boards, to find open roles at the company's website domain;
- an AI provider (Anthropic or DeepSeek, depending on our configuration), which receives public article headlines and summaries together with the company name, website and industry, to check each article is really about that company and region.
These requests come from our server. They do not include your name, email, token or any other information about you. The service is hosted by Render. We do not sell, rent or share your data with anyone else, except where required by law.
Your choices and deletion
- Close the side panel and nothing is looked up.
- Sign out any time from the side panel (⚙︎ → Sign out), or sign out every browser in Otis under Settings → Chrome extension. Signing out deletes that sign-in on our server.
- Uninstall the extension to remove everything it stored in your browser.
- To ask about or delete any data we hold about you, contact us (below).
Security
Traffic between the extension and the hosted Otis service is encrypted (HTTPS). Your extension token works only for the extension's own features: looking up companies and reading your email address and region settings. It can't be used to read or change the rest of your Otis account.
Changes to this policy
If what the extension collects or how we use it changes, we'll update this page and the date at the top before the change takes effect, and describe the change in the extension's Chrome Web Store listing.
Contact
Privacy questions or requests: [contact email].