Knowledge base

Google, Meta, and the other account secrets stay on Otto. An AI client holds an Otto token, not those secrets.

Settings → MCP Connectors says the integration secrets stay on Otto. A bearer token is shown once, when you create the connector, and not again. Revoke removes it. ChatGPT and other OAuth clients appear after an admin approves consent. Revoking that grant deletes the refresh token. Short-lived access tokens expire on their own.

Card numbers are not stored by Otto. Payments go through the card processor. The privacy policy is the full notice, including California rights and the rule that personal information is not sold.

Questions go to otto@islaintel.com