Last updated: 24-May-26

1. Overview

OTee AS (“OTee”, “we”, “us”, or “our”) provides software and platform technology for industrial automation, including websites, hosted platform services, the Free IDE, licensed software infrastructure, runtime activation, support, and related services. OTee products are intended for business and professional use.

This Privacy Policy explains how we process personal data when you visit our websites, create an account, use OTee products, purchase products or services, receive support, or otherwise interact with us.

This Privacy Policy is separate from OTee’s Standard Terms of Service. By using OTee, you agree to the Standard Terms of Service and acknowledge this Privacy Policy.

2. Controller and Contact Details

The controller responsible for personal data processed under this Privacy Policy is:

OTee AS,
Org nr 930 512 796
John Strandrudsvei 10, 1366 Lysaker,
Norway
Email: contact@otee.com

Where OTee processes personal data on behalf of a customer under a written agreement, OTee may act as processor and the customer may act as controller. In those cases, the customer’s privacy notice and any applicable Data Processing Addendum may also apply.

3. Personal Data We Process

We may process the following categories of personal data:

1. Account and identity data — name, business email, username, authentication identifiers, company, job title, account role, workspace membership, organization, domain, SSO identity, and administrator status.

2. Organization and administration data — verified domains, workspace ownership, user invitations, access permissions, role assignments, audit logs, and enterprise environment settings.

3. Product usage and telemetry data — login activity, sessions, feature usage, project metadata, deployment activity, runtime activation events, entitlement records, license usage, software version, build information, device or runtime identifiers, API usage, diagnostics, error logs, performance data, and security events.

4. Customer Materials — code, programs, logic, configurations, files, project materials, data, text, documentation, models, logs, and other materials submitted, created, processed, or deployed using OTee. Customer Materials may contain personal data if you or your organization include it.

5. Billing and transaction data — billing contacts, company information, invoice details, VAT or tax identifiers, subscription status, purchase history, order details, checkout records, payment status, payment method metadata, and transaction identifiers. Full payment card details are normally processed by our payment provider and not stored by OTee.

6. Support and communication data — emails, support tickets, diagnostics, screenshots, logs, service notes, meeting notes, feedback, and other communications with OTee.

7. Website, cookie, and marketing data — IP address, browser and device information, pages visited, referral source, cookie identifiers, analytics, marketing preferences, newsletter sign-ups, event registrations, and consent preferences.

8. Recruitment data — CVs, applications, contact details, employment history, education, references, interview notes, assessment results, and related recruitment information.

Third-party data — information from your employer or organization, workspace administrators, identity providers, payment providers, resellers, partners, system integrators, public sources, event organizers, and marketing providers where relevant to our relationship with you or your organization.

4. Purposes and Legal Bases

We process personal data for the purposes below.

We process personal data for the purposes below. Where we rely on legitimate interests, those interests include operating, securing, supporting, and improving OTee products; managing customer relationships; preventing misuse; protecting legal rights; and developing our business. Where we rely on consent, you may withdraw consent at any time.

5. Customer Materials, Local Infrastructure, and AI Features

You and your organization control what Customer Materials are submitted to OTee. You should not include sensitive, regulated, protected, or special-category personal data in Customer Materials unless you have ensured that you and OTee may lawfully process such data and OTee has expressly agreed to support that data where required.

OTee may process Customer Materials to provide, secure, maintain, support, and troubleshoot OTee products; comply with law; and enforce applicable terms. OTee may use aggregated or de-identified information derived from Customer Materials to improve OTee products, provided it does not identify Customer or any individual. Where Customer Materials are processed on behalf of an organization, that organization may be the controller and OTee may act as processor. Individual users may need to direct requests relating to Customer Materials to their organization.

When you deploy, activate, update, or use local or customer-controlled OTee software infrastructure, OTee may process telemetry, diagnostics, entitlement data, activation data, device or runtime identifiers, version information, deployment metadata, security events, error logs, and usage data. We use this information for activation, license management, support, updates, security, troubleshooting, product improvement, abuse prevention, and reliable operation. Where offline activation or local execution is supported, OTee may process activation or entitlement records when connectivity is available or when you provide records for support, licensing, or compliance purposes.

OTee may provide AI-assisted or automated features such as code assistance, analysis, diagnostics, or recommendations. Where you use such features, OTee may process prompts, inputs, outputs, project context, code, configurations, logs, and related usage data as needed to provide, secure, monitor, and improve the feature. OTee will not use Customer Materials from private workspaces to train third-party general-purpose AI models unless Customer expressly instructs OTee to do so or agrees to such processing in a separate agreement. Users remain responsible for reviewing, validating, testing, and approving any AI-assisted output before use.

6. Cookies and Marketing

OTee may use cookies, pixels, local storage, and similar technologies to provide essential website and platform functionality, authenticate users, maintain sessions, remember preferences, analyze usage, measure marketing performance, and support security and fraud prevention.

Where required by law, we request consent before using non-essential cookies or similar technologies. You can manage cookie preferences through available cookie tools, browser settings, or platform settings where provided.

We may send product updates, newsletters, event invitations, educational content, and other marketing communications where permitted by law. You may opt out of marketing emails using the unsubscribe link or by contacting us. We may still send non-marketing messages such as security notices, account notices, product notices, billing messages, and legal updates.

7. Sharing Personal Data

We may share personal data with:

1. OTee personnel and affiliates who need access for the purposes described in this Privacy Policy;

2. customer administrators who manage your organization, workspace, domain, enterprise environment, or account;

3. service providers and subprocessors for hosting, cloud infrastructure, authentication, payment processing, analytics, support, communications, security, monitoring, development, and business operations;

4. payment providers for checkout, billing, invoicing, tax, and subscription management;

5. professional advisors such as lawyers, auditors, accountants, insurers, and financial advisors;

6. partners, resellers, or system integrators where relevant to your purchase, deployment, support, or relationship with OTee;

7. authorities, regulators, courts, or law enforcement where required by law or necessary to protect rights, safety, security, or legal interests;

8. corporate transaction parties in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction.

We do not sell personal data.

8. International Transfers

OTee is based in Norway. We may process personal data in Norway, the European Economic Area, the United Kingdom, the United States, and other countries where OTee, our service providers, or our customers operate.

Where personal data is transferred outside the EEA or another jurisdiction with transfer restrictions, we use appropriate safeguards where required, such as adequacy decisions, standard contractual clauses, data processing agreements, supplementary measures, or other lawful transfer mechanisms.

9. Retention

We retain personal data for as long as necessary to provide OTee products, maintain accounts, support customers, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate our business.

Retention periods vary depending on data type and purpose. Account data is generally retained while the account is active and for a reasonable period after closure. Customer Materials are retained according to account settings, product functionality, customer agreements, retention policies, and deletion/export tools. Billing, tax, and accounting records are retained as required by law. Security logs, audit logs, activation records, support records, and telemetry are retained as needed for security, compliance, troubleshooting, license management, abuse prevention, support, and dispute resolution. Marketing data is retained until you unsubscribe, withdraw consent, or we determine the data is no longer needed. Recruitment data is retained for the recruitment process and a reasonable period thereafter, unless you consent to longer retention.

When personal data is no longer needed, we will delete, anonymize, or securely retain it as required or permitted by law.

10. Security

OTee uses administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication, encryption, logging, monitoring, backups, vulnerability management, employee access controls, and vendor management.

No system is completely secure. You are responsible for protecting your accounts, credentials, devices, networks, runtime environments, and access controls, including by using available security features such as multi-factor authentication.

11. Your Privacy Rights

Depending on where you are located and the circumstances of processing, you may have rights to request access, correction, deletion, restriction, portability, or objection to processing; withdraw consent where processing is based on consent; object to direct marketing; and lodge a complaint with a data protection authority.

To exercise rights, contact us using the contact details in this Privacy Policy. If your personal data is controlled by your employer, organization, or another OTee customer, we may direct your request to that organization or ask you to contact that organization directly.

You may lodge a complaint with your local data protection authority. In Norway, the relevant authority is Datatilsynet.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will use reasonable efforts to notify users through the platform, email, website notice, or other reasonable means. The updated Privacy Policy will apply from the effective date stated in the updated version.