Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how OTVERSE.AI Ltd collects, uses, shares, and protects personal data when you visit our website, contact us, join our waitlist, or use the OTVERSE application and related services.

1. Who we are

OTVERSE.AI Ltd ("OTVERSE", "we", "us", or "our") is a company registered in Scotland under company number SC880448, with its registered office in Glasgow, United Kingdom. OTVERSE.AI Ltd is the controller responsible for the personal data described in this policy.

Contact: umer@otverse.ai or harshil@otverse.ai

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Contact and account information, such as your name, email address, role, organisation, interests, and account details.
• Waitlist and enquiry information, including information you provide through our forms, emails, feedback, demo requests, or other communications.
• Application usage information, if you use the OTVERSE application, such as modules attempted, completion times, scores, stitch accuracy, progress, and related simulation-session data.
• Device and technical information, such as Meta Quest device type, operating-system version, application version, IP address, browser type, and diagnostic or security logs.
• Website usage information, such as pages visited, time spent on the website, and referral source, if we use analytics technologies and you have provided any consent required by law.

We normally collect personal data directly from you, from your device when you use our services, or from service providers that support our website and application.

3. How we use your personal data

We may use personal data:

• To provide, operate, secure, and improve the OTVERSE service, including recording simulation progress and performance.
• To administer accounts, waitlist registrations, early-access requests, demos, pilots, and partnerships.
• To respond to enquiries, provide support, and communicate service information.
• To send product news or marketing communications where you have consented, and to record your communication preferences.
• To understand service usage, diagnose problems, improve our simulations and user experience, and protect against misuse.
• To establish, exercise, or defend legal claims and comply with legal obligations.

We do not sell your personal data, and we do not share it with third parties for their own advertising.

4. Legal bases for processing

We rely on one or more of the following legal bases, depending on the purpose:

• Contract, where processing is necessary to provide a service you have requested or to take steps at your request before entering into a contract.
• Legitimate interests, where necessary to operate, secure, evaluate, and improve our services, respond to business enquiries, and protect our legal rights, provided those interests are not overridden by your rights.
• Consent, where you choose to join our waitlist, receive marketing communications, or permit non-essential cookies or similar technologies. You may withdraw consent at any time.
• Legal obligation, where processing is necessary for us to comply with applicable law.

5. How we share personal data

We may share personal data with:

• Service providers that help us host, maintain, secure, analyse, and communicate about our services, acting under appropriate contractual protections.
• Professional advisers, auditors, insurers, regulators, courts, law-enforcement bodies, or other authorities where reasonably necessary or legally required.
• A buyer, investor, successor, or relevant adviser in connection with a proposed or completed merger, financing, reorganisation, acquisition, or sale of assets.

We do not share personal data with third parties for their own marketing purposes.

6. Data storage, security, and retention

We use appropriate technical and organisational measures designed to protect personal data, including encrypted connections, access controls, and reputable hosting services. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

We retain personal data only for as long as reasonably necessary for the purposes described in this policy. Retention periods depend on the type of data, our relationship with you, the operation of our services, and applicable legal, accounting, security, and dispute-resolution requirements. When data is no longer required, we delete or anonymise it, unless the law permits or requires further retention.

7. International transfers

Some service providers may process personal data outside the United Kingdom. Where a restricted transfer occurs, we use a lawful transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission Standard Contractual Clauses, together with any required transfer risk assessment and supplementary safeguards.

8. Your rights

Depending on the circumstances, UK data protection law may give you the right to request access to, correction of, or deletion of your personal data; restriction of processing; data portability; or to object to certain processing. You may also withdraw consent at any time where we rely on consent. These rights are not absolute and may be subject to legal conditions and exemptions.

To exercise a right, contact umer@otverse.ai or harshil@otverse.ai. We will respond without undue delay and normally within one calendar month, subject to any extension permitted by law. We may need to verify your identity before acting on a request.

9. Cookies and similar technologies

Our website may use cookies or similar technologies that are strictly necessary for security and core functionality. If we use non-essential technologies, including analytics technologies, we will explain their purpose and provide any consent controls required by law before using them. You can also manage cookies through your browser settings, although disabling essential technologies may affect website functionality.

10. Children's privacy

OTVERSE is intended for medical students and professionals aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected such data, we will take appropriate steps to delete it.

11. Automated decision-making

We do not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for individuals. If this changes, we will provide the information and safeguards required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page, revise the "Last updated" date, and provide any additional notice required by law. We encourage you to review this page periodically.

13. Complaints and contact

If you have questions or concerns about how we handle personal data, please contact umer@otverse.ai or harshil@otverse.ai. You also have the right to complain to the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk
Telephone: 0303 123 1113