Who we are
Oketto, at oketto.com, is a review studio for renders and video, operated by Supering Technology LLC, 5830 E 2nd St, Ste 7000, Casper, Wyoming 82609, US. Write to [email protected] with any question about your data.
Your account
You sign in with Google or with a one-time code sent to your email. Sign-in is shared with Scopeful, so your Oketto account is the same account as on scopeful.org. Supabase, our database service, holds the account and sends the sign-in codes.
We keep your email, the name Google gives us if you use Google, where you signed up from, and whether we sent you a welcome email. oketto.com sets no cookies of its own; your session is kept in your browser's storage.
Your reviews
To run your reviews we store review settings, the optional link password (hashed, so we cannot read it back), client names, comments, pins, drawings, approvals, checklists, dates and file details such as names, formats, sizes, dimensions and durations. We count files and stored bytes to show usage and to bill for it.
If you review through a link
If someone sends you a review link, we store the name you type, your email if you give it, a guest identifier, your comments, pins and drawings, and any file you attach.
When you open a round under your name, we record the round, your name and the time, so the person who sent the link can see who has looked. We store a hashed form of your guest identifier, not the identifier itself.
When you open, play or download a file, we record which file, how many bytes were sent and a hashed form of your IP address, so the person who sent the link is billed for each file at most once a day for you. The hashing key changes every day, and the hashed address is deleted after 7 days.
Anyone with the link, and its password if one is set, can see the files and comments shared in it.
The AI quality check
When a new round replaces earlier files, Oketto sends the text of each open note, crops of the pinned area from the old and new version, and a small view of the whole frame to Anthropic, which runs the Claude model that writes the answer. For video, it sends still frames around the note's time. We store the answer, the crops' references and usage figures.
Under Anthropic's commercial terms, Anthropic does not train its models on this content. You can switch the check off for images or video in Settings.
Agent keys
If you create a key for an AI agent, we store a hash of the key, its name, its permissions and when it was last used. The key itself is shown to you once and never stored.
Voice notes
Voice notes first use your browser's own speech recognition. If your browser has none, your microphone audio streams from your browser to Deepgram, a speech-to-text service, using a short-lived token from us.
Hosting and storage
Cloudflare hosts Oketto and keeps logs of requests to our servers. Cloudflare R2 stores uploads, attachments and previews, and Cloudflare resizes and crops images.
To limit abuse of review links and agent keys, we store a hashed form of your IP address and the times of your requests in Upstash, a database service. These records expire on their own.
We send email through Loops: a welcome email when you first sign in, a notice when a client comments on or approves your review, and a reminder before a round's due date. These emails carry your address, your first name, the review title, the client's name, the start of the comment, the round name and its due date.
Payments
Creem handles checkout as merchant of record. We send your email and account ID to Creem when you start the plan, and your monthly usage total so Creem can bill it. Creem collects and keeps your card and billing details; Oketto receives a purchase reference and your plan's status, never your card number.
Browser storage
Your browser's storage on oketto.com keeps your session, your guest name and identifier, comment drafts, a review link's password for the session, and display preferences such as day or night mode and your colour.
How long we keep it
We keep your account, reviews, comments and files until you delete them or ask us to delete your account. Files idle for 12 months are archived or deleted after notice. When you delete a review, its files are deleted from storage; a failed deletion is queued and retried.
Your requests
Write to [email protected] for a copy of your data, a correction, or deletion of your account. We answer within 3 business days.
Changes
When this policy changes, we post the new version on this page with a new date.