← Back to OTRIA

Privacy notice

Last updated: 4 October 2026. This notice explains how SC Katra Labs SRL uses personal data for Otria comparison, accounts, saved offers, optional Watch and manual supplier-application assistance.

Current service

You can compare electricity offers without an account. Anyone can create an account by verifying their email, save an offer, activate Watch or request assistance. Otria services are free; supplier charges still apply. There is no automatic contract-review or customer contract-upload service in this launch. Otria staff prepare applications and check supplier terms manually. You decide, accept and sign directly with the supplier.

Data we use and where it comes from

You provide your email and language for your account; household answers, postcode, consumption, contracted power, dates and price information for comparison; and your chosen offer and preferences when saving. You can also save a home nickname, address and CUPS to identify the offer. Home labels remain with your account until removed; saved-offer details expire after 30 days. Watch additionally uses your confirmed current-plan baseline, savings target and consent record. For an optional assisted promotion reminder, staff records the expiry date and replacement energy, power, recurring-charge and tax rates. Assistance requires the holder’s name, applicable surname(s), supply address, CUPS, identity number, phone and contact email; IBAN is requested only if you choose direct debit. We record your authorization, request status, staff messages and delivery results. Supplier information comes from CNMC and, for assistance, the selected supplier. Hosting and authentication services also process connection/IP information, device/browser metadata and security logs. Existing early-access records contain email, language, optional audience category and subscription/consent dates.

Purpose

We use these data to calculate and rank available offers against your household preferences, maintain your private account and saved offer, run the Watch checks you activate, prepare the application you authorize, and send sign-in, request-status or information-request emails. A saved offer does not activate Watch. Your chosen supplier may receive only the details needed for your authorized application. Your contact phone is for the supplier’s application; Otria will not call you. If you choose direct debit and confirm the bank details, Otria can pass the IBAN only to your chosen supplier for this application. You authorize the direct-debit mandate with the supplier. Preparing an application does not authorize Otria to accept or sign the supply contract on your behalf. Security and delivery records help prevent abuse and investigate failures. Optional launch/marketing updates require a separate choice.

Legal basis

Account, saved-offer and requested application processing is necessary to provide the service you request or take pre-contractual steps at your request (GDPR Article 6(1)(b)). Your recorded authorization limits what Otria may do: prepare and check, while you accept and sign. Watch and optional marketing rely on separate consent (Article 6(1)(a)); you can withdraw it without losing your account. Necessary security processing relies on our legitimate interest in protecting users and the service (Article 6(1)(f)). Any legally required restricted retention relies on the applicable legal obligation (Article 6(1)(c)). Reading this notice is not consent to optional processing.

Retention

Application identity, address, CUPS, phone, optional IBAN, request messages, contracts already stored and review notes expire 30 days after the request was created, even if assistance is unfinished. Access ends at expiry; database/private-file cleanup runs every 15 minutes and retries failures. Saved offers expire after 30 days. Account email, technical household/consumption profile, current-price baseline and Watch settings remain while needed for your account and requested service; they are separate from application details. Request account erasure at founders@otria.es. Necessary legal records may be blocked from ordinary use for the applicable legal period and then destroyed. Restricted provider backups and security/delivery logs follow their applicable retention cycles, so erasure from the active service does not imply immediate removal from every backup. Deletions must be reapplied after a restore. Legacy waitlist data expires after at most 12 months; unsubscribe stops updates immediately and starts deletion within 30 days.

Your choices

You can pause Watch in your account, withdraw assistance before submission or ask us to stop further help afterwards, and request account erasure by email. Stopping Otria assistance does not cancel a supplier application or contract. The form below unsubscribes only from launch updates, not essential sign-in or requested service messages. It gives the same response whether or not the address is registered.

Service providers

Vercel hosts the website and application. Supabase provides authentication, database and private storage; the primary Otria database is in Ireland (EU). Resend delivers sign-in and service emails. Access by Otria staff is restricted to authorized staff performing your request. For comparisons, CNMC receives the technical query (postcode, usage, power and dates), not your account email or bank details. The supplier you choose receives necessary application details under your authorization and acts under its own privacy notice. Email replies are handled in Otria’s business mailbox. We use Vercel Web Analytics without analytics cookies to measure visits to public pages, referral sources, device types and countries. Query strings and URL fragments are removed, and private account, comparison-result and application routes are excluded. Invoice contents and form answers are not sent as analytics events.

International transfers

Vercel, Supabase and Resend use international infrastructure and support, including processing in the United States. EU database hosting does not mean that all processing stays in the EU. International transfers require a valid GDPR mechanism, such as an applicable adequacy decision or the European Commission’s standard contractual clauses, with additional safeguards where necessary. Contact founders@otria.es for information about the safeguards applicable to your data or a copy of the relevant transfer terms. Provider data-processing information is linked below.

Provider information: Supabase · Vercel · Resend.

Data minimisation

Invoice PDFs are read in your browser; the original PDF is not uploaded by the comparison flow. Extracted technical inputs are sent to calculate offers. A temporary name/address/CUPS prefill from your own bill stays in tab storage and is accepted for up to 24 hours, then removed when read again; restart clears it. You confirm application data before sending it. Identity and IBAN are separate from Watch. IBAN is encrypted in the database and is not included in ordinary account responses, browser storage or notification emails. Existing contract files use private storage and expiring links. Email-linked profiles and aliases remain personal data. Do not send identity-document scans or bank details in ordinary email; staff can direct you to the supplier’s secure process if required.

Ranking and use of your data

Otria does not sell personal data. Comparison and Watch use rules based on your technical profile and preferences, not referral commissions. This is profiling for recommendations; it does not make a legally binding decision or switch your supplier. We do not send your invoice to an AI service for this launch. Estimates and missing information are identified; you can correct your answers and ask us about a result.

How Watch and assistance work

Watch is optional. Monthly checks notify you when a suitable offer reaches your savings target. If you request Otria assistance, you can separately opt into a promotion reminder: staff records the expiry and replacement unit prices, then Watch compares prices one week before expiry against the replacement cost for the same consumption. If those details arrive late, the check is scheduled for the next day. The reminder reports the available result even below your threshold, including when no comparable offer or current price is available. After expiry, monthly checks use the recorded replacement price. Processing and delivery may be delayed. Savings are estimates; update Watch when your contract changes. Existing date reminders remain as previously requested. Assistance emails report processing, information requests and completion of the manual check. You still sign with the supplier.

Controller details

SC Katra Labs SRL · VAT ID: RO31092756 · Trade register: J2013000116121 · Str Macesului, 13-15, Corp E, ap 5, Cluj Napoca, ZIP 400444, Romania. Operator of Otria and controller of personal data. Contact: founders@otria.es.

Your rights

You can request access, correction, erasure, restriction, portability where applicable, object to processing based on legitimate interests and withdraw consent without affecting prior lawful processing. Email founders@otria.es; we normally respond within one month and may request proportionate verification. Required fields are needed to deliver the requested feature; you may still compare without an account. You may complain to the AEPD in Spain, ANSPDCP in Romania, or the competent authority where you live, work or believe an infringement occurred. Updates to this notice will be dated; material changes to optional purposes require a new choice.

Unsubscribe from OTRIA updates

Enter the email you used to join the early-access list. We’ll stop sending launch updates to that address.