California Privacy Notice
Effective October 21, 2026 at 6:17 p.m. ET | Last Updated October 21, 2026 | Version 1.2
1. Categories of Personal Information We Collect
Category (CPRA) | Examples | Purpose |
|---|---|---|
Identifiers | Name, email, phone, account credentials, business address | Account creation, authentication, support |
Commercial information | Subscription tier, billing history, transaction records | Billing (via Stripe), account management |
Internet / network activity | Log data, device and browser information, session cookies | Security, service operation, fraud prevention |
Internet / network activity (Olli assistant) | What you type into Olli and earlier messages in the same conversation, which may include personal information you choose to type | Generating answers to your questions |
Identifiers and network activity (Olli usage records) | A record that a question was asked or a change was confirmed: your user identifier, the time, the size of the exchange, which record was changed, your IP address, and device details — for help questions, not the words | Security, abuse prevention, and measuring usage |
Identifiers, commercial information and other categories in workspace records (Olli data features). | Records in your workspace that Olli looks up for a user who asks about them, such as customer and contact names, phone numbers, email and service addresses, job details, schedules and notes, records from add-ons your business holds, and the changes Olli proposes, plus the name of the page the user is viewing (on a record page, the record's name) and the record's ID. Billing and financial data is excluded by default. | Answering the user's question or proposing the change the user asked for. |
Geolocation data | Coordinates derived from addresses you save in your account (such as your business address and job locations) via Mapbox geocoding and, if you allow your browser to share it, your device's location as reported by your browser, which is used to rank address suggestions | Mapping, routing, and address suggestions (feature-dependent) |
Professional information | Company name, role, team member details entered by your business | Providing the multi-user service |
Audio (where applicable) | Business-line voicemail via our phone system; call recordings, where used, are handled by a separate third-party service, not by Ollify directly | Business communications and quality |
2. What We Do Not Do
We do not sell personal information and do not share it for cross-context behavioral advertising.
We do not collect sensitive personal information except for account log-in credentials and, if you allow your browser to share it, your device's location. We use log-in credentials only to provide the Service and keep it secure, and we use device location only to improve address suggestions. The Service is for businesses, and its users must be at least 18 years old. We do not sell or share (as California law defines those terms) the personal information of anyone, including consumers under 16 years of age.
We disclose the Olli information described in Section 1 to a service provider, Anthropic, PBC, to generate answers for you and for related service security and quality purposes. This is a disclosure to a service provider for a business purpose, not a sale or sharing, and Anthropic may not use this content to train its models.
Olli asks you not to type sensitive personal information. If you do, we use it only to generate your answer.
3. Retention
We retain personal information for as long as your business's account is active, and thereafter per the periods described in our Privacy Policy — generally a 60-day export window after cancellation followed by deletion, with longer retention only where required by law (for example, billing and tax records).
3.1 Olli. Ollify does not store the content of your Olli help conversations on its servers. A copy stays on your device until you start a new conversation, turn Olli off, or sign out. Unless your administrator has turned Olli's data features off, those conversations are stored in your workspace, are visible only to you, and are moved to Trash after 18 months without activity (unless you pinned them) or when you delete them, and are permanently erased after your business's recovery period (30 days unless changed). We may keep them longer where the law requires it. Under its current policy, our service provider, Anthropic, deletes the content it receives from its systems within thirty (30) days of receipt or generation, unless it must retain it longer for safety or legal reasons. Records that a question was asked or a change was confirmed (your user identifier, the time, the size of the exchange, your IP address, and device details, but not the words) are kept in our audit logs for two years (730 days). Records of confirmed changes are also kept in our usage ledger while your account is open, for up to seven (7) years, and are deleted with your account after it closes. Purchase and authorization records (who authorized each purchase, when, the wording and document versions shown, what was bought and charged, and the last four digits of the card or bank account) are kept for seven (7) years, including after your account is deleted, and the IP address, browser and device details recorded with each purchase are kept for four (4) years. Olli usage records (who asked, when, how large the exchange was, how many tools were used and which area of Ollify, but not the words) are kept for ninety (90) days, and hourly workspace totals with no person and no text are kept for up to thirteen (13) months.
4. Your Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"):
4.1 Right to Know. You may request disclosure of the categories of personal information collected, the purposes for collection, the categories of third parties with whom we share it, and specific pieces of personal information collected about you.
4.2 Right to Delete. You may request deletion of personal information we have collected, subject to certain exceptions.
4.3 Right to Correct. You may request correction of inaccurate personal information.
4.4 Right to Opt Out of Sale or Sharing. We do not sell personal information and do not share personal information for cross-context behavioral advertising. This right is satisfied by our data practices.
4.5 Right to Limit Use of Sensitive Personal Information. As described in Section 2, the only sensitive personal information we collect is account log-in credentials and, if you allow your browser to share it, your device's location. We use them only to provide the Service, including keeping it secure and improving address suggestions. Because we do not use sensitive personal information for any other purpose, there is nothing for this right to limit.
4.6 Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA/CPRA rights.
4.7 How to Exercise These Rights. How to exercise these rights, including export and deletion request procedures, is described in full in our Privacy Policy at ollify.app/legal/privacy. Contact: privacy@ollify.app.
4.8 Olli. Ollify does not store the content of your Olli help conversations, so you can clear the copy on your device at any time. You can delete your own data conversations from your conversation history. Your workspace administrators cannot read them. Information about your business's customers in the records Olli looks up is held for your business; to use a right about it, contact the business, or email privacy@ollify.app and we will pass your request on. Records that a question was asked are personal information we hold and are covered by the rights above.