Privacy Policy

This policy explains how Onlo AI Inc. ("Onlo", "we", "our") handles personal data when you visit onlo.ai or use the Onlo platform. We've tried to keep it plain. If anything is unclear, email privacy@onlo.ai and a human will answer.

A note on customer data

Onlo processes support conversations and connected-tool data on behalf of our customers. We act as a processor for that data: it belongs to the customer, and we only use it to operate the Service for them. We never use customer data to train AI models. The rest of this policy concerns the data we collect as a controller: primarily from visitors to our website and people who sign up for an account.

What we collect

We keep collection to what's necessary. In practice that's:

• Account details: name, work email, and company, provided when you sign up or contact sales.
• Usage data: IP address, browser and device type, pages viewed, and actions taken, collected automatically.
• Session statistics and trackers: aggregate counts and cookies that help us understand how the site is used.

Where data is mandatory, we'll say so at the point of collection. You can decline optional data without losing access to the Service.

Why we use it

We process this data to operate and improve the Service, respond to your requests, meet legal obligations, and detect fraud or abuse. Concretely, that covers running our hosting and infrastructure, optimizing site traffic, measuring product analytics, and contacting you about your account.

Where it's processed and how long we keep it

Data is processed at our operating offices and at our providers' facilities, which may be located outside your country. We keep personal data only as long as needed for the purpose it was collected for, plus any period required by law. Once that period ends, the data is deleted.

Your choices and rights

Depending on where you live, you can ask us to:

• Access a copy of your data, or correct it if it's wrong
• Delete it, or restrict how we process it
• Port it to another provider in a machine-readable format
• Object to processing, or withdraw consent you previously gave
• Lodge a complaint with your data protection authority

To exercise any of these, email privacy@onlo.ai. Requests are free and we'll respond within one month.

Security

We take appropriate technical and organizational measures to protect data against unauthorized access, disclosure, or destruction, including encryption in transit and at rest, scoped access controls, and audit logging. No system is perfectly secure, but we work continuously to reduce risk.

Cookies

We use cookies and similar trackers to operate the site, remember preferences, and measure usage. See our Cookie Policy for details, or control cookies through your browser settings.

Changes

We may update this policy from time to time. Material changes will be posted here with a new "Last edited" date, so it's worth checking back periodically.

Definitions

Personal data: any information that identifies, or could identify, a natural person. Usage data: information collected automatically as you use the site, such as IP address, request times, and pages visited. Controller: the party that decides why and how data is processed (here, Onlo, for website and account data). Processor: a party that processes data on someone else's instructions (here, Onlo, for our customers' support data).

Google user data and Limited Use

When you connect your Google account, Onlo's use, and transfer to any other app, of information received from Google APIs (your "Google API data") adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• Only to provide requested features. We use your Google API data solely to provide the user-facing features you request in Onlo, such as synchronizing support email with your shared inbox, and drafting and sending replies from your connected Gmail account. We don't use it for anything else.
• No selling, no ads. We never sell your Google API data, and we never use it for advertising of any kind, including personalized, retargeted, or interest-based ads.
• Limited human access. Access by Onlo personnel to your Google API data is limited to where you explicitly request support, where you give consent, where necessary for security (such as investigating abuse or protecting the integrity of the Service), or where required by law.
• Limited sharing. We share your Google API data only where necessary to provide these features, including with service providers who process it solely on our instructions to operate the Service, to secure the Service, or to comply with applicable law.
• Never to train general AI. We do not use your Google API data to develop, improve, or train generalized or non-personalized AI or machine-learning models.

You can disconnect your Google account from Onlo at any time, or revoke Onlo's access directly from your Google Account permissions. Once disconnected, Onlo stops requesting new Google API data. You can also request deletion of data we hold by emailing privacy@onlo.ai.