1. Contact
For privacy questions, access requests, correction requests, complaints, or unsubscribe issues, contact us at hello@getolli.app.
2. Personal information we collect
We may collect contact details, work email addresses, phone numbers, business names, job details, website URLs, inventory tool names, SKU ranges, revenue ranges, audit answers, support messages, newsletter signups, meeting notes, billing details, user account details, device and usage information, and technical logs.
If you use Olli's audit or SaaS product, we may also process inventory exports, product records, supplier records, purchase-order data, sales data, lead times, and spreadsheets. This information is usually business information, but it may contain personal information if your files include names, email addresses, phone numbers, notes, or other identifiers.
We do not intentionally collect sensitive information unless you provide it. Please do not upload sensitive personal information unless it is necessary for your use of Olli and you have the right to provide it.
3. How we collect information
We collect information directly from you through forms, uploads, emails, calls, checkout, support, and account use. We may also collect information from connected systems you authorise, such as inventory platforms, ecommerce tools, accounting tools, spreadsheets, email systems, and messaging services.
4. Why we use information
We use information to operate the website, run audits, generate reports, provide dashboards, forecast stock risks, draft purchase-order emails, send alerts, manage onboarding, provide support, bill customers, secure the service, monitor reliability, improve Olli, comply with legal obligations, and communicate with you about Olli.
5. AI and automated analysis
Olli uses software and AI-assisted analysis to identify inventory risks, generate summaries, recommend actions, and draft operational content. These outputs are decision support only and should be reviewed by your team before action is taken.
We do not sell customer data. We do not use customer business data to train public AI models. We may use de-identified or aggregated patterns to improve product quality, security, and reliability.
6. Who we share information with
We share information with service providers and subprocessors who help us host, store, secure, email, message, analyse, bill, support, and operate Olli. These may include providers such as Supabase, Vercel, Resend, Stripe, messaging providers, analytics or error-monitoring tools, professional advisers, and customer-authorised integrations. We maintain more detail on our Trust page.
We may also disclose information if required by law, to protect rights and security, as part of a business transfer, or with your consent.
7. Overseas disclosure
Some providers may store or process information outside Australia, including in the United States, European Union, United Kingdom, Singapore, or other countries where our providers operate. We take reasonable steps to use reputable providers and protect information in line with applicable privacy obligations.
8. Cookies and local storage
The website may use essential cookies, local storage, and session storage to operate forms, reduce duplicate audit submissions, maintain admin sessions, and keep the service secure. At the time of this update, we do not run third-party advertising pixels on getolli.app.
If we add non-essential analytics, remarketing, or advertising tools, we will update this policy and add any required consent controls.
9. Marketing messages
We may send newsletters, product updates, or commercial messages where we have express consent or can reasonably infer consent under Australian spam laws. Marketing emails will identify Olli and include a clear way to unsubscribe. We action unsubscribe requests as soon as practical and within 5 working days. You can also opt out by emailing hello@getolli.app.
10. Security
We use reasonable safeguards designed to protect information from misuse, interference, loss, unauthorised access, modification, and disclosure. These may include encrypted transport, restricted access, role-based permissions, audit logs, rate limiting, secret rotation, environment separation, provider security controls, and backup procedures.
No system is completely secure. If you believe information has been accessed without authorisation, contact us immediately.
11. Data retention
We keep information for as long as needed to provide Olli, manage accounts, support customers, improve reliability, comply with legal and tax obligations, resolve disputes, enforce agreements, and protect security. When information is no longer needed, we will take reasonable steps to delete, destroy, or de-identify it.
12. Access, correction, and complaints
You can ask to access or correct personal information we hold about you. You can also complain if you believe we have mishandled personal information. We will respond within a reasonable time, usually within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
13. Data breaches
If we suspect a data breach, we will assess it promptly, record it in our internal incident register, and take containment and remediation steps. If an eligible data breach occurs, we will notify affected individuals and the OAIC as required by the Privacy Act.
14. Children
Olli is a business service and is not directed to children.
15. Changes
We may update this policy when our product, providers, laws, or practices change. The latest version will be posted at getolli.app/privacy.