Privacy Policy

oloy is run by Oloy, Inc. (“we”, “us”). For your account, our websites and your use of oloy, we are the controller, and this policy describes what we do. For what oloy collects from the visitors and users of an app a customer has connected — recordings of visits, test visits and what we derive from them — we are a processor acting on the customer’s instructions: the customer is the controller and its own privacy notice applies. If you are such a visitor, contact the people who run that app; we pass on to them any request we receive about their users. You can reach us at hi@oloy.ai.

• Account details: your name, email address and other basic profile details from your Google sign-in, your workspace’s details, and any messages you send us.
• Your apps: the addresses of the apps you add, the settings you choose for them, what oloy captures when it tests them (such as screenshots and page content), and technical details about the apps oloy is installed in.
• Recordings of visits: if you add oloy to your app, recordings of visits to it — the pages people view, how they interact with them, and basic details such as their browser, screen size and country. What visitors type into form fields, passwords included, is hidden in their browser before anything is sent to us, and oloy does not try to work out who a visitor is.
• Usage and technical data: once you sign in, recordings of your sessions in oloy (session replay) and basic information about how you use it, such as the pages you open and what you do on them, and technical details such as your browser, device and approximate location. What you type into a password field is never recorded. We don’t track people who aren’t signed in to oloy — no analytics, no cookies for it and no session recording — in your browser or on our servers.
• Sign-in attempts: If you try to sign in, we keep a record of the attempt: the web address of the app you typed on our front page and, if we can’t let you in, the email address your Google sign-in gave us. We use it to run sign-in and to see who tried to get in.

Each time you sign in, we record that you accepted our Terms of Use and acknowledged this policy — your account and e-mail address, the version of each document, the time, your IP address and your browser’s identifying string — to prove what you agreed to and when, as our contract with you and our legitimate interest require. We keep these records for six years after your account closes, and you can ask us for a copy.

We use this data to provide oloy and improve it, to keep it secure, and to contact you about it.

Once you sign in, we record your sessions in oloy and collect usage data to improve it and to support you. We do this on the basis of our legitimate interests and our contract with you. You can object, or ask us about it, by writing to hi@oloy.ai. Where the GDPR applies, those two are our legal bases, with the legal obligations we are under.

We share data with service providers that help us run oloy — such as hosting, analytics, AI and messaging providers — who process it to provide their services to us. Some of them, like us, are in a different country from you, so your data may be processed there; where the GDPR applies, we rely on the EU’s standard contractual clauses for such transfers. The providers that process data about a customer’s app visitors for us are our sub-processors; we tell customers which they are on request at hi@oloy.ai and keep that answer up to date, as our Data Processing Addendum describes. We may also disclose data when the law requires it. We never sell your data or share it for advertising.

We keep data for as long as we need it to provide oloy, or longer where the law requires. Recordings of visits to a customer’s app are deleted 30 days after they are made, or sooner if the customer deletes them. Records of your agreement are kept as section 3 describes. You can ask us to delete your other data at any time.

We protect data with safeguards appropriate to its sensitivity. Data is encrypted at rest, and in transit between your browser and our servers. Access to customer and visitor data is limited to authorised personnel who need it to provide, support, secure and improve oloy, or where the law requires it, and everyone with access is bound to keep it confidential. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you as the law requires.

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to receive a copy of it, by writing to hi@oloy.ai; we won’t treat you differently for asking. In the European Economic Area or the United Kingdom you can also complain to your data protection authority. If you visited an app that uses oloy, contact the people who run it; we pass your request on to them.

We use cookies to sign you in, keep you signed in and remember your settings. Once you are signed in, we also use analytics cookies on oloy’s own site to understand how it is used; we set none before you sign in. We don’t use advertising cookies. Our site doesn’t respond to browser “Do Not Track” signals: we track nobody who isn’t signed in, and once you sign in we record you as described above.

oloy is not meant for anyone under 16. If you believe someone under 16 has given us personal data, contact us and we will delete it.

We may update this policy. Every version has a date and its own permanent address, where earlier versions stay available; the current one is always here.

Questions or requests about your data? Write to hi@oloy.ai.