Privacy Policy

oloy is run by Oloy, Inc. (“we”, “us”). For your account, our websites and your use of oloy, we are the controller, and this policy describes what we do. For data oloy processes for a customer about the visitors and users of its app — such as recordings of visits, test visits and what we derive from them — we are a processor acting on the customer’s instructions: the customer is the controller and its own privacy notice applies. If you are such a visitor, contact the people who run that app. You can reach us at hi@oloy.ai.

• Account details: your name, email address and other basic profile details from the account you sign in with (such as your Google account), your workspace’s details, and any messages you send us.
• Your apps: the addresses of the apps you add, the settings you choose for them, what oloy captures when it tests them (such as screenshots and page content), and technical details about the apps oloy is installed in.
• Services you connect: if you connect a service you use for your app, such as its backend or its code repository, the access you grant us, who granted it and when, and the data that service makes available to us under the permissions you grant, such as your app’s code, its settings and the structure of its database. We access only what the connection requires, and you can disconnect a service at any time.
• Recordings of visits: if you add oloy to your app, recordings of visits to it — the pages people view, how they interact with them, and basic details such as their browser, screen size and country — which we process for you as our Data Processing Addendum describes.
• Usage and technical data: recordings of your sessions in oloy (session replay) and basic information about how you use it, such as the pages you open and what you do on them, and technical details such as your browser, device and approximate location. What you type into a password field is never recorded.
• Sign-in attempts: if you try to sign up or sign in, we keep a record of the attempt, such as the web address of the app you entered, the email address your sign-in gave us and whether we could let you in. We use it to run sign-in and to see who tried to get in.

Each time you sign in, we record that you accepted our Terms of Use and acknowledged this policy — your account and e-mail address, the version of each document, the time, your IP address and your browser’s identifying string — to prove what you agreed to and when, as our contract with you and our legitimate interest require. We keep these records while your account is open and afterwards for as long as we may need them to establish, exercise or defend legal claims, and you can ask us for a copy.

We use this data to provide oloy and improve it, to keep it secure, and to contact you about it.

We record your sessions in oloy and collect usage data to improve it and to support you. We do this on the basis of our legitimate interests and our contract with you. You can object, or ask us about it, by writing to hi@oloy.ai. Where the GDPR applies, those two are our legal bases, with the legal obligations we are under.

We share data with service providers that help us run oloy — such as hosting, analytics, AI and messaging providers — who process it to provide their services to us. Some of them, like us, are in a different country from you, so your data may be processed there; where the GDPR applies, we rely on the EU’s standard contractual clauses for such transfers. The providers that process data about a customer’s app visitors for us are our sub-processors; we tell customers which they are on request at hi@oloy.ai and keep that answer up to date, as our Data Processing Addendum describes. We may also disclose data when the law requires it. If we are involved in a merger, acquisition, financing or sale of all or part of our business, data may be disclosed to the other parties and their advisers and may transfer as part of the transaction; this policy continues to apply to it. We don’t sell your data or share it for advertising.

We keep data for as long as we need it to provide oloy, or longer where the law requires. Records of your agreement are kept as section 3 describes. You can ask us to delete your other data at any time.

We protect data with technical and organisational measures appropriate to its sensitivity, such as encryption and limits on who can access it. Access to customer and visitor data is limited to authorised personnel who need it to provide, support, secure and improve oloy, or where the law requires it, and everyone with access is bound to keep it confidential. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you as the law requires.

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to receive a copy of it, by writing to hi@oloy.ai; we won’t treat you differently for asking. In the European Economic Area or the United Kingdom you can also complain to your data protection authority. If you visited an app that uses oloy, contact the people who run it.

We use cookies to sign you in, keep you signed in and remember your settings, and analytics cookies on oloy’s own site to understand how it is used. We don’t use advertising cookies, and our site doesn’t respond to browser “Do Not Track” signals.

oloy is not meant for anyone under 16. If you believe someone under 16 has given us personal data, contact us and we will delete it.

We may update this policy. Every version has a date and its own permanent address, where earlier versions stay available; the current one is always here.

Questions or requests about your data? Write to hi@oloy.ai.