Privacy Policy

Effective Date: January 13, 2026

1. Introduction

Olly Olly Inc. and its subsidiaries and affiliates (collectively, “Olly Olly,” “Company,” “we,” “us,” or “our”) are committed to protecting your privacy and complying with applicable data protection laws. This Privacy Policy describes how we collect, store, use, disclose, and safeguard information when you use our Services, visit our websites, use our mobile applications, and otherwise interact with us.

This Privacy Policy applies to: Customer Data (personal data we collect, process, and manage on behalf of our business customers); User Data (personal data concerning individuals acting on behalf of our Customers, users of the platform, account administrators, billing contacts, and authorized signatories); Prospect Data (data relating to visitors of our websites and prospective customers); and End Consumer Data (data concerning your customers whose information may be processed through our Services).

Our Services are designed for businesses and are not intended for personal or household use. Accordingly, we treat all personal data covered by this Policy as pertaining to individuals acting as business representatives rather than in their personal capacity.

2. Information We Collect

We collect information when you provide it directly, when it is collected automatically through your use of the Services, and from third-party sources.

2.1 Account and Identity Information

Contact Information (name, email, phone number, mailing address) for account creation, communications, and support. Business Information (business name, industry, service areas, hours, description) for service delivery and profile optimization. Account Credentials (username, password, security questions) for authentication. Billing Information (credit card number, billing address, tax ID) for payment processing. Professional Information (job title, role, employer) for account administration.

2.2 Platform and Connected Account Data

When you connect third-party accounts, we collect: Google Business Profile Data (profile content, photos, reviews, Q&A, posts, insights, verification status); Social Media Account Data (Facebook, Instagram, LinkedIn credentials, posts, engagement metrics); Directory Listing Data (citations across 40+ platforms, NAP data, categories); Website Data (domain, hosting credentials, content, analytics); and Advertising Account Data (Google Ads, LSA credentials, campaign data, spend).

2.3 Content and Media

We collect: Uploaded Media (photos, videos, logos, documents you provide); Generated Content (AI-created posts, captions, videos, review responses); Review Content (customer reviews, your responses, review request templates); and Communications (support tickets, emails, chat logs, call recordings).

2.4 End Consumer Data

We may collect data about YOUR customers, including: Customer Contact Information (names, phone numbers, email addresses) for review request delivery; Review Content (reviews left by your customers); and Communication Logs (SMS/email delivery status, open rates, response rates).

2.5 Technical and Usage Data

We automatically collect: Device Information (device type, OS, browser, screen resolution); Log Data (IP address, access times, pages viewed, referral URLs); Usage Data (features used, actions taken, session duration); Location Data (IP-based location, service area settings); and Cookies and Tracking data (cookies, pixels, web beacons).

2.6 Inferred and Derived Data

We generate: Rankings and Visibility scores; Competitive Intelligence (competitor rankings, activities, market position); Performance Metrics (call volume, review velocity, engagement rates); and AI-Generated Insights (content recommendations, optimization suggestions).

3. How We Use Information

We use personal data for the purposes described below, relying on the following legal bases as appropriate: Performance of Contract (processing necessary to fulfill our agreement with you); Legitimate Interests (processing necessary for our legitimate business interests); Legal Obligation (processing required to comply with applicable laws); and Consent (processing based on your explicit consent).

3.1 Service Delivery and Operations

We use your information for: creating, maintaining, and securing your account; providing, operating, and improving the Services; optimizing your Google Business Profile and online presence; managing your social media accounts and content; generating and distributing review requests to your customers; monitoring and correcting citations across directories; tracking rankings, visibility, and competitive position; detecting, alerting, and responding to unauthorized profile edits; generating reports, analytics, and actionable insights; processing payments and managing billing; and providing customer support and technical assistance.

3.2 AI and Machine Learning

We use artificial intelligence and machine learning technologies to: generate content recommendations for social media posts; create captions, hashtags, and post copy; convert photos to videos with motion, music, and effects; suggest review response templates; analyze competitive positioning and market trends; identify optimization opportunities; and detect anomalies, fraud, or unauthorized activity.

Your Content may be used to train and improve our AI models to provide better recommendations and features to you and other customers. If you do not wish your Content to be used for AI training purposes, you may opt out by contacting privacy@ollyolly.com. Opting out may limit certain AI-powered features.

3.3 Communications

We use your information for: sending service-related notifications and alerts; providing customer support and responding to inquiries; sending promotional communications (with consent); notifying you of product updates, new features, and offerings; and conducting surveys and collecting feedback.

3.4 Analytics and Improvement

We use your information for: understanding how users interact with our Services; identifying issues and improving usability; developing new products and features; conducting research and analysis; and measuring marketing campaign effectiveness.

3.5 Legal and Security

We use your information for: complying with legal obligations and responding to legal requests; protecting our rights, privacy, safety, and property; preventing fraud, abuse, and security threats; and enforcing our terms and agreements.

We may share your information in the following circumstances:

4.1 Service Providers

We engage third-party companies and individuals (“Service Providers”) to perform services on our behalf, including: cloud hosting and infrastructure, payment processing, customer support and communication tools, analytics and performance monitoring, email and SMS delivery services, AI and machine learning services, security and fraud prevention, and professional services. Our Service Providers are contractually obligated to protect your information and may only process it as directed by us for the purposes described in this Policy.

4.2 Connected Platforms

When you authorize connections, we share necessary data with third-party platforms including Google, Facebook, Instagram, directories, and review platforms as required to provide the Services.

4.3 Business Transfers

In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring or successor entity. We will provide notice before your information becomes subject to a different privacy policy.

4.4 Legal and Safety

We may disclose information: to comply with legal obligations, court orders, or governmental requests; to enforce our terms and agreements; to protect the rights, privacy, safety, or property of Olly Olly, our users, or the public; to prevent or investigate fraud, security issues, or illegal activity; and in connection with legal proceedings or disputes.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent or direct us to do so.

4.6 Aggregated and De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for research, analytics, benchmarking, or other business purposes.

5. Data Security

We implement industry-standard administrative, technical, and physical safeguards designed to protect your information, including: encryption of data in transit (TLS) and at rest (AES-256); access controls, authentication, and authorization mechanisms; regular security assessments, penetration testing, and vulnerability scanning; employee training on security and privacy; incident response and breach notification procedures; secure software development practices; and physical security measures for data centers.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.

If you become aware of any unauthorized access to your account, please contact us immediately at support@ollyolly.com.

6. Data Retention

We retain your information for as long as reasonably necessary to: provide the Services and maintain your account; comply with legal, regulatory, tax, and accounting obligations; resolve disputes and enforce our agreements; and support business operations and improve our Services.

Specific Retention Periods: Account information (duration of account + 7 years); Billing and payment records (7 years after transaction); Communication records (3 years); Usage logs and analytics (2 years); AI training data (duration of Services); Backup data (90 days after deletion request).

After the applicable retention period, we will securely delete or anonymize your information. Aggregated or de-identified data may be retained indefinitely for analytical purposes.

7. You Rights and Choices

7.1 General Rights

Depending on your location and applicable law, you may have the right to: Access (request a copy of the personal information we hold about you); Correction (request correction of inaccurate or incomplete information); Deletion (request deletion of your personal information, subject to legal exceptions); Portability (request a copy of your data in a machine-readable format); Restriction (request that we restrict processing of your information); Objection (object to processing based on legitimate interests or for marketing); and Withdrawal of Consent (withdraw consent where processing is based on consent).

To exercise these rights, contact us at privacy@ollyolly.com. We will respond within 30 days, or as required by applicable law.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know (you may request information about the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share information); Right to Delete (you may request deletion of your personal information, subject to certain exceptions); Right to Correct (you may request correction of inaccurate personal information); Right to Opt-Out of Sale/Sharing (while we do not “sell” personal information in the traditional sense, certain data sharing for targeted advertising may constitute a “sale” or “sharing” under CCPA—you may opt out by clicking “Do Not Sell or Share My Personal Information” on our website, contacting us at privacy@ollyolly.com, or enabling Global Privacy Control (GPC) in your browser); Right to Limit Use of Sensitive Information (you may limit our use of sensitive personal information to purposes necessary to provide the Services); and Right to Non-Discrimination (we will not discriminate against you for exercising your privacy rights).

Categories of Personal Information Collected: In the past 12 months, we have collected: identifiers; customer records; commercial information; internet activity; geolocation data; professional information; inferences; and audiovisual information. Categories Disclosed for Business Purposes: We have disclosed all of the above categories to our Service Providers for business purposes. Categories Sold or Shared: We may have “sold” or “shared” (as defined under CCPA) identifiers, internet activity, and inferences with advertising partners.

8. Communications

8.1 Service Communications

We may contact you with important information regarding the Services, including: account setup, verification, and security alerts; billing, payment, and subscription information; Google Business Profile alerts (edits, reviews, suspensions, verification); competitive intelligence alerts and ranking changes; platform updates, maintenance, and feature announcements; and legal notices and policy changes.

You cannot opt out of critical service communications that are integral to your use of the Services, including password resets, billing notices, security alerts, and urgent profile notifications.

8.2 Promotional Communications

We may send promotional communications about new features, offerings, events, and information we believe you will find valuable. You may opt out of promotional communications by: clicking “unsubscribe” in marketing emails; replying STOP to promotional SMS messages; adjusting notification preferences in your account settings; or contacting privacy@ollyolly.com. Opting out of promotional communications will not affect service-related messages.

9. Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to: operate and secure our Services; remember your preferences and settings; understand how you use our Services; measure and improve performance; deliver personalized advertising; and analyze marketing campaign effectiveness.

Types of Cookies: Essential (required for core functionality and security); Functional (remember preferences, settings, and choices); Analytics (understand usage patterns and improve Services); and Advertising (deliver relevant ads and measure effectiveness).Your Choices: You can manage cookie preferences by: adjusting your browser settings to block or delete cookies; using browser plugins for ad blocking or tracking prevention; enabling Global Privacy Control (GPC) in your browser; or opting out of interest-based advertising through industry tools (NAI, DAA). Note: Blocking certain cookies may affect functionality of the Services.

10. Children’s Privacy

Our Services are designed for business use and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 16 (or the applicable age of consent in your jurisdiction).

If we learn that we have collected personal information from a child, we will delete it promptly. If you believe we have information from a child, please contact us at privacy@ollyolly.com.

11. Data Controller and Processor

Olly Olly as Data Controller: Olly Olly acts as a data controller when we: collect information to set up and administer your account; process payment and billing information; monitor usage of our websites and Services; send marketing and promotional communications; respond to support inquiries; and improve and develop our Services.

Olly Olly as Data Processor: Olly Olly acts as a data processor when we: process Customer Data on your behalf as instructed; manage your Google Business Profile and connected accounts; send review requests to your customers; and create and publish content at your direction.

When acting as a processor, we process data strictly in accordance with your instructions, our service agreement, and applicable law. You, as the data controller, are responsible for: compliance with applicable privacy laws; providing necessary notices to individuals; obtaining required consents; and responding to data subject requests related to your Customer Data.

For customers requiring a Data Processing Agreement (DPA) to comply with GDPR or other data protection laws, please contact support@ollyolly.com

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

For material changes, we will: post a prominent notice on our website; send an email notification to account holders; provide an in-app alert; and update the “Effective Date” at the top of this Policy.

Your continued use of the Services after any changes constitutes your acceptance of the updated Policy. If you do not agree to the changes, you must stop using the Services and contact us to close your account.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Olly Olly Inc.

General Inquiries: support@ollyolly.com

Phone: (877) 655-9655

Mailing Address:

Olly Olly Inc.

525 N Tryon St #900

Charlotte, NC 28285

We will respond to your inquiry within 30 days, or as required by applicable law.

Effective Date: January 13, 2026 | Last Updated: January 13, 2026 | Version: 1.0