Privacy Policy

Who We Are OllieLabs ("OllieLabs", "we", "us") provides an advertising attribution, CRM and automation platform (the "Service"). Advertisers connect their ad accounts and sales data so we can attribute each sale to the campaign that generated it, and send those conversions back to the ad platform. The Service also lets businesses manage customer relationships and automated messaging — including AI-assisted replies to direct messages on connected Instagram and Facebook accounts. This Privacy Policy explains what we collect, how we use it, and your choices.

Information We Collect - Account data: name, email, phone, password (hashed) and billing information you provide when you sign up. - Content you create: brands, contacts, deals, tasks, messages, automations and AI agents you configure. - Connected platform data: when you connect a Meta (Facebook/Instagram) account via Facebook Login, we access — only for the accounts you explicitly connect — your Pages and linked Instagram professional accounts, the messages people send to those accounts, basic profile information of those senders, comments, and page/insights metrics, strictly to provide the features you enabled. - Advertising data: for the ad accounts, datasets (pixels), Pages and business portfolios you explicitly select when connecting Meta, we read campaign metrics (spend, impressions, clicks and conversions per campaign), the name and category of the selected Page, and which business portfolio owns each asset. - Attribution data: ad click identifiers (such as fbclid and gclid) and ad referral information (campaign and ad ids) captured when a person visits your site or starts a conversation from an ad, and the sales you record in your CRM. We do not store ad images, ad copy or message text for attribution. - Usage data: log data, device and browser information, and analytics about how you use the Service.

How We Use Information - To provide, operate and improve the Service. - Attribution: to match each sale you record to the ad click or ad conversation that originated it, and show you, campaign by campaign, the revenue each one actually generated. - Conversion return: to send the conversions that closed outside your website (for example, a sale on WhatsApp or in store) back to the ad platform through the Meta Conversions API, into the dataset you connected and on behalf of your own ad account, so its optimization learns from real sales. - To send and receive messages on your behalf on connected channels and to generate AI-assisted replies you have configured. - To organize contacts and conversations in your CRM. - To process payments and manage your subscription. - To communicate with you about your account and provide support. - To maintain security and prevent abuse.

Meta Platform Data Data obtained through Meta APIs (Facebook/Instagram) — including messages, profile data of people who message you, page information and metrics — is used solely to provide the features you enable inside OllieLabs and is handled in accordance with the Meta Platform Terms and Developer Policies. We do not sell this data and do not use it for advertising unrelated to your account.

Advertising and attribution data stays scoped to your account: it is not aggregated across customers, not used to build models for others and not resold. Your assets remain in your business portfolio; OllieLabs acts as a partner, never as owner. Conversion events sent through the Conversions API carry personal identifiers (email, phone, external id) only as SHA-256 hashes, normalized before hashing.

How We Share Information We do not sell your personal data. We share data only with service providers that help us run the Service, under contract and only as needed: hosting and database (Vercel, Supabase); the AI model provider you configure (e.g., Anthropic, OpenAI, Google) to generate replies; payment processing (Stripe); and email delivery (Resend). At your instruction, we send hashed conversion events to the ad platforms you connect (Meta Conversions API). We may also disclose data if required by law.

Data Retention We retain your data for as long as your account is active or as needed to provide the Service. Conversation history and AI run logs are retained to provide memory and continuity, and are summarized and decayed over time. When you delete data or close your account, we delete or anonymize it within a reasonable period, except where retention is required by law.

Data Deletion You can request deletion of your data at any time: - In-app: delete individual records (contacts, conversations, brands) or close your account in Settings. - Disconnect a channel: removing a Meta connection in OllieLabs revokes our access and stops further data collection from it. - By request: email [email protected] with the subject "Data Deletion" and we will delete your personal data and any data obtained from connected platforms within 30 days, except data we must keep by law.

Your Rights Depending on your location (including under the Brazilian LGPD and the EU GDPR), you may have the right to access, correct, export, restrict or delete your personal data, and to withdraw consent. To exercise these rights, contact [email protected].

Security We protect your data with encryption in transit and at rest, access controls and tenant isolation. OAuth tokens for connected accounts are stored encrypted. No method of transmission or storage is 100% secure, but we work to protect your information.

Children The Service is not directed to children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.

Changes We may update this policy. We will post the new version here and update the date above. Continued use of the Service means you accept the updated policy.

Contact Questions or requests: [email protected].