Privacy policy

Data we collect

We process only what is needed to provide the service:

• Account details: name, email address, organization and role.
• Content in the apps you use: email, messages, calendar entries, files and projects.
• Technical data: session and device details, security and error logs.

The Marketing app and connected accounts

When you connect a social media or advertising account in Olan Marketing (for example Facebook, Instagram, Threads, TikTok, LinkedIn, YouTube, Google Ads or X), we access only what the permissions you approve allow: account and page names, profile images, the content you prepare for publishing, statistics of your posts, comments and messages for you to answer, and the campaigns, budgets and spend of your ad accounts.

We use this data only to do what you ask: publish and schedule content, show statistics, reply to comments and manage your ads. We do not sell it, use it for ad targeting or share it with third parties.

Access tokens issued by the platforms are stored encrypted. They are deleted when you remove a connection in Olan or revoke access in the platform's own settings.

Google API data

Olan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use YouTube API Services; by using them you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google Privacy Policy: https://policies.google.com/privacy. You can revoke YouTube access at https://myaccount.google.com/permissions.

AI features

When you use features such as writing help or the assistant, the relevant text is sent to our AI provider, Anthropic, to generate the answer. It is not used to train models.

Retention and deletion

We keep data while your account or the connection exists. To have a connected account's data deleted, follow the steps at /legal/data-deletion. To delete your whole account, contact your organization's administrator or us.

Security

Data is encrypted in transit with TLS and secrets at rest with AES-256-GCM. Access is limited by organization and role, and important actions are logged.

Your rights and contact

To exercise your rights of access, correction, deletion and objection under GDPR and KVKK, write to us. You can reach us through the support section in Olan.