Privacy Policy.
Last updated August 3, 2026
Welcome to Olla.
Olla ("Olla," "we," "our," or "us") values your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, process, and safeguard information when you access or use our websites, applications, products, services, and related technologies (collectively, the "Services").
Olla is an artificial intelligence-powered platform designed to help individuals and organizations create, organize, edit, manage, and collaborate on Standard Operating Procedures ("SOPs") using written notes, uploaded documents, screenshots, images, audio recordings, videos, and other reference materials.
Please read this Privacy Policy carefully before using the Services. By creating an account, accessing the Services, or otherwise using Olla, you acknowledge that you have read and understood this Privacy Policy.
01 Who we are
Olla is operated by Olla LLC, a limited liability company organized under the laws of the State of Utah, United States.
For purposes of applicable privacy laws, Olla LLC is the data controller for information collected through the Services unless otherwise specified.
If you have questions regarding this Privacy Policy, you may contact us at:
Olla LLC
Utah, United States
support@olla.so
02 Scope of this Privacy Policy
This Privacy Policy applies to:
- the Olla website;
- the Olla web application;
- team workspaces;
- customer support interactions;
- communications sent by Olla;
- AI-powered SOP generation;
- all other products and services operated by Olla.
This Privacy Policy does not apply to:
- third-party websites linked from our Services;
- third-party authentication providers;
- payment providers;
- services operated independently from Olla.
Those services maintain their own privacy policies and practices.
03 Definitions
Throughout this Privacy Policy, the following terms have the meanings below.
"Account"
A registered user profile created to access the Services.
"Personal Information"
Any information that identifies, relates to, describes, or could reasonably be associated with an individual. Examples include name, email address, billing address, profile picture, and company name.
"User Content"
Content submitted to Olla by a user. This includes, but is not limited to, SOPs, SOP drafts, uploaded logos, comments, workspace content, templates, and written notes unless otherwise stated.
"Reference Materials"
Files uploaded solely for AI processing. These may include videos, screenshots, PDFs, Word documents, PowerPoint presentations, images, audio recordings, instructional documents, and notes. Reference Materials are processed only for the purpose of generating requested AI outputs and are handled differently from saved User Content, as described later in this Privacy Policy.
"AI Services"
Artificial intelligence technologies used by Olla to generate, edit, summarize, organize, or improve SOP content.
"Workspace"
A collaborative environment within Olla where multiple authorized users may create, edit, review, approve, comment on, or organize SOPs and related content.
04 Eligibility
The Services are intended for users who are 13 years of age or older.
If you are under the age required by the laws of your jurisdiction to independently consent to data processing, you may use Olla only with the involvement and permission of a parent or legal guardian.
We do not knowingly collect Personal Information from children in violation of applicable law. If we become aware that we have unintentionally collected Personal Information from a child where prohibited by law, we will promptly delete such information.
05 Information we collect
The information we collect depends on how you interact with Olla.
We collect information in three primary ways:
- Information you provide directly.
- Information collected automatically.
- Information received from third parties.
06 Information you provide
When creating or using an account, you may provide us with information including:
Account Information
- Full name
- Email address
- Password (encrypted)
- Company or organization name
- Profile picture
Subscription Information
When purchasing a subscription, you may provide a billing address, subscription plan, and transaction history. Olla does not store your payment card information. Payment information is securely processed by our third-party payment processor (such as Stripe), which maintains its own privacy and security practices.
Content You Choose to Save
When using Olla, you may create or save Standard Operating Procedures, SOP drafts, logos, templates, comments, approval records, workspace organization, project names, folders, and document metadata. This information remains associated with your account until deleted by you or otherwise removed in accordance with this Privacy Policy.
Customer Support Communications
If you contact Olla, we may collect your email address, support requests, bug reports, screenshots you voluntarily provide, and communications with our support team. This information helps us investigate issues, improve the Services, and respond to your requests.
07 Reference Materials uploaded for AI processing
One of Olla's core features allows users to upload instructional materials to generate AI-assisted SOPs.
These Reference Materials may include videos, audio recordings, screenshots, PDFs, Word documents, PowerPoint presentations, spreadsheets, photographs, instructional guides, written notes, and similar supporting files.
Unlike User Content that you intentionally save within your account, these Reference Materials are uploaded solely for processing.
After processing is complete, Olla's systems are designed to automatically remove these Reference Materials from our processing workflow.
Reference Materials are not retained as part of your permanent account content, except where temporary retention is reasonably necessary to complete processing, troubleshoot technical issues, comply with legal obligations, or maintain the integrity and security of our Services.
08 Information collected automatically
When you access Olla, certain technical information is collected automatically. This may include:
- IP address
- browser type
- operating system
- device identifiers
- browser language
- referring pages
- pages visited
- session duration
- interaction events
- timestamps
- approximate geographic region
- diagnostic information
- crash reports
- authentication logs
- security logs
We collect this information to maintain platform security, prevent fraud, improve performance, troubleshoot technical issues, analyze platform usage, and provide a better user experience.
09 Information received from third parties
Depending on how you access Olla, we may receive limited information from third-party providers.
Google Authentication
If you sign in using Google, we may receive your name, email address, profile image, and Google account identifier. The exact information shared depends on your Google account settings and permissions you grant during authentication.
Payment Providers
Our payment processor may notify us of successful payments, failed payments, subscription status, invoices, refunds, and payment disputes. Olla does not receive or store your complete payment card information.
10 How we use your information
We use collected information for legitimate business purposes, including to:
- create and manage user accounts;
- authenticate users;
- generate AI-powered SOPs;
- provide customer support;
- process subscription payments;
- maintain team workspaces;
- synchronize user content;
- improve AI-generated outputs;
- personalize the Services;
- detect abuse and fraud;
- protect platform security;
- investigate violations of our Terms;
- comply with legal obligations;
- communicate important service announcements;
- send transactional emails;
- maintain backups where appropriate;
- improve product performance and reliability.
We process Personal Information only where we have an appropriate legal basis to do so under applicable law.
11 AI processing and Artificial Intelligence Services
One of Olla's primary features is the ability to generate Standard Operating Procedures ("SOPs") using artificial intelligence.
To provide this functionality, Olla may process Reference Materials and User Content using one or more trusted artificial intelligence providers. These providers may include Anthropic (Claude), OpenAI, and other providers that Olla may integrate in the future to improve the Services.
Reference Materials submitted for AI processing are transmitted only as necessary to generate the requested output.
Olla does not use customer content to train its own artificial intelligence models. Likewise, Olla configures its AI integrations to prevent customer content from being used to train third-party foundation models whenever such options are made available by the provider.
While artificial intelligence is a powerful productivity tool, AI-generated content is not guaranteed to be complete, accurate, current, legally compliant, or suitable for every situation.
Users remain solely responsible for reviewing, editing, verifying, approving, and confirming all generated SOPs before relying upon or distributing them. Olla strongly encourages users to utilize the editing, preview, review, and approval tools available within the Services before implementing AI-generated procedures.
13 Third-party services
Olla relies on third-party providers to operate portions of the Services. Depending on how you use Olla, your information may be processed by:
- Stripe (payment processing)
- Supabase (authentication and database services)
- Google Authentication (OAuth sign-in)
- Anthropic and OpenAI (AI processing)
- Railway (application infrastructure)
- Cloudflare R2 (temporary object storage)
- Resend (email delivery)
- Whisper (speech transcription)
- FFmpeg (media processing)
- Vercel (application hosting)
- GitHub (software development and deployment)
These providers maintain their own privacy and security practices. Olla is not responsible for independently operated third-party services.
14 Data retention
Olla retains Personal Information only as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and protect legitimate business interests.
Account Information
Account information may be retained while your account is active. Following an account deletion request, we delete or anonymize Personal Information within a reasonable period unless continued retention is required by law or for legal or security matters.
Saved Content
Generated SOPs, drafts, logos, comments, workspace content, templates, and other User Content remain available until deleted by you or your organization. Deleted content may remain in secure backups for a limited period.
Reference Materials
Reference Materials uploaded solely for AI processing are intended to be stored temporarily and automatically removed from active storage following successful processing. Temporary copies may briefly remain to complete processing, troubleshoot technical issues, or maintain system integrity.
Security Logs
Security, authentication, and diagnostic logs may be retained longer to detect abuse, investigate incidents, maintain security, and comply with legal obligations.
15 Data security
We use commercially reasonable administrative, technical, and organizational safeguards, which may include encrypted communications, access controls, authentication safeguards, secure cloud infrastructure, monitoring, vulnerability management, role-based permissions, audit logging, and secure software development practices.
No electronic storage or Internet transmission method is completely secure, and Olla cannot guarantee absolute security. Users are responsible for protecting account credentials and promptly reporting suspected unauthorized access.
16 International users
Olla is operated from the United States. Users outside the United States acknowledge that information may be transferred to, processed in, and stored in the United States and other jurisdictions where our providers operate. Where required, Olla will implement appropriate safeguards for international transfers.
18 Analytics
Olla may collect aggregated and de-identified analytics such as feature usage, page visits, click patterns, performance metrics, device and browser information, error reports, and crash diagnostics. Analytics are not used to identify individual users unless necessary to investigate fraud, abuse, security incidents, or technical issues.
19 Marketing communications
Olla may send account verification, password reset, subscription, invoice, payment, platform, service, and security emails. Where permitted, we may also send optional product updates, educational materials, feature announcements, or promotions.
You may unsubscribe from promotional communications at any time. Essential transactional and account-related communications will continue.
20 Do not sell or share Personal Information
Olla does not sell Personal Information and does not knowingly share Personal Information for cross-context behavioral advertising. If these practices materially change, we will update this Privacy Policy and provide any legally required notices.
21 Your privacy rights
Depending on your location, you may have rights to access, correct, delete, download, or export Personal Information; restrict or object to certain processing; withdraw consent; request processing information; and complain to applicable authorities.
Olla responds to verified requests within the timeframes required by applicable law.
22 Accessing, updating, and deleting your information
Depending on available features, you may update profile, email, or company information; replace profile images; edit SOPs; organize workspace content; remove drafts; delete projects; download information; and permanently delete your account.
Following account deletion, we make reasonable efforts to delete or anonymize Personal Information, except where retention is required to comply with law, resolve disputes, investigate fraud or abuse, protect the Services, or enforce agreements. Encrypted backups may retain information temporarily through normal rotation.
23 California privacy rights
California residents may have additional rights under the CCPA, as amended by the CPRA, including rights to know, access, delete, correct, and receive Personal Information in a portable format, and to exercise those rights without discrimination.
Olla does not sell Personal Information or knowingly share it for cross-context behavioral advertising. To submit a request, use the contact information below.
24 International privacy rights
Users outside the United States may have rights under the GDPR, UK GDPR, Swiss Federal Act on Data Protection, and other laws, including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.
25 Legal bases for processing (GDPR)
Performance of a Contract
To provide requested Services, including accounts, SOP generation, content storage, workspaces, and subscriptions.
Legitimate Interests
To improve Services, prevent fraud, maintain security, develop features, investigate misuse, and operate efficiently.
Legal Obligations
To comply with laws, regulations, court orders, and lawful government requests.
Consent
Where required, processing is based on consent, which may be withdrawn where applicable.
26 Children's privacy
Olla is intended for individuals at least 13 years old. We do not knowingly collect Personal Information from children where prohibited. If we learn that such information was collected unlawfully, we will take reasonable steps to delete it promptly. Parents or guardians may contact us using the information below.
27 Third-party links
The Services may link to third-party websites, applications, documentation, or services. Olla is not responsible for their privacy practices, security, content, or policies. Review their privacy policies before providing Personal Information.
28 Business communications
By creating an account, you consent to communications necessary to operate the Services, including account verification, login notices, password resets, subscription updates, invoices, payment confirmations, security alerts, feature announcements, legal notices, and support responses. Optional marketing communications may be declined.
29 Security incident notifications
If Olla becomes aware of a data breach affecting Personal Information, we will provide notices as required by law. Notices may be sent by email, in-app notification, a posting within the Services, or another legally permitted method.
30 Changes to this Privacy Policy
Olla may revise this policy for changes in law, platform features, Services, business practices, security, or providers. Material changes will be communicated through the Services, by email where appropriate, or by other reasonable means.
The Last Updated date shows the most recent revision. Continued use after revisions become effective constitutes acceptance unless applicable law requires otherwise.
31 Contact us
For questions, concerns, or privacy requests, contact:
Olla LLC
Utah, United States
Email: support@olla.so
We will make reasonable efforts to respond within applicable legal timeframes.
32 Severability
If any provision of this Privacy Policy is found unlawful, invalid, or unenforceable, the remaining provisions remain in full force to the fullest extent permitted by law.
33 Entire Privacy Policy
This Privacy Policy is the complete statement of Olla's privacy practices concerning the collection, use, disclosure, storage, and processing of Personal Information through the Services, unless supplemented by notices or agreements for specific products, features, or jurisdictions.
Thank you
Thank you for trusting Olla with your information. Protecting your privacy is fundamental to our mission of helping individuals and organizations create, manage, and improve their operational knowledge with confidence.
We are committed to continually improving our security, privacy practices, and transparency as Olla grows.