Privacy Notice

Who is responsible

Ollo is the data controller for personal data processed through the Ollo website and apps. That means we decide why and how your data is used. Contact: hello@sayollo.si.

What we collect and why

• Account data (name, email, password or Google sign-in) — to create and secure your account. Basis: contract.
• Profile and career data (experience, skills, claims, links such as LinkedIn or portfolio, photo, resume, preferences) — to build your profile, match you to roles and generate resumes. Basis: contract.
• Voice conversations and interviews (audio processed live, transcripts, assessments, interview-integrity signals such as tab switches) — to run interviews and produce reports for companies you apply to. Basis: contract and legitimate interests in fair hiring.
• Background and reference checks (public web pages about you, reference responses) — only with your explicit consent. Basis: consent, which you can withdraw.
• Company and hiring data (company details, role briefs, team members, pipeline decisions) — to provide the hiring workspace. Basis: contract.
• Connected services (Gmail, Slack, WhatsApp messages, ATS records) — only when you connect them, to send and read messages on your behalf. Basis: contract and consent.
• Usage and device data (IP address, browser, pages used, error logs) — for security, fraud prevention, support and improving Ollo. Basis: legitimate interests.
• Support messages — to answer you. Basis: contract and legitimate interests.

Who we share it with

• Companies you apply to or choose to be discoverable by — your profile, resume, trust score and interview reports, according to your visibility settings.
• Service providers that host and run Ollo for us: cloud hosting and database, AI model providers, web search, email delivery, WhatsApp and Slack messaging.
• Paddle, our Merchant of Record, for selling subscriptions, managing billing, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where the law requires it.

We do not sell your personal data.

International transfers

Some providers process data outside the EEA. Where they do, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep account and profile data while your account is active. When you delete your account, or data is no longer needed, we delete or anonymise it, normally within 30 days, except where the law requires us to keep records (for example invoices) for longer.

Your rights

You can ask to access, correct, delete, restrict or export your data, object to processing based on legitimate interests, and withdraw consent at any time. Many controls are in your Privacy settings. Email hello@sayollo.si for anything else; we reply within one month. You can also complain to your data protection authority — in Slovenia, the Information Commissioner (Informacijski pooblaščenec).

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage of connected-account keys, access controls that limit each user to their own data, and server-side handling of credentials.

Cookies

Ollo uses only essential browser storage needed to keep you signed in and remember settings such as your theme. We do not use advertising cookies. You can clear this storage in your browser at any time, which signs you out.