Privacy policy

This explains what McKinney Creative Ventures LLC ("MCV", "we") does with data in Oleera. It is written to be read rather than to be survived, and where something is not true of us we say so instead of leaving it out.

Two kinds of data, and why the difference matters

Your account data is about you as our customer: your name, your email, your business, your billing details, and the record of how you use Oleera. We are responsible for it.

Your business data is what you put into Oleera about your own customers: their names, addresses, phone numbers, jobs, invoices and messages. That data is yours. We hold and process it on your instructions so we can provide the service, and for nothing else. If your customers ask you about it, you are the one who decides what happens; we act on your instruction.

What we collect

Because you gave it to us

• Account details: name, email address, business name, phone number.
• Billing details. Card numbers are handled by Stripe and never reach our servers; we see the last four digits, the brand, and the expiry.
• Anything you or your team type or upload into the product, including the records of your own customers.
• What you send us in a support message or the request access form.

Because you used the software

• Sign-in records, IP address and browser type, kept for security and for working out what went wrong when something breaks.
• An audit log of significant actions in your account, including actions taken by our own staff. That log exists for your benefit and we will show it to you.
• Email delivery events from your campaigns: delivered, opened, bounced, unsubscribed, marked as spam.

What we do not do

• We do not sell your data or your customers' data. Not to anyone, ever.
• We do not use it to train AI models, ours or anybody else's.
• We do not run advertising or behavioural tracking pixels inside the product.
• We do not use your business data to market to your customers on our own behalf.

Why we process it

• To provide Oleera and the features you turn on.
• To bill you and to keep the records tax law requires.
• To support you, and to investigate faults and abuse.
• To send you service messages such as invitations, password resets and billing notices. These are part of the service and you cannot unsubscribe from them while you have an account.
• To keep the service secure, and to comply with the law.

The AI features

When you use Ask Oleera, an approvals draft, or a standing instruction, the parts of your data needed to answer are sent to our AI provider, Anthropic, so they can produce a response for your account.

• It is used to answer your request and for nothing else.
• It is not used to train models.
• It is scoped to your account. The assistant cannot read another business's records, and that is enforced by the same boundary that stops any other part of the product doing it.

Who else processes it

We use the following providers to run Oleera. Each processes data only to provide their part of the service.

We will also disclose data where the law requires it, and we will tell you unless we are legally prevented from doing so. If MCV is ever acquired, your data may transfer as part of that, and you will be told before it happens.

Where it is held, and for how long

Data is stored in the United States.

• While your account is active: for as long as you keep it. You can delete individual records yourself at any time.
• After cancellation or suspension: archived for 90 days, so you can reactivate and find everything as you left it, then permanently deleted.
• Billing records: kept for as long as tax and accounting law requires, which is longer than 90 days.
• Backups: deleted data can persist in encrypted backups for a short period before those rotate out.

Your rights

You can ask us to give you a copy of your data, correct it, or delete it. Most of that you can do yourself without asking: contacts, invoices, proposals, deals, products, tasks and jobs export to CSV from inside the app whenever you like.

If one of your customers asks you to delete their data, you can do it in the product. If they contact us directly we will point them to you, because it is your record and not ours to delete.

Depending on where you live you may have additional rights, including under the California Consumer Privacy Act or the GDPR. Write to us and we will honour them. We will not charge you for it or treat you differently for asking.

Security

Data is encrypted in transit and at rest. Each account's data is isolated at the database level rather than by application code remembering to filter it, which is the difference between a boundary and a habit. Access by our staff is limited to what support requires and is written to an audit log.

No system is perfectly secure. If a breach affects your data we will tell you promptly, and we will tell you what we actually know rather than waiting until the story is tidy.

Cookies

The app uses cookies that are strictly necessary: keeping you signed in, and remembering which account you are looking at. There are no advertising cookies and no third party analytics inside the product. This marketing site uses privacy-preserving traffic counting that does not use cookies and does not track you between sites.

Children

Oleera is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

If we change this policy in a way that matters, we will email the account owner before it takes effect. The date at the top always reflects the current version.

Contact

McKinney Creative Ventures LLC, Woodbury, Minnesota, United States.
[email protected]