Privacy policy

This explains what McKinney Creative Ventures LLC ("MCV", "we") does with data in Oleera. It is written to be read rather than to be survived, and where something is not true of us we say so instead of leaving it out.

Two kinds of data, and why the difference matters

Your account data is about you as our customer: your name, your email, your business, your billing details, and the record of how you use Oleera. We are responsible for it.

Your business data is what you put into Oleera about your own customers: their names, addresses, phone numbers, jobs, invoices and messages. That data is yours. We hold and process it on your instructions so we can provide the service, and for nothing else. If your customers ask you about it, you are the one who decides what happens; we act on your instruction.

What we collect

Because you gave it to us

• Account details: name, email address, business name, phone number.
• Billing details. Card numbers are handled by Stripe and never reach our servers; we see the last four digits, the brand, and the expiry.
• Anything you or your team type or upload into the product, including the records of your own customers.
• What you send us in a support message or the request access form.

Because you used the software

• Sign-in records, IP address and browser type, kept for security and for working out what went wrong when something breaks.
• An audit log of significant actions in your account, including actions taken by our own staff. That log exists for your benefit and we will show it to you.
• Email delivery events from your campaigns: delivered, opened, bounced, unsubscribed, marked as spam.

What we do not do

• We do not sell your data or your customers' data. Not to anyone, ever.
• We do not use it to train AI models, ours or anybody else's.
• We do not run advertising or behavioural tracking pixels inside the product.
• We do not use your business data to market to your customers on our own behalf.

Why we process it

• To provide Oleera and the features you turn on.
• To bill you and to keep the records tax law requires.
• To support you, and to investigate faults and abuse.
• To send you service messages such as invitations, password resets and billing notices. These are part of the service and you cannot unsubscribe from them while you have an account.
• To keep the service secure, and to comply with the law.

The AI features

When you use Ask Oleera, an approvals draft, or a standing instruction, the parts of your data needed to answer are sent to our AI provider, Anthropic, so they can produce a response for your account.

• It is used to answer your request and for nothing else.
• It is not used to train models.
• It is scoped to your account. The assistant cannot read another business's records, and that is enforced by the same boundary that stops any other part of the product doing it.

Google sign in, and your Business Profile

Two separate things use Google, they are deliberately kept apart, and neither one is bundled into the other.

Signing in with Google

If you choose to sign in with Google, Google tells us your email address, your name and your profile picture. That is the whole of it. We use it to create and identify your login, the same way we would use an email address and password, and for nothing else. We do not receive your Google password, and we cannot read anything else in your Google account with it.

Connecting your Google Business Profile

If you connect your Google Business Profile, and only if you do, you grant Oleera the business.manage permission for the profiles you choose. That permission lets Oleera read your business listings and the reviews customers leave on them, and post replies and updates that you or your team have approved.

• We use it to show your reviews inside Oleera, to help you answer them, and to publish what you approve. Nothing is posted to your listing without a person in your account approving it.
• We store the access token that keeps the connection alive, and the review and listing content needed to display it to you. The token is held encrypted and is never shown in the product.
• We do not sell this data, we do not use it for advertising, and we do not use it to train AI models.

This connection is not part of signing up. You will never be asked for it on the way into the product, only later, from the connections screen in settings, when you turn the feature on.

What we never ask Google for

We do not read your Gmail, your Google Calendar or your Google Drive. Those permissions are not registered on our Google application at all, which means we could not request them even if we wanted to. Where Oleera works with mail and calendar it does so through a separate connection you make yourself, and that is described where you make it.

Turning it off

You can disconnect Google from the connections screen in Oleera at any time, which revokes our access and deletes the stored token. You can also revoke it from Google directly at myaccount.google.com/permissions , which works whether or not you still have an Oleera account. Review and listing content we already copied into your workspace is your business data, and it follows the same retention and deletion rules as everything else in this policy.

Oleera's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Who else processes it

We use the following providers to run Oleera. Each processes data only to provide their part of the service.

We will also disclose data where the law requires it, and we will tell you unless we are legally prevented from doing so. If MCV is ever acquired, your data may transfer as part of that, and you will be told before it happens.

Where it is held, and for how long

Data is stored in the United States.

• While your account is active: for as long as you keep it. You can delete individual records yourself at any time.
• After cancellation or suspension: archived for 90 days, so you can reactivate and find everything as you left it, then permanently deleted.
• Billing records: kept for as long as tax and accounting law requires, which is longer than 90 days.
• Backups: deleted data can persist in encrypted backups for a short period before those rotate out.

Your rights

You can ask us to give you a copy of your data, correct it, or delete it. Most of that you can do yourself without asking: contacts, invoices, proposals, deals, products, tasks and jobs export to CSV from inside the app whenever you like.

If one of your customers asks you to delete their data, you can do it in the product. If they contact us directly we will point them to you, because it is your record and not ours to delete.

Depending on where you live you may have additional rights, including under the California Consumer Privacy Act or the GDPR. Write to us and we will honour them. We will not charge you for it or treat you differently for asking.

Security

Data is encrypted in transit and at rest. Each account's data is isolated at the database level rather than by application code remembering to filter it, which is the difference between a boundary and a habit. Access by our staff is limited to what support requires and is written to an audit log.

No system is perfectly secure. If a breach affects your data we will tell you promptly, and we will tell you what we actually know rather than waiting until the story is tidy.

Cookies

The app uses cookies that are strictly necessary: keeping you signed in, and remembering which account you are looking at. There are no advertising cookies and no third party analytics inside the product. This marketing site uses privacy-preserving traffic counting that does not use cookies and does not track you between sites.

Children

Oleera is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

If we change this policy in a way that matters, we will email the account owner before it takes effect. The date at the top always reflects the current version.

Contact

McKinney Creative Ventures LLC, Woodbury, Minnesota, United States.
[email protected]