Privacy Notice

Last Updated: March 23, 2023‍

Olo Inc. (“Olo”, “us”, “we”) provides online, on-demand ordering, guest engagement, and payment tools for the hospitality industry. This Privacy Notice (“Notice”) describes how we collect, use, and disclose personal information. This Notice also explains the rights and choices you have related to your personal information and how to contact us regarding our privacy practices. This Notice applies to personal information that we collect through Olo websites, portals, other digital assets, and tradeshows.‍

We treat all personal information covered by this Notice as pertaining to individuals acting as business representatives, and not in their individual or household capacity.‍

If you are a consumer who has an account with Olo, please read our Privacy Notice for Olo Account Holders. This notice does not apply to Olo’s consumer-facing services. Please note that in providing services to restaurants and other business customers, we process consumer personal information as a service provider on behalf of those customers. Please consult the privacy notice of the restaurant or other business customer using our services for information about how they handle your personal information.‍

We reserve the right to modify this Notice at any time. If we make material changes to this Notice, we will notify you by updating the date of this Notice. The current version of this Notice will always be posted at this page.‍

Personal Information We Collect

Information you provide to us:

  • Contact details, such as your business name, job title, first and last name, email address, mailing address, and phone number.
  • Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise.
  • Information needed for Know Your Customer (“KYC”) checks performed by Olo, such as dates of birth, social security numbers, and nationality or citizenship information relating to certain individuals who own businesses that utilize Olo Pay.
  • Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
  • Other data you provide, which we will use as described in this Notice or as otherwise disclosed at the time of collection.

‍Third party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

  • Third parties, such as data brokers or business partners.
  • Public sources, such as social media platforms.

‍Automatic data collection. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our websites and services, our communications and other online services, such as:

  • Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state or geographic area.
  • Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to our website, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.

‍The tools we may use for automatic data collection include:

  • Cookies, which are text files that websites store on a visitor‘s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
  • Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
  • Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

‍Information We Derive. We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.

‍How We Use Personal Information

We use personal information for:

‍Marketing, sales and contracting, including to engage with potential customers and vendors, negotiate and enter into agreements, and maintain relationships with our customers. We may also use the information for direct marketing by email and other means.

‍Service delivery, including to:

  • Provide, operate, and improve our services and our business;
  • Communicate with you about our services, including by sending announcements, updates, security alerts, and support and administrative messages; and
  • Provide support for our services and respond to your requests, questions, and feedback.

‍Research and development. As part of these activities, we may create aggregated, de-identified or other anonymous data from personal information we collect. We will use this data only in de-identified form and will not attempt to re-identify it except as permitted by law.

‍Compliance and protection. We may use your personal information to:

  • Comply with applicable laws, lawful requests, and legal process, such as to complete KYC checks and respond to subpoenas or requests from government authorities;
  • Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
  • Audit our internal processes for compliance with legal and contractual requirements and internal policies;
  • Enforce the terms and conditions that govern our website and our services; and
  • Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

‍How We Disclose Personal Information

We may disclose your personal information to:

Affiliates. Our corporate affiliates, for purposes consistent with this Notice.

Vendors. Companies and individuals that provide services on our behalf or help us operate our services or our business (such as hosting, information technology, customer support, email delivery, identity verification/fraud prevention, and website analytics services).

‍Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us).

‍Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

‍Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Olo or our affiliates (including, in connection with a bankruptcy or similar proceedings).

‍We may disclose aggregated or de-identified information that cannot reasonably be used to identify you to other recipients not listed above.

‍Your Choices

Opt out of marketing communications. If you have signed up to receive marketing communications from us, you may opt out of marketing-related email communications by following the opt out or unsubscribe instructions contained in the marketing communications we send you.

Cookies. Most browser settings let you delete and reject cookies placed by websites. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, you may not be able to use all functionality of our services and our services may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, please visit www.allaboutcookies.org.

‍Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.


Other Sites and Services

Our services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.

‍Security

We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

‍Children

Our website is not intended for use by individuals under 18 years of age. If we learn that we have collected personal information through our services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

‍A Note About Job Applicants

When you visit the “People & Culture” portion of our website to submit a job application, we collect the information that you provide to us in connection with your job application. This includes business and personal contact information, professional credentials and skills, educational and work history, and other information included in your resume. This may also include diversity information that you voluntarily provide. We use this information to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, and monitoring recruitment statistics. We may also use this information to provide improved administration of the website, and as otherwise necessary (a) to comply with relevant laws or to respond to subpoenas or warrants served on Olo; (b) to protect and defend the rights or property of Olo or others; (c) in connection with a legal investigation; and/or (d) to investigate or assist in preventing any violation or potential violation of the law, this Notice, or Olo’s Terms of Use.

‍California Disclosures

If you are a California resident, California law requires us to disclose the following additional information with respect to our collection, use, and disclosure of personal information. If you reside in California, this section applies to you.

‍Additional Disclosures

‍In the preceding 12 months, we have collected the following categories of personal information: identifiers, commercial information, electronic network activity information, professional or employment related information, and inferences. For more information about the data points we collect and the categories of sources of such collection, please see the Personal Information We Collect section above. We collect personal information for the business and commercial purposes described in the How We Use Personal Information section above. In the preceding 12 months, we have disclosed personal information for the business and commercial purposes described in the How We Disclose Personal Information section above and we have made disclosures for business purposes to the following categories of recipients:

Category of Personal Information Categories of Recipients
Identifiers
  • Internet service providers, data analytics providers, operating systems and platforms, and other vendors
  • Affiliates
  • Professional advisors
Commercial information
  • Internet service providers, data analytics providers, operating systems and platforms, and other vendors
  • Affiliates
  • Professional advisors
Electronic Network Activity Information
  • Internet service providers, data analytics providers, operating systems and platforms, and other vendors
  • Affiliates
Professional or employment related information
  • Internet service providers, data analytics providers, operating systems and platforms, and other vendors
  • Affiliates
  • Professional advisors
Inferences
  • Internet service providers, data analytics providers, operating systems and platforms, and other vendors
  • Affiliates

‍We do not “share” or “sell” your information as defined by California law.

Privacy Rights

‍California residents have the right to (1) request to know more about and access your personal information, (2) request deletion of your personal information, (3) request correction of inaccurate personal information, and (4) opt out of “sales” or “sharing” as described above.

‍To request access, correction, or deletion of your personal information, email us at dataprivacy@olo.com.

‍We may verify your request by asking you to provide information related to your recent interactions with us, such as the date you last received an email from us. We will not treat you differently for exercising your rights.

‍If you are submitting a rights request as an authorized agent, you are required to submit proof of your authorization to make the request, such as a valid power of attorney or proof that you have signed permission from the individual who is the subject of the request. Please do not provide any sensitive personal information in connection with this request, such as a driver's license or other government-issued ID. In some cases, we may be required to contact the individual who is the subject of the request to verify his or her own identity or confirm you have permission to submit this request. If you are an authorized agent seeking to make a request, please email dataprivacy@olo.com.

‍Data Retention

‍We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Notice.

‍Access and Correction Rights of Canadian Residents

We will take reasonable steps to ensure the personal information we hold is accurate, complete and up-to-date. Upon your written request, and subject to certain exceptions provided by law, we will inform you of the existence, use, and disclosure of your personal information and give you access to that information. We may charge a minimal fee for providing such access to you. If you believe that the personal information that we hold about you is not accurate or complete, you may write to Olo at dataprivacy@olo.com. If you are able to establish that the information is not accurate or complete, we will take reasonable steps to delete and/or correct the information so that it is accurate, complete, and up-to-date. In order to facilitate a request to correct or update information, we may ask you to provide additional information to confirm your identity. Any such information will only be used for the purpose of confirming your identity and will not be retained by Olo.

‍How to Contact Us

You can reach us by email at dataprivacy@olo.com or at the following mailing address:

Olo Inc.
99 Hudson Street, 10th Floor
New York, NY 10013 USA