Privacy Notice

Last Updated: September 4, 2026

Information for California Residents: Please see “Additional Information for Individuals Residing in California” for the Notice at Collection and other information specific to California residents.

Olo Inc. (“Olo,” “us” and “we”) provides, directly and through its affiliates, online, on-demand ordering, guest engagement and payment tools for the restaurant and hospitality industry and the Olo App. Olo operates www.olo.com and other corporate websites and digital channels that link to this Privacy Notice, including marketing content, resources, forms, event and webinar registrations, newsletters, blogs, demonstration requests, chatbot functionality and other features made available through those websites (collectively, the “Website”). This Privacy Notice (“Notice”) describes how Olo collects, uses and discloses personal information through the Website and through Olo-operated support sites, in-person and virtual events, webinars, meetings and support interactions that link to or reference this Notice (together with the Website, the “Services”). It also describes the rights and choices available to you and how to contact us about our privacy practices.

Most individuals covered by this Notice interact with Olo in a business or professional capacity, such as representatives of customers, prospective customers, partners or service providers. Consumers and members of the general public are also covered when they interact with the Services in a personal or household capacity. Using the Services does not create a customer, merchant, product or other commercial relationship with Olo. Separate privacy notices govern certain Olo products, services, channels, employment-related activities and other processing activities, as described below and at Privacy Notices.

• If you are a consumer who has an account with Olo, please see our Privacy Notice for Olo Account Holders.

• If you are a California resident applying for a job with Olo, please see our Applicant Privacy Notice.

• If you are subject to Olo’s Know Your Customer (“KYC”) process for Olo Pay or access or use certain payment facilitation services by engaging in in-store transactions at participating merchants, please see our Olo Pay Privacy Notice.

We recommend that you read this entire Notice so that you are informed of our privacy practices. You may use the section headings below to navigate to particular topics.

Personal Information We Collect

How We Use Personal Information

How We Disclose Personal Information

Tracking Technologies and Targeted Advertising

Your Choices

Additional Information for Individuals Residing in California

Additional Information for Individuals in Canada

Children’s Privacy

Other Sites and Services

Security

Changes to this Notice

Contact Us

Personal Information We Collect

We collect personal information directly from you, from third parties and automatically when you use the Services. We also draw inferences from the personal information we collect. Details about each source of personal information are below.

Personal Information You Provide to Us. We collect personal information that you provide to us. This personal information may include:

• Contact information, such as your name, email address, mailing address and phone number, and if applicable, your business name and job title.

• Form and request information, such as information you provide when requesting a demonstration, consultation, download or other materials, subscribing to content or participating in a promotion, survey or other activity through the Services.

• Communications, submissions and feedback, such as information, questions, comments, materials, suggestions, ideas or other content that you submit through the Services or otherwise exchange with us, including personal information contained in those communications or content.

• Event and interaction information, such as registration information, payment information, attendance records, emergency contact information, dietary preferences, accessibility requirements, survey responses, photographs, audio or video recordings, and transcripts of in-person events, webinars, virtual meetings or calls, support sessions and other interactions in which you participate or appear. We provide notice and obtain consent before recording where required by applicable law.

• Credentials, such as username and password used to access Olo-operated support sites or another restricted feature governed by this Notice.

• Chatbot data, such as the content of your conversations with our chatbot, including personal information you voluntarily provide during those interactions. The chatbot is not designed to receive confidential, sensitive, financial, health, government-identification or other information that you are not authorized to disclose. Please do not submit such information through the chatbot.

• Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.

• Other information that you may provide voluntarily.

Personal Information We Collect Automatically. We and third parties may automatically collect information about you, your device, and your interaction over time with our Services and any communications we send. Information collected automatically by cookies or similar tracking technologies (described below in “Tracking Technologies and Targeted Advertising”) may include:

• Device data, such as your computer or mobile device operating system and version; manufacturer and model; browser type; screen resolution; device type (e.g., phone, tablet); IP address; unique identifiers (including identifiers used for advertising purposes); language settings; mobile device carrier; radio/network information (e.g., WiFi, LTE, 3G); and general location information such as city, state or geographic area.

• Online activity data, such as pages or screens you viewed and how long you spent on them, the frequency of your visits, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, and whether you have opened our emails/texts or clicked links within them.

• Chatbot interaction data, such as the page URL where you initiated a chat session, UTM parameters, referring source, and cookies or identifiers associated with your browsing session.

Personal Information We Obtain from Third Parties. We may collect personal information about you from third parties, such as business partners, social media platforms, advertising providers and data suppliers. This personal information may include:

• Business and professional information, such as your name, job title, company affiliation, business email address and phone number, and information about your employer, such as company name, industry and company size, when associated with you or your interactions with the Services, including information obtained from CRM and lead-enrichment sources.

• Social media information, such as personal information that you share through interactions with our profiles, posts or other content on social media platforms or information collected by social media companies through social media widgets or tracking technologies.

• Device data, such as unique identifiers and IP address.

• Online activity data, such as browsing history and usage data.

Information We Derive. We may derive information or draw inferences about you based on the information we collect, including by combining information you provide through our chatbot with data from our CRM systems and third-party enrichment sources. For example, we may make inferences about your approximate location based on your IP address, or about your business needs based on the company profile and browsing behavior.

How We Use Personal Information

We use personal information for the following purposes:

Sales, lead and audience engagement. We use personal information for sales and lead management and audience engagement, including to:

• Identify potential customers, interested individuals and business opportunities.

• Maintain a database of prospective customers and their representatives.

• Engage with potential customers and other individuals who request information, content or communications from us and interact through the sales cycle.

• Conduct demos and pilots.

• Optimize our sales process and analyze sales performance.

• Enrich and score inbound leads using information collected through our chatbot combined with data from our CRM and third-party sources.

Contract preparation and relationship management. We use personal information for contract preparation and relationship management, including to:

• Prepare, negotiate and execute agreements with customers and service providers.

• Maintain relationships with our customers and service providers.

• Send contract-related notifications, including renewal reminders.

• Facilitate onboarding processes.

Provide, operate, maintain and secure the Services. We use personal information to provide, operate, maintain and secure the Services, including to:

• Operate the Services and maintain our business.

• Administer Website features and interactions, including registrations, requests and subscriptions.

• Communicate important service updates and security alerts.

• Provide support, respond to support requests and administer Olo-operated support sites and help centers.

• Personalize your experience with the Services.

• Respond to inquiries, support requests and feedback.

• Analyze how the Services are used.

• Improve the Services and develop new features or services, including by developing, training and deploying algorithms and artificial intelligence models. We do not use personal information collected through the Services to train general-purpose large language models.

Events and programs. We use personal information for events and programs, including to:

• Conduct, record and transcribe in-person events, webinars, virtual meetings, calls and support sessions.

• Process your registration for webinars and events and communicate with you about such events.

• Arrange travel and accommodations, including providing accessibility accommodations and appropriate meal options.

• Follow-up after events with relevant materials, recordings or feedback requests and invite you to future events.

Communications, submissions and feedback. We use personal information for communications and to process submissions and feedback, including to:

• Respond to your inquiries, submissions and feedback.

• Administer the applicable Service feature or activity.

• Send messages and updates about Olo and its products and services.

• Deliver newsletters, blogs and other content you request or subscribe to.

• Personalize communications based on your preferences and interactions with us.

• Operate and improve the Services and Olo’s products and services.

Marketing and advertising. We use personal information for marketing and advertising, including to:

• Send marketing communications, either directly or through a third party, in relation to new or existing Olo products, services or events (or those of our business partners) that may interest you.

• Create audiences for targeted advertising based on your interests and behaviors.

• Deliver advertisements, including on third-party sites.

• Measure the effectiveness of our marketing and advertising campaigns and communications.

Manage our business and internal operations. We use personal information to analyze the performance of the Services, develop analytics and reporting and conduct other internal operations related to the Services and our business.

Compliance and protection. We use personal information for compliance and protection, including to:

• Comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

• Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims).

• Audit our internal processes for compliance with legal and contractual requirements and internal policies.

• Enforce the applicable terms governing the Services, including the Website Terms of Use.

• Maintain the security of the Services and prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

How We Disclose Personal Information

We disclose personal information to provide the Services and for the other purposes described in this Notice. We disclose personal information to the following categories of recipients:

• Service providers, such as third-party entities and individuals that provide services on our behalf or help us operate our Services or our business (e.g., hosting services, information technology services, customer support, email delivery, identity verification/fraud prevention services, website analytics, chatbot and AI providers and video-conferencing and transcription providers). These companies may need information about you to perform their functions.

• Affiliates. We disclose personal information to Olo affiliates that help us operate, administer, secure, support or improve the Services or otherwise process personal information for the purposes described in this Notice.

• Professional advisors, such as lawyers, auditors, bankers and insurers, in the course of the professional services that they render to us.

• Business partners, such as business partners who offer a service jointly with us or receive contact and business information in connection with referrals or to market their products or services that may be of interest to you.

• Advertising providers, such as advertisers (e.g., advertising agencies and networks), marketing businesses, third-party data suppliers and other entities that help create, deliver and assess our advertising and marketing campaigns.

• Authorities and others, such as law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate, including, for example, to comply with applicable laws or governmental requests; enforce our terms of service; detect, prevent or investigate fraud; and protect against harm to the rights, property or safety of Olo or individuals.

• Business transferees, such as acquirers and other relevant participants in business transactions (or diligence or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Olo or our affiliates (including, in connection with a bankruptcy or similar proceedings).

• At your direction.

We may also disclose aggregated or deidentified information that cannot reasonably be used to identify you.

We do not disclose mobile numbers, text-messaging opt-in data or consent to third parties or affiliates for their own marketing or promotional purposes. We may disclose this information to service providers that help us deliver text messages.

Tracking Technologies and Targeted Advertising

We and our service providers and certain third parties use cookies, local storage, pixels, web beacons, embedded scripts and similar tracking technologies for the Services and related communications. These technologies may collect device data, online activity data and chatbot interaction data and may recognize or store information about your browser or device.

Tracking Technologies We Use

Cookies are small text files that are placed and stored on your browser when you visit a website or on your device when you visit an app. We use both session cookies (cookies that expire when you close your browser) and persistent cookies (cookies that expire after a set period) to provide the Services. The cookies may be set by Olo or by a third party.

Local storage refers to files that are created by websites or apps and stored on your device or browser. These files function similarly to cookies.

Pixels, web beacons, embedded scripts or page tags are similar tracking technologies that are often used in connection with cookies or other identifiers associated with your device. These technologies are small blocks of code or transparent image files placed on webpages, apps, emails or ads that allow us to identify users when providing the Services and track interactions with the Services and our communications to you.

Preference-management technologies store and communicate your choices about cookies and similar tracking technologies used through the Services.

Chatbot technologies. The chatbot available through our website, which is provided by a third-party service provider, may access cookies, URL parameters (such as UTM tags), referring page URLs, and other browsing data associated with your session to personalize your chatbot experience, provide contextually relevant responses and support our sales and lead management activities. The chatbot may also combine this information with data from our customer relationship management systems and third-party enrichment sources to better understand your needs and improve our interactions with you. For more information about the personal information collected through our chatbot, see “Personal Information We Collect” above.

How We Use Cookies and Similar Tracking Technologies

We use cookies and similar tracking technologies to provide the Services; identify you or your device; remember preferences and settings; enable functionality; understand user activity; analyze and monitor Service performance; personalize and operate our chatbot, including by providing contextually relevant responses based on browsing activity and session data; personalize content and support cross-context behavioral advertising; deliver and measure marketing and advertising campaigns; improve and develop new Services; and maintain security.

We disclose certain contact and business information, device data and online activity data to advertising providers, social networks and business partners to measure campaigns, attribute and facilitate referrals, enable business partners to market or sell their services to you, create or match advertising audiences and deliver targeted advertisements through the Services and on third-party platforms. These activities may constitute a sale, sharing for cross-context behavioral advertising or targeted advertising under applicable privacy laws. We do not disclose credentials, event accessibility information, dietary preferences or other sensitive personal information for these purposes.

Please see “Your Choices” below for information about how to control the use of cookies and similar tracking technologies.

Your Choices

You have certain choices related to marketing communications and cookies and tracking technologies.

Opt-out of Marketing Communications. We may send you marketing or promotional communications, including emails or text messages. We send marketing text messages only after you separately opt in. Consent to receive marketing text messages is not a condition of purchasing goods or services or using the Services. You can opt out of marketing text messages at any time by replying “STOP” or using another reasonable method of revocation. You can unsubscribe or opt out of other marketing communications by following the instructions contained in the communications we send you. Even if you opt out of marketing communications, you may continue to receive non-marketing communications, such as confirmations, service updates and responses to your requests.

Tracking Technologies. You can manage certain cookies and similar tracking technologies through the “Do Not Sell or Share My Personal Information” link or the cookie preference tool available through the Services. Your browser may also allow you to decline cookies. If you decline certain cookies, it may impact the functionality of the Services, and the Services may not work properly. Since each browser is different, please consult the “Help” or “Preferences” menu of your browser for information about how to control cookies.

Do Not Track and Global Privacy Control. Your browser or device may allow you to control certain tracking technologies. You may opt out of technologies used for sale, sharing or targeted advertising through Do Not Sell or Share My Personal Information. Where required by applicable law, we recognize supported universal opt-out preference signals, such as Global Privacy Control. Your opt-out applies to the browser or device from which you submit it. We do not currently respond to Do Not Track signals. Opting out does not prevent contextual advertising or advertising based on information that is not personal information.

Your Privacy Rights

Depending on where you reside and subject to applicable conditions and exceptions, you may have rights to (i) confirm whether we process personal information about you; (ii) request access to, correction or deletion of personal information; (iii) receive personal information in a portable and machine-readable format; (iv) request a list of specific third parties that receive your personal information; (v) opt out of the sale or sharing of personal information, targeted advertising or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects; (vi) appeal certain decisions concerning your request; and (vii) receive equal service and pricing without discrimination for exercising an applicable privacy right.

These rights apply only to the extent that applicable law grants the relevant right to you and covers the personal information at issue. Except in California or where applicable law provides otherwise, these rights generally do not apply to personal information we process about individuals acting in a business or employment context.

Exercising Your Privacy Rights

To exercise a privacy right available to you under applicable law, you may submit this form. This form is only for requests related to the Services. If you are an Olo account holder, use the Olo App or use another Olo product or service governed by a separate privacy notice, please follow the request instructions in that notice. You may also use Do Not Sell or Share Your Personal Information to opt out of sale, sharing and targeted advertising.

You can also exercise your privacy rights by emailing us at dataprivacy@olo.com.  

Where required by applicable law, we will not discriminate against you for exercising an applicable privacy right.

When we receive your privacy rights request, we may ask for additional information to verify your identity. Any such information requested will only be used for the purpose of confirming your identity.

If an authorized agent is submitting a privacy rights request on your behalf, they must submit proof of your authorization to make the request, such as a valid power of attorney or proof of signed permission from you or such other method as permitted by applicable law. We may deny a request from an authorized agent if they do not provide proof that they are authorized to make the request on your behalf. The authorized agent should also provide us with the name and email of the individual exercising their privacy rights as well as the name and email of the authorized agent.

If we deny your privacy request or are unable to completely fulfill your privacy request, we will explain the decision as permitted by applicable law. Where applicable, you may appeal by emailing dataprivacy@olo.com with “Privacy Appeal” in the subject line. We will respond within the period required by applicable law and explain any further complaint rights available to you.

Additional Information for Individuals Residing in California

This section applies only to California residents and supplements the information provided in the other sections of this Notice that pertains to all individuals, whether they interact with Olo in a business or personal capacity. When we use the term “personal information” in this section, we mean information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Notice at Collection

We collect the following categories of personal information: identifiers; personal information described in California Civil Code section 1798.80(e); characteristics of protected classifications under California or federal law; commercial information; internet or other electronic network activity information; geolocation data; audio, electronic, visual or similar information; professional or employment-related information; and inferences. We also collect sensitive personal information, including credentials used to access restricted features and event information that you voluntarily provide that may reveal health information or religious beliefs.

For more information about the personal information we collect and the sources from which we collect it, see “Personal Information We Collect” above.

For information about the purposes for which we collect and use each category of personal information, see “How We Use Personal Information” above and the table below.

We may sell or share identifiers, commercial information, internet or other electronic network activity information, geolocation data and professional or employment-related information with advertising providers, social networks and business partners for campaign measurement, referral attribution, facilitating referrals, business-partner marketing and sales, advertising audience matching and targeted advertising. We do not sell or share other categories of personal information, including sensitive personal information. To opt out, use Do Not Sell or Share My Personal Information.

We retain personal information for as long as necessary to carry out the purposes for which we collected it or as required by applicable law. For the criteria we use to determine retention periods, see “Data Retention” below.

Supplemental Information

The CCPA requires that we provide certain additional information to California residents. The information below identifies the categories and examples of personal information we collected during the preceding 12 months, the categories of sources, the applicable business or commercial purposes and the categories of recipients to which we disclosed the information. Please refer to the other sections of this Notice for additional information about these practices.

A single data element may fall within more than one category of personal data under applicable law.

We collect credentials, which are considered sensitive personal information. We use this information only as permitted by CCPA and do not use it to infer characteristics about individuals. Event information you choose to provide, such as accessibility requirements or dietary preferences, may reveal health information or religious beliefs and may be considered sensitive personal information. We use this information only as permitted by the CCPA to administer the event and provide requested accommodations and do not use it to infer characteristics about individuals.

We do not offer financial incentives for the collection or sale of personal information.

We do not have actual knowledge that we sell or share the personal information of minors under the age of 16.

If we process deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information unless permitted by applicable law.

Privacy Rights

As a resident of California, you have the following privacy rights in relation to your personal information, subject to certain conditions and exceptions:

Access/Portability. You have the right to confirm whether we process any personal information about you. You have the right to request access to your personal information and receive it in a portable and machine-readable format.

Deletion. You have the right to request us to delete your personal information. 

Correction. You have the right to request that we correct or update inaccurate personal information that we hold about you.

Opt-Out. You have the right to opt out of the sale or sharing of your personal information. You may exercise this right through “Do Not Sell or Share My Personal Information” or a supported universal opt-out preference signal.

Right to Withdraw Consent. If you provide us with consent, you have the right to withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice.

Data Retention

We retain personal information for as long as necessary to carry out the purposes for which we originally collected it or for the period that is required under applicable law. In determining the length of retention, we consider the amount, nature and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of personal information; the purposes for which we collected personal information and whether we can achieve the purposes through other means; and applicable legal requirements.

Additional Information for Individuals in Canada

This section applies only to individuals in Canada and supplements the information provided in the other sections of this Notice that pertains to all individuals.

Consent

We collect, use and disclose your personal information with your express or implied consent or as otherwise permitted or required by Canadian law. The form of consent depends on the sensitivity of the information, your reasonable expectations and the consequences of the processing. We obtain express consent when required for sensitive information, unexpected uses or disclosures and activities that create a meaningful risk of harm. Optional marketing, personalization and advertising choices are separate from processing needed to provide the Services you request. We may provide additional information and request consent when you use a particular Service or Website feature, including automated tools such as our website chatbot, cookies and similar tracking technologies that may combine information you provide with data from our CRM systems, third-party enrichment sources and your browsing activity. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. We will explain the consequences of withdrawal, which may include limiting an optional feature.

Cookies and similar tracking technologies used through the Services may include functions that identify, locate or profile visitors based on their interactions, interests or behavior for the purposes described in this Notice. You can manage your cookie preferences through the cookie preferences tool available through the Services.

Privacy Rights

You have the right to request access to, and correction of, personal information that we hold about you, subject to conditions and exceptions under applicable law. Depending on where you reside, and subject to conditions and exceptions under applicable law, you may also have the right to delete your personal information, restrict processing of your personal information, obtain computerized personal information in a structured and commonly used technological format and access information about how your personal information is used and disclosed. If you reside in Quebec, you may also have the right to receive computerized personal information collected from you in a structured, commonly used technological format and to request that we cease disseminating or de-index certain personal information, subject to applicable law.

You can exercise any of your privacy rights by emailing us at dataprivacy@olo.com.  

When we receive your privacy request, we may ask for additional information to verify your identity. Any such information requested will only be used for the purpose of confirming your identity.

If we deny your privacy request or are unable to completely fulfill your privacy request, we will provide the reasons to you as permitted by applicable law. If we deny your request, we will notify you within the applicable statutory period.

Transfers of Data

We and our service providers process and store personal information collected in connection with the Services in the United States. Privacy laws in the United States may differ from Canadian law. Courts, law enforcement and regulatory authorities in the United States may access personal information as permitted by applicable law. We use contractual and other safeguards designed to protect personal information as described in this Notice.

Data Retention

We retain personal information for as long as necessary to carry out the purposes for which we originally collected it or for the period that is required under applicable law. In determining the length of the retention period, we will consider the amount, nature and sensitivity of the personal information; the potential risk of harm for unauthorized use or disclosure of personal information; the purposes for which we collected personal information and whether we can achieve the purposes through other means; and applicable legal requirements.

Right to Challenge

You may file a complaint by contacting us as described below if you believe we have not complied with any privacy laws relating to the protection of your personal information or the practices described in this Notice.

Email: dataprivacy@olo.com

Physical mail: Olo Inc., Attention: Chief Legal Officer, Two Manhattan West, 375 Ninth Avenue, Suite 1210, New York, New York 10001.

We investigate complaints and may request additional information to help us respond to your concerns. If our investigation determines your complaint is valid, we will take appropriate action to address the issue, which may include updating our policies or procedures. If you are dissatisfied with the result, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in the province where you reside. We will retain personal information related to our decision for at least one year after we make the decision.

Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Services. If we learn that we collected personal information from a child under 13, we will take appropriate steps to delete it.

Other Sites and Services

The Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We encourage you to read the privacy notices provided by third parties on these other websites and online services.

Security

We implement and maintain reasonable security procedures and practices designed to safeguard personal information we collect against theft, loss and unauthorized access, use, modification, and disclosure. Even though we take such measures to protect your personal information, we cannot guarantee that your personal information will be completely secure.

Changes to this Notice

We may update this Notice from time to time. If we make material changes, we will provide notice by email, through the Services or by other means required by applicable law. We will also post the updated Notice and revise the “Last Updated” date at the top. Changes will apply prospectively from the stated effective date. Where required, we will obtain consent before applying a change to previously collected personal information.

Contact Us

For any privacy questions, please email us at dataprivacy@olo.com or by postal mail: Olo Inc., Attention: Chief Legal Officer, Two Manhattan West, 375 Ninth Avenue, Suite 1210, New York, New York 10001.