Privacy Policy

Olivo believes privacy is a fundamental right. This Privacy Policy explains how OlivoTek ApS (“Olivo”, “we”, “us”, “our”) collects, uses, stores and protects your personal data when you create an Olivo Account (the “Account”) and use our services: Olivo Mail, Olivo Calendar, and Olivo Drive (the “Services”).

This Privacy Policy is to be read together with our Terms and Conditions.

1. Data controller

The data controller responsible for the processing of your personal data is:

OlivoTek ApS
Ingrid Marievej 51, 1. tv.
2500 Copenhagen
Denmark
CVR: 46597451

Contact for privacy-related inquiries: privacy@olivotek.com
Contact for general information and support: support@olivotek.com

2. Legal framework

OlivoTek ApS is established in Denmark and is therefore governed by:

• The General Data Protection Regulation (EU) 2016/679
• The Danish Data Protection Act (Databeskyttelsesloven)

The lead supervisory authority for Olivo is the Danish Data Protection Agency (Datatilsynet).

3. Data Olivo collects

Olivo has made protecting privacy one of its main commitments. However, to ensure a smooth user experience when using the Services, Olivo does collect certain data:

3.1 Visiting the olivotek.com website

Olivo uses a local installation of an open-source analytics tool. Analytics are anonymized whenever possible and stored locally. Third-party services may process your data to deliver images displayed on our website.

3.2 Account creation

Creating an Olivo Account provides access to our Services. When you register, we may ask you to provide information such as your first and last name, email address, date of birth, and country of residence. We collect this information to comply with applicable legal requirements, administer your account, and send you important service-related communications.

Where the processing is based on your consent, you may update or withdraw the relevant information or preferences through your account settings at any time.

Olivo also has a legitimate interest in preventing automated registrations, spam, fraud, and brute-force attacks. For this purpose, we may use verification measures such as captcha, email verification, or SMS verification.

Information provided or generated during the verification process, including IP addresses, email addresses, and telephone numbers, may be retained temporarily to deliver verification codes and prevent spam, fraud, and misuse.

The applicable retention period is determined by the time reasonably necessary to protect the Services and by any retention requirements imposed under European Union or Danish law.

3.3 Account activity

Olivo processes certain account and activity data as necessary to operate and provide the Services, as further described in Section 4. We may also use the information described in this Privacy Policy to identify, prevent, and respond to abusive, unauthorised, or fraudulent use of the Services.

The legal basis for this processing is Olivo’s legitimate interest in protecting the security and integrity of the Services and preventing conduct that breaches our terms or involves fraud or misuse.

3.4 IP logging

Olivo does by default not keep permanent IP logs in relation to your Account. However, IP logs may be kept temporarily to combat abuse and fraud, and your IP address may be retained permanently if you are engaged in activities that breach our Terms and Conditions (e.g. spamming, DDoS or brute-force attacks).

The legal basis for this processing is Olivo’s legitimate interest in protecting the security and integrity of the Services and preventing fraudulent or prohibited activity.

3.5 Communicating with Olivo

Olivo may retain communications you send to us, including support enquiries, bug reports, and feature requests. We process this information on the basis of our legitimate interest in resolving issues efficiently and improving the quality and functionality of our Services.

3.6 Communications from Olivo

Olivo uses your email address for account-related questions, communication, and recovery. By signing up to our Services, you agree to receive communications from us, and may consent to promotional emails. You can stop receiving emails from us by following the unsubscribe instructions in the emails we send.

3.7 Payment information

Olivo uses Mollie as its payment service provider. To complete a payment and link it to your account, we share only the information that is strictly necessary for processing the transaction. Mollie does not have access to the information contained in your Olivo account. Olivo does not store your complete payment card details. We may retain limited information, such as your name and the final four digits of your card number.

Olivo may also process your account information for payment-related purposes, including sending payment confirmations, invoices, receipts, overdue payment notices, and requests to update your payment details. The legal basis for this processing is that it is necessary for entering into or performing our contract with you for the provision of the Services.

3.8 Native applications

When you use an Olivo native application, we process technical and diagnostic information to monitor performance, maintain reliability, and investigate errors. This may include device model, operating-system version, app version, performance and navigation timings, a random installation-scoped identifier, and where an error is recorded, error messages and technical stack-trace information.

We use self-hosted OpenTelemetry for server-side operational logs, metrics, and traces. We also use Expo EAS Observe for mobile-app performance monitoring and JavaScript error reporting. We use this information to identify technical problems, improve app performance, and prevent abuse.

Apple and Google may separately process information when providing their operating-system, app-store, and push-notification services, in accordance with their own privacy policies.

3.9 Social media

Olivo maintains a presence on Instagram and LinkedIn. Any information, messages, or other content you share with us through these social media platforms is submitted at your own risk, and we cannot guarantee its confidentiality or privacy. Olivo does not control how the platforms themselves or other users process, use, or share your information. Your use of and interactions with these platforms and their features are governed by the applicable provider’s own terms and privacy policy.

3.10 Links to other websites and embedded content

Olivo’s websites may include links to third-party websites that may be relevant or useful to you. Olivo is not responsible for the content, practices, or availability of these external websites, which are subject to their own terms of service and privacy policies.

We may also use third-party providers to display embedded content, such as images, on our websites. These providers may collect information about you when the content is loaded. We process this information on the basis of our legitimate interest in operating our websites in a cost-effective manner.

4. Service-specific data processing

4.1 Olivo Mail

Olivo Mail processes email accounts that you configure using IMAP and SMTP. This includes the email address, encrypted account credentials, mailbox and folder data, message headers, senders, recipients, subjects, message content, attachments, drafts, labels, signatures, preferences, and sync/activity records.

We use this data to provide mail access, search, synchronisation, organisation, and sending functionality. When you delete your Olivo Account, we delete Mail data held by Olivo. This does not delete messages held by your external email provider.

4.2 Olivo Calendar

Olivo Calendar processes calendar names and settings; events, including titles, descriptions, locations, times, recurrence rules, attendees and RSVP information; calendar-sharing permissions; reminders and in-app notifications; and, where mobile push is enabled, device push tokens and notification-delivery records.

If you add an ICS subscription or connect a CalDAV service, we process the URL, account details or credentials you provide, and the calendar data obtained from that service. We use this data to create, display, share, import, synchronise, and remind you about calendar events.

4.3 Olivo Drive

Olivo Drive processes files and their contents; file names, types, sizes, checksums, thumbnails and timestamps; folder structure; upload/download activity; sharing permissions; share-link settings and tokens; invite recipient email addresses where sharing is used; and audit/security records related to access and sharing.

We use this data to store, organise, preview, synchronise, share, protect, and recover files, and to prevent unauthorised access or misuse.

5. Data security and hosting

Hosting: Olivo-operated application infrastructure and primary storage are hosted on Scaleway infrastructure, located exclusively in the EU. Access to production infrastructure is tightly controlled and limited to authorised Olivo personnel.

Backups: Olivo may maintain backups for operational and disaster-recovery purposes. In those cases, the backup retention period will be no longer than 45 days.

Transfers outside the EU/EEA: Olivo’s own application infrastructure and primary storage are located in the EU. However, if you choose an IMAP/SMTP email provider located outside the EU/EEA, email data may be exchanged with that provider in order to provide the Mail service.

6. Service providers and other recipients

Olivo uses selected third-party service providers to operate and provide the Services. Depending on the Services you use, your personal data may be processed by the following providers:

Scaleway SAS: Provides our hosting infrastructure, databases, Redis, object storage, transactional email infrastructure, and telemetry services. Data processed may include account information, calendar data, stored files, email content, encrypted credentials, and technical or operational logs.

Private Captcha: Provides anti-bot and CAPTCHA functionality when registering or using our authentication services. This may involve connection, device, and technical information. We use its EU-isolated infrastructure.

Expo EAS, Apple Push Notification Service, and Google Firebase Cloud Messaging: We use these services to monitor mobile-app performance and deliver push notifications. Depending on the service, this may involve device and app-version information, a random installation-scoped identifier, performance or error data, push tokens, notification content, and related identifiers. These providers may process data outside the EU/EEA, including in the United States.

Mollie B.V.: Provides payment and subscription processing. This may involve your name, email address, payment and subscription identifiers, and transaction status. Payment details are entered directly through Mollie. For payment processing activities, Mollie generally acts as an independent data controller rather than as a processor acting solely on our behalf.

External providers: If you connect an external account using technologies such as IMAP, SMTP, CalDAV, or an ICS subscription, information is exchanged with the provider you select. This may include account credentials, mailbox data, messages, and attachments.

7. Data retention and account deletion

Olivo retains your personal data for as long as your account is active and for as long as necessary to provide the Services. Olivo may retain certain data for longer where required by law.

If you delete your Account, it enters a 45-day grace period, in which you may reactivate it and recover your data. After 45 days, your Account and all associated data are permanently deleted from our production systems. Backups created before Account deletion may continue to exist for the remainder of the backup retention period, described in Section 5, after which they are also overwritten.

8. Minimum age

The Services that Olivo provides are not intended for children under the age of 13. By creating an Account, you confirm that you are at least 13 years old. If we become aware that we have collected personal data from a child under 13 without proper authorisation, we will delete that data without unreasonable delay.

9. Your rights

You’re in control of your personal data. You can ask to see the information Olivo have about you, correct anything that’s wrong, or request that your data is deleted where possible. You can also ask us to limit how we use your data, receive a copy of certain data in a portable format, or object to certain types of processing. If you’ve given us consent to use your data, you can withdraw it at any time.

To exercise any of these rights, contact us at privacy@olivotek.com.

If you believe we have not handled your personal data in accordance with applicable law, you are able to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

10. Modifications to Privacy Policy

Within the limits of applicable law, Olivo reserves the right to review and change this Privacy Policy at any time. We will notify you of any material changes through the Services or by email. Continued use of the Services after such changes shall constitute your consent of the updated Privacy Policy.