Last Updated: August 2, 2024
California Residents : See here for information specific to California residents .
This Privacy Notice (“Notice”) provides information on how Olo Inc. (“Olo,” “us” and “we”) collects, uses and discloses personal data of (i) individuals subject to our Know Your Customer (“KYC”) process for Olo Pay and (ii) individuals who access or use certain Olo payment facilitation services by engaging in in-store transactions at participating merchants (“buyers”). This Notice also explains the rights and choices individuals have related to their personal data and how to contact us regarding our privacy practices.
We treat all personal data processed as part of our KYC process as pertaining to individuals acting in their business capacity, and not in their individual or household capacity.
We recommend that you read this entire Notice so that you are informed about our privacy practices.
For residents of Illinois, Washington and Texas, as part of our KYC process for Olo Pay, we may require that you verify your identity by providing cert ain identification documents that contain your photograph and a photograph and/or video of yourself. The data derived from your face from these photog raphs and/or videos may be considered biometric data. We will us e your biometric data for the purpose of verifying your identity and preventing fraud as described below under “ How Do We Use Your Personal Data? ” . We only share your biometric data with our service provider IDVerse (which is the trading name of OCR Labs) and as required by law. Please see IDVerse’s privacy policy for more information: https://idverse.com/privacy-policy/ . We will store y our biometric data as long as required for these purposes, but not longer than three years.
We collect the categories and types of personal data described below if you are subject to our KYC process for Olo Pay. We collect this information from you and third-party sources (e.g., LexisNexis and other public sources) as well as automatically when you use our websites and services. We may also derive information or inferences about you from the personal data we collect.
Personal data we collect includes:
We and our service providers also automatically collect personal data about you, your computer or mobile device and your interaction over time with our websites and services, including:
The tools we may use for automatic data collection include:
We collect the categories and types of personal data described below if you are a buyer. We collect this information from you and third-party sources (e.g., merchants you do business with and fraud monitoring service providers) as well as automatically when you engage in an in-store transaction. We may also derive information or inferences about you from the personal data we collect.
We use your personal data for the following purposes , to the extent permitted by law :
Categories of Personal Data
Purpose for Processing
Identifiers, records information, protected classifications information, biometric information, internet and other electronic network activity information, inferences
Verify your identity, conduct assessments and comply with our legal obligations in relation to the KYC process
Identifiers, records information, protected classifications information, internet and other electronic network activity information, inferences, commercial information
Provide, manage , operate and improve our services
I nferences , commercial information
Monitor and investigate transactions to identify fraud and criminal activity
Identifiers, records information, protected classifications information, inferences, commercial information
Comply with our legal and contractual obligations, including card scheme rules
Identifiers, internet and other electronic network activity information
Communicate with you about the services, including sending security alerts and support and administrative messages
Provide support for our services and respond to your requests, questions and feedback.
Audit our internal processes
Commercial information and inferences
Perform data analytics and benchmarking
Respond to legal and regulatory requests, including subpoenas and requests from governmental authorities
Identifiers, records information, protected classifications information, biometric information, internet and other electronic network activity information, inferences, commercial information
Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity
Protect our, your or other’s rights, privacy, safety or property, including by making and defending legal claims and handling disputes
Enforce the terms and conditions that govern our websites and services
Engage in business transactions, such as corporate divestitures, merger, consolidation, acquisition, reorganization, sale or other disposition
We may disclose your personal data to:
This Notice only addresses our use and sharing of your personal data. Our services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy notices provided by third parties.
We employ technical, organizational and physical safeguards designed to protect the personal data we collect. However, no security measures are failsafe, and we cannot guarantee the security of your personal data.
This s ection applies (as described below) to residents of California, Colorado, Connecticut, Oregon, Texas, Virginia and Utah.
If you reside in California, this section applies to you. California law requires us to provide you with the following information about our collection, use and disclosure of personal data:
If you are a California resident, subject to certain conditions, you have the rights listed below with respect to your personal data that we process:
If you are a California resident, the Shine the Light law permits you to request and obtain from us once per calendar year information about any of your personal data shared with third parties for their own direct marketing purposes, including the categories of personal data and the names and addresses of those businesses with which we have shared such information. To request this information, please contact us as described below under “ How to Contact Us? ”
If you are a buyer and a resident of Colorado, Connecticut, Oregon, Texas, Utah or Virginia, this section applies to you. Subject to certain conditions, you have the rights listed below with respect to your personal data that we process:
If you are a resident of California, Colorado, Connecticut, Oregon, Texas, Virginia or Utah , y ou can exercise your privacy rights by emailing us at [email protected] .
When you exercise your rights and submit a request to us, we will verify your identity by asking you to confirm certain information. We may also use a third-party verification provider to verify your identity.
Applicable data protection law may allow you to designate an authorized agent to make a request on your behalf. As permitted by applicable law, when we verify your agent’s request, we may verify both your and your agent’s identities and request that you directly confirm with us that you provided the authorized agent permission to make the request on your behalf. To protect your personal data, we reserve the right to deny a request from an agent that does not submit proof (which must meet the requirements of applicable data protection law) that they have been authorized by you to act on your behalf.
Applicable data protection law may require or permit us to decline your privacy request. If we decline your request, we will tell you the reason why, unless we are not permitted by law to share the reason. Certain data protection laws may allow you to appeal a decision we have made regarding your request. To appeal a decision, you may email us at [email protected] .
The fact that you have exercised your privacy rights will not have an adverse effect on the price or quality of our products and services.
We reserve the right to modify this Notice at any time. If we make material changes to this Notice, we will post the updated notice on this webpage and update the effective date of the Notice.
You can reach us by email at [email protected] or at the following mailing address:
Olo Inc. One World Trade Center 285 Fulton Street, 82nd Floor New York, NY 10007 USA