Privacy Policy

Last updated: October 5, 2026

1. Who we are

Olive Technologies Inc. and its affiliates, including Olive Technologies US, Inc. ("Olive", "we", "us", "our"), provide the Olive platform, the olive.app website and related services (together, the "Services"). This Privacy Policy explains how we collect, use and share personal information in connection with the Services.

2. Scope

This policy applies to personal information we collect through the Services and through our marketing and sales activities. It does not apply to Customer Content we process on behalf of our customers (see section 6), which is governed by our agreement with the relevant customer. It also does not apply to third-party websites or services linked from the Services.

By using the Services, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.

3. Information we collect

Information you give us. This includes your name, email address, phone number, job title, employer, account credentials, billing contact and invoicing details, and anything you submit through forms, support requests, surveys or other communications with us. Card payments are handled by our payment processor [Stripe]; we do not store card numbers.

Information collected when you use the Services. This includes usage data such as IP address, browser and device information, device identifiers, pages and features used, dates and times of use, and diagnostic and log data. It also includes content you create or upload.

Information from other sources. We may receive business contact and company information from data providers, public sources, partners, event organizers, and our customers. For example, a customer may invite you to a project, survey or request for proposal.

Calls and meetings. With notice, we may record and transcribe calls and meetings with you to support sales, onboarding and service quality.

4. How we use information

We use personal information to:

  • provide, operate, maintain and secure the Services;
  • create and manage accounts, process payments, and send service and administrative messages;
  • provide support and respond to your requests;
  • develop, test and improve the Services, including new features and AI functionality, using usage data, feedback, and Customer Content in aggregated or de-identified form (see section 7);
  • understand how the Services are used and measure their performance;
  • market and sell our products and services, including by email, at events and through targeted outreach;
  • prevent fraud and misuse, enforce our terms, and protect our rights and the rights of others;
  • comply with legal obligations; and
  • for any other purpose we describe when we collect the information, or with your consent.

5. AI features

The Services include features powered by artificial intelligence, some of which use third-party AI model providers such as [OpenAI and Anthropic]. When you use these features, the content you submit and related information may be sent to those providers to generate a response. We use these providers under terms that do not permit them to use that content to train their general models.

Our team may review prompts, inputs and AI outputs to troubleshoot issues, check quality and improve the Services. We do not use identifiable Customer Content to train or fine-tune AI models.

AI-generated output may be inaccurate, incomplete or unsuitable for your purpose. You are responsible for reviewing it before relying on it.

6. Customer Content

Our customers use the Services to manage requirements, evaluations, surveys, vendor responses, documents and related information ("Customer Content"). Customer Content may include personal information about a customer's employees, stakeholders, clients and vendors.

We process Customer Content on behalf of the customer, under our agreement with them. The customer decides what Customer Content to submit and is responsible for providing any notices and obtaining any consents and rights needed to do so.

If your information is part of a customer's Customer Content and you have a question or request, please contact that customer. We will assist them as required by our agreement and applicable law.

7. Aggregated and de-identified data

We may create aggregated, de-identified or anonymized information from personal information and Customer Content. This may include information about technology categories, vendors, requirements, evaluations and pricing. This information does not identify you or our customers.

We may use and share it for any lawful purpose, including to improve the Services, develop benchmarks, produce research and reports, and publish insights.

8. How we share information

We may share personal information with:

  • Service providers that help us run the Services and our business, such as hosting, data storage, email delivery, analytics, payments, customer relationship management, customer support and AI providers. They may use it only to provide services to us.
  • Our affiliates, for the purposes described in this policy.
  • Other users in your workspace. Some of the content you submit in a shared account, project, survey or request for proposal may be visible to the customer, its other users and the people it invites, including vendors.
  • Parties to a business transaction, such as a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, including during negotiations.
  • Authorities and others, where we believe it is necessary to comply with law, respond to legal process, protect our rights or property, or protect the safety of any person.
  • Anyone else with your consent or at your direction.

We do not sell personal information for money.

9. Marketing communications

We may send you emails about our products, services, events and research, in line with applicable law, including Canada's anti-spam legislation. You can unsubscribe at any time using the link in our emails or by contacting us. We may still send you service and account messages.

10. Cookies and analytics

We use cookies and similar technologies to operate the Services, remember your preferences, keep the Services secure and understand how they are used. These include session, preference, security and analytics cookies, and third-party analytics services such as [Google Analytics and Mixpanel].

You can set your browser to refuse cookies or to alert you when they are sent. Some parts of the Services may not work properly if you do.

11. Where information is stored

Olive is based in Canada. We store and process information primarily in the United States using Amazon Web Services, and may also process it in Canada. These countries may have data protection laws that differ from those where you live, and information stored there may be accessible to authorities under local law. By using the Services, you acknowledge these transfers.

12. How long we keep information

We keep personal information for as long as your account is active, and afterwards for as long as reasonably necessary for the purposes in this policy. These include complying with legal obligations, resolving disputes, enforcing our agreements and keeping business records. Customer Content is retained as set out in our agreement with the customer. When we no longer need personal information, we delete or de-identify it.

13. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and for using available security features, such as multi-factor authentication.

14. Your choices and rights

  • Account information. You can update most account information in your settings or by contacting us.
  • Access and correction. Subject to applicable law, you may ask for access to, or correction of, the personal information we hold about you.
  • Deletion. You may ask us to delete your personal information. We may keep some information where we are permitted or required to by law, or for legitimate business purposes such as security and record-keeping.
  • Withdrawing consent. Where we rely on your consent, you may withdraw it, subject to legal and contractual restrictions. This may affect our ability to provide the Services to you.
  • Additional rights. Depending on where you live, you may have other rights under local law. Contact us to make a request.

We may need to verify your identity before acting on a request, and we may decline requests where the law allows.

15. Children

The Services are not directed to anyone under 18, and we do not knowingly collect their personal information. If we learn that we have, we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date, and changes take effect when posted. Where the law requires, we will give additional notice of material changes. If you continue to use the Services after changes take effect, you accept the updated policy.

17. Contact us

Questions or requests about this policy or your personal information can be sent to our Privacy Officer:

Dan Harrison, Privacy Officer, Olive Technologies Inc.

support@olive.app