Privacy Policy
This Privacy Policy describes how Oleah (“Oleah,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit oleah.app, sign up for our waitlist, or otherwise interact with our services (the “Services”). By using the Services you agree to the practices described below. If you do not agree, do not use the Services.
1. Information We Collect
1.1 Information you provide
- Email address. Collected when you join our waitlist.
- Optional segmentation answer. When you indicate how many products you use, we store this as a non-identifying segment label.
- Referral relationship.If you sign up via a referral link, we record the referrer's anonymous code.
1.2 Information collected automatically
When you visit oleah.app, our hosting provider (Vercel Inc.) and our database provider (Supabase Inc.) may automatically log:
- IP address
- Browser type and version
- Operating system
- Referring URL
- Pages viewed and timestamps
- Approximate geographic region (derived from IP)
1.3 Cookies
We use only essential cookies required to operate the Services. We do not use marketing or third-party advertising cookies on the waitlist site. The cookie policy may change when the mobile application launches; you will be notified.
2. How We Use Information
We use information to:
- Operate, maintain, and improve the Services
- Send the launch announcement and important transactional emails
- Apply your “first 1,000 signups” discount eligibility
- Detect and prevent abuse, fraud, and security incidents
- Comply with legal obligations
- Aggregate anonymous statistics about waitlist composition (no individual identifiers)
We will not send you marketing emails for unrelated products. We will not sell, rent, or trade your email or other personal information to third parties.
3. Legal Basis for Processing (EU/UK Users)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing personal data are:
- Consent — when you submit your email to the waitlist.
- Legitimate interests — operating the Services, preventing fraud, internal analytics.
- Legal obligation — complying with applicable law.
You may withdraw consent at any time by emailing privacy@oleah.app.
4. How We Share Information
We share information only with:
- Service providers acting on our behalf, including Vercel Inc. (hosting), Supabase Inc. (database), and email infrastructure providers such as Resend or Postmark. Each is bound by contract to protect your information and may not use it for their own purposes.
- Legal authorities when required by law, court order, or to protect our rights, property, or safety, or that of others.
- Successor entities in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case the successor will inherit our privacy obligations.
5. Data Retention
We retain your email and waitlist data until:
- You request deletion, or
- We close the waitlist program.
After either event, identifying data is deleted within thirty (30) days, except where we are required by law to retain it for longer.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your information
- Port your information to another service
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise any of these rights, email privacy@oleah.app from the email address you signed up with. We will respond within thirty (30) days.
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of personal information we have collected about them and to request deletion. We do not sell personal information.
7. Children's Privacy
The Services are not directed to children under sixteen (16). We do not knowingly collect personal information from anyone under sixteen. If you believe a child has provided us with personal information, please contact privacy@oleah.app and we will delete it.
8. International Data Transfers
Our service providers may store and process data in the United States and other countries. By using the Services you consent to such transfers. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
9. Security
We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version at oleah.app/privacy and update the “Last updated” date. Material changes will be communicated by email where reasonable.
11. Contact
For questions or to exercise your privacy rights:
Email: privacy@oleah.app
Address: [Company Address Placeholder]