Privacy Notice

This privacy notice sets out how Olive Consulting L.L.C-FZ (“we”, “our” or “us”) process personal data in connection with our AI-powered sales-intelligence and copy-generation platform (“Olive” or “our platform”) and related services.

Your “personal data” means any information that can identify you. When we say “processing” we mean any use of Personal Data, including (but not limited to) collection, recording, organisation, modification, transfer, and deletion.

We primarily process your personal data on behalf of and in accordance with the instructions of the customer that is using our platform, as a processor and as necessary to make our platform and its various functionalities available to users of the customer in accordance with our Terms of Service.

This Notice does not cover such processing. This Notice covers the more limited scenarios where we are processing your personal data for our own business purposes, as a controller, and the rights that you have in respect of such processing, in each case as further described in this Notice.

This notice is relevant to users of our platform (i.e., individuals who access and use our platform on behalf of a business customer) and, in connection with limited pre-sale activities described below, senior business professionals whose publicly available professional information we may process ("you", "your").

The entity acting as controller of your personal data for the processing activities set out in this Notice is Olive Consulting L.L.C-FZ

If you have a question related to anything set out in this Privacy Notice, please contact us by emailing us at privacy@runolive.ai (see the 'How to contact us' section below for further details).

1. Personal data we collect about you

We collect certain personal data about you when you use our platform which we subsequently process in our role as controller which includes: contact details including name and email address, and usage information including error reports, activity data, type of browser and operating system used, device information such as, access times, pages viewed, and IP address.

We may also collect billing and transaction information (such as billing name, business details and transaction records) in connection with your use of our platform. Payment card data is processed by our third-party payment provider and is not held by us. If you contact us via our website, email or social media, we will collect the contact information you provide (such as your name, email address and the content of your communication).

In connection with limited pre-sale activities meant to demonstrate how our platform functions, we also collect publicly available professional information about senior business decision-makers (such as name, role, organisation and professional background) from public sources.

2. Lawful basis and purpose for processing your personal data

We use the personal data that we collect for the reasons set out below.

We will only use your personal data if we have a lawful basis, for example where the processing is necessary: to comply with our legal and regulatory obligations; or for our legitimate interests or those of a third party. A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests (e.g., to review and respond to any correspondence or queries you send, to ensure security, to maintain our website, and to protect and grow our business).

We may use your personal data for the following reasons:

Manage our relationships with our business customers : We may use some of your personal data (primarily contact information) as part of maintaining our on-going business relationship with our business customers and to explore further ways in which we can assist our business customers , including to provide information about events and other networking opportunities. This is necessary for our legitimate interest to maintain a business relationship with customers.
Comply with quality control, risk management and security procedures: We may process your personal data as part of ensuring the safe, secure and good functioning of our platform, including for business continuity planning, ensuring compliance with our Terms of Service and to protect the security of our systems. This is necessary for our legitimate interest of ensuring the security of our platform, and running and managing our business.
Comply with other relevant legal or regulatory obligations: We use your personal data to prevent, investigate, or provide notice of fraud, unlawful or criminal activity, perform due diligence, or unauthorized access to or use of your personal data, our networks, systems or applications. We may also use your data, such as contact information to enforce our Terms of Service. This is necessary for our legitimate interests (for running and managing our business or detecting fraud) and to comply with our legal obligations.
Establish, exercise and defend legal claims: We may use your personal data if required for us to establish, exercise or defend a legal claim. We do so to comply with our legal obligations or, where no legal obligation applies, pursuant to our legitimate interest in establishing, exercising and/or defending legal claims.
Pre-sale demonstration activities: We may process limited publicly available professional information about senior business decision-makers to prepare opportunity-specific demonstration materials for prospective customers. This is necessary for our legitimate interest in demonstrating the capabilities of our platform to prospective customers. We limit this activity to specific sales opportunities, use only publicly available professional information, restrict circulation, and delete the information promptly after use.

3. How we share and disclose personal data

We may share your personal data externally, in order to facilitate the provision of our products, services, and communications with our service providers, our professional advisers, law enforcement, regulators, auditors and insurers.

We may disclose your personal data to a third party in connection with a corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or capital, including in connection with any bankruptcy or similar proceedings.

4. International data transfers

Your personal data may be held at our offices, third-party agencies, service providers, representatives and agents as described above.

As a company based in the United Arab Emirates, your personal data may be processed by us outside your home country, including in the UAE and the United States (in connection with our AI service providers). Your personal data at rest is hosted within the EEA (Frankfurt, Germany).

For personal data originating in the UK and/or EEA, where we process your personal data outside your home country, we will ensure:

the UK government or the European Commission (as applicable) has decided the particular country or international organization ensures an adequate level of protection of personal data;
there are appropriate safeguards in place, such as the European Commission approved Standard Contractual Clauses and UK International Data Transfer Addendum (as applicable), together with enforceable rights and effective legal remedies for you (where you in the EU or UK, you have the right to request a copy of the documented safeguards – which may be redacted for commercial sensitivities - by contacting us in accordance with the 'How to contact us' section below); or
a specific exception applies under data protection law.

5. Data security

We have appropriate internal security measures in place with respect to data security and incident response to prevent personal data from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your personal data will do so only in an authorized manner and are subject to a duty of confidentiality.

Where we engage third parties to process personal data on our behalf as a processor, they do so on the basis of written instructions to ensure the security of personal data in compliance with the applicable data protection regulations.

6. How long we process and retain your personal data

We will only process and store your personal data for as long as necessary to fulfill the purposes we collected it for (outlined above), including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We will not keep your personal data for longer than is necessary, and following the end of the relevant retention period, we will delete or anonymize your personal data. In some circumstances, we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such anonymized information without further notice to you.

7. Your rights

Depending on your location, you may have the following rights, which you can exercise by contacting us in accordance with the 'How to contact us' section below:

Object to use – the right to object to our continued processing of your personal data, e.g. processing carried out for the purpose of our legitimate interests.
Access a copy of your personal data – the right to be provided with a copy of the personal data that we process about you.
Correction (also known as rectification) – the right to request that we correct any errors, outdated information, or omissions in personal data that we process about you
A qualified right to erasure (also known as the right to be forgotten) – the right to require us to delete your personal data in certain situations.
A qualified right to restriction of processing – the right to require us to restrict processing of your personal data in certain circumstances, e.g. if you contest the accuracy of the data.
Data portability – the right to receive the personal data we process about you, in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations.
Not to be subject to automated individual decision making - the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you – our platform uses AI and automated processing to generate outputs, but we do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
Withdraw your consent - where you have given us your consent, the right to withdraw your consent at any time by contacting us as described in the "How to contact us" section below:
Complain – the right to bring complaints with any relevant data protection or privacy authority. If you reside in the UK, you have the right to complain directly to us, as the controller, if you consider we have not complied with data protection laws when processing your personal data, by contacting us as described in the "How to contact us" section below.

Please contact us if you have any query or concern about our use of your personal data. We hope we will be able to resolve any issues you may have. If not, you can contact a regulator, including:

If you reside in the UK, this will be the Information Commissioner's Office, who can be contacted here: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline number: 0303 123 1113 https://www.ico.org.uk
If you are located in Europe, you also have the right to lodge a complaint with the relevant Data Protection Authorities in the EU: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
If you are located in any other jurisdiction, please refer to the website of your national data protection authority.

8. How to contact us

If you wish to contact us or make a request pursuant to this privacy notice, please email privacy@runolive.ai.

9. Changes to this privacy notice

We reserve the right to modify, alter or otherwise update this privacy notice at any time which will be made available through our website. Please check this page regularly for the most up to date version of this notice.

This Privacy Notice was last updated on [publication date].