Legal
Privacy policy
Last updated October 23, 2026
In short
- We collect what you give us (your email, your mobile number if you join the waitlist, your company website and the facts you add), what you connect (only if you choose to), and basic usage data.
- We use it to run Olunix: read your website, write your drafts and keep your account working. We do not sell your personal data.
- Olunix uses AI to write every draft. Your content is processed by our AI provider to produce your results.
- Nothing is ever posted for you. You review, copy and post every draft yourself.
- You can ask us to see, correct, export or delete your data at any time by emailing contact@olunix.com.
This summary is here to help. The full text below is what applies.
Who we are
Olunix is run by Olunix Inc., based in Toronto, Ontario, Canada. We are responsible for the personal information described in this policy. Our privacy officer can be reached at contact@olunix.com.
What this policy covers
This policy covers our website at olunix.com (including the waitlist and any free tools on it), and the Olunix web app. Together we call these the Service. Olunix is a business tool for founders and companies.
Information we collect
Account and sign-in
- Your name and email address.
- If you sign in with Google: your name, email address and profile picture.
- Session records: your IP address, browser or device type, and a session token. Sessions last up to 30 days.
We do not store passwords. You sign in with a link sent to your email, or with Google.
Your company and your content
- The website address you give us, and the public content we read from that website and from public social profiles linked to it.
- Your company brief and the facts in your Library, your answers to our questions, and your drafts, edits, approvals and whether you marked a draft as posted.
- Your messages with OVIX, the AI assistant in the app.
- Your settings (such as time zone, delivery times and which platforms you use) and your progress through in-app guides.
Accounts you choose to connect
These are optional and only happen if you connect them.
- Google Search Console and Google Analytics: read-only access to the search and traffic data for your own website.
- Reddit: your username and account history, read-only, so we can help you post in line with community rules. We cannot post to Reddit for you. When we find Reddit threads for you, we store each thread's title and preview only while you might reply to it, then delete that text and keep just the link.
Access tokens for connected accounts are stored encrypted. You can disconnect at any time.
Billing
Payments are handled by Stripe. We store your Stripe customer and subscription references, your plan, its status and billing dates. We never see or store your card number.
Forms on our website
- Waitlist: your email address and your mobile number with its country code. Both are needed to join. We also keep a record that you agreed to receive texts, with the wording you agreed to and when, and we record your IP address, browser type and which page you joined from. We do not ask for your name.
- Job applications: your name, email, phone number, and any LinkedIn, portfolio, resume or cover letter you send.
- Support, contact and enterprise enquiries: your name, email and message.
- Booking a call: your name, email and the time you choose.
- Free website tools: the website address you submit and the review we produce. We keep a scrambled form of your IP address to limit how often the tools can be used.
Usage and device data
- Pages you visit and actions you take in the app, through the analytics tools described in our Cookie policy.
- Error reports, so we can fix problems.
- Records of how much of the Service you use, without the content itself. These are deleted after 90 days.
How we use it and why
We only use your information for the reasons below. Where the GDPR applies, each has a legal basis.
- To provide the Service (your account, reading your website, writing your drafts, OVIX, billing). Basis: performing our contract with you.
- To keep the Service safe (security, preventing fraud and abuse, limiting misuse, fixing errors). Basis: our legitimate interest in running a secure service.
- To understand how the Olunix app is used, with PostHog, including session recordings of how you move through the app, with all text hidden, and with Google Analytics on the app's signed-out pages. Basis: our legitimate interest in understanding and improving the Service. To object, email contact@olunix.com.
- To improve Olunix, including developing and training our own AI models, using your inputs, edits and the drafts we produce for you. We remove details that identify you where we can, and we never use data from accounts you connect (such as Google Search Console, Google Analytics or Reddit) for this. To opt out of model training, email contact@olunix.com. Basis: our legitimate interest, or your consent where the law requires it.
- To text you by iMessage or SMS, if you joined the waitlist, about the Olunix launch and when your access is ready. Nothing else. Reply STOP to any text to stop them, or HELP for help. Message and data rates may apply. Basis: your consent, which you can withdraw at any time.
- To send you emails about your account, your drafts, and, if you joined the waitlist, your access. To stop any of these emails, email contact@olunix.com and we will turn them off. Basis: our contract with you, or your consent.
- To meet legal duties such as tax and accounting records. Basis: legal obligation.
We do not sell your personal data and we do not share it for cross-context advertising.
How we use AI
Olunix uses artificial intelligence to run the Service. AI reads your website and the information you give us, writes your company brief, writes every draft post and script, rewrites drafts after you edit them or add facts, powers OVIX, and reviews drafts automatically before you see them.
- OVIX is an AI system, not a person.
- Every draft is written by AI. AI can be wrong, can misstate facts, and can produce text similar to other text. Review every draft before you post it.
- When a draft includes a figure we have no source for, we ask you to fill it in or confirm it before you can copy the draft. We do not promise that every number in a draft is correct.
- We do not make decisions about you by automated means that have legal or similarly significant effects. Plan limits apply automatically, but they are service limits, not decisions about you.
Your content is processed by our AI provider, Microsoft Azure OpenAI Service, in the United States, only to produce your results.
Under our agreement with Microsoft, your content is not used to train their AI models. Microsoft may keep prompts and results for a limited time to detect abuse, then deletes them.
Where your data is stored
Olunix is a Canadian company. Your data is stored and processed in the United States. If you are in Canada, this means your data is processed outside Canada. If you are in the EU, EEA, UK or Switzerland, it is transferred outside those regions.
We protect these transfers with the EU-US Data Privacy Framework where the provider is certified, and otherwise with the European Commission's Standard Contractual Clauses and the UK addendum.
Cookies
We use a small number of cookies and similar storage to keep you signed in and to understand how the Service is used. Our Cookie policy lists them.
How long we keep it
- Your account and workspace data: while your account exists. When your account is deleted, all of its workspace data is deleted with it.
- Workspaces started without signing in: deleted after 24 hours.
- OVIX messages: we keep your recent conversation history and delete older messages regularly.
- Usage records: 90 days. In-app notification and guide history: 30 days.
- Google connection data: removed 30 days after you disconnect.
- Sign-in sessions: up to 30 days.
- Waitlist records: until 12 months after our public launch, or sooner if you unsubscribe. Waitlist IP address and browser details: 12 months. Job applications: 12 months. Support and contact messages: 2 years. If you reply STOP, we stop texting you and keep only a record that you opted out, so we don't text you again.
- Backups: deleted data may stay in our encrypted backups for a limited time, in line with our backup cycle, and is then deleted.
How we protect it
We use encryption in transit, encrypted storage for connected-account tokens, access controls limited to the people who need them, and sign-in without passwords. No system is perfectly secure; if a breach affects your personal information, we will tell you and the relevant authorities as the law requires.
Your rights
You can ask to see, correct, export or delete your personal information, or withdraw any consent you gave, by emailing contact@olunix.com. We will confirm your identity before acting and reply within one month. To get a copy of your data, or to delete your account, email contact@olunix.com. We complete deletion within 30 days.
EU, EEA and UK
You also have the right to restrict our use of your data, to object to uses based on legitimate interests (including product improvement), to data portability, and to complain to your local data protection authority.
Canada
Under PIPEDA and Quebec's Law 25 you can access and correct your information and withdraw consent. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
United States
You can make the same requests by email. We do not sell or share personal information for cross-context behavioural advertising.
Age and business use
Olunix is for business use by people aged 18 or over. We do not knowingly collect information from anyone younger. If you think a child has given us information, email us and we will delete it.
Changes to this policy
If we make a material change, we will tell you by email or in the app before it takes effect, and update the date at the top of this page.
Contact
Questions or requests: contact@olunix.com. Olunix Inc., Toronto, Ontario, Canada.