Privacy Notice

Last Updated: May 15, 2025

Information for California Residents: Please see “Additional Information for Individuals Residing in California” for the Notice at Collection and other information specific to California residents.

Olo Inc. (“Olo,” “us” and “we”) provides online, on-demand ordering, guest engagement and payment tools for the restaurant and hospitality industry. This Privacy Notice (“Notice”) describes what personal information Olo collects through its websites, portals, digital assets and other services that link to this Notice as well as at events, webinars and tradeshows (collectively, the “Services”). This Notice also explains how Olo uses and discloses such personal information and the rights and choices you have in relation to your personal information and how to contact us regarding our privacy practices.  

We treat all personal information covered by this Notice as pertaining to individuals acting as business representatives, and not in their individual or household capacity. We have additional privacy notices that apply to other products and services, types of personal information and types of people. We have listed these notices below and they are all available at Privacy Notices.

• If you are a consumer who has an account with Olo, please see our Privacy Notice for Olo Account Holders.
• If you are a California resident applying for a job with Olo, please see our Applicant Privacy Notice.
• If you are participating in Olo’s Know Your Customer (“KYC”) process for Olo Pay or access or use certain payment facilitation services by engaging in in-store transactions at participating merchants, please see our Olo Pay Privacy Notice.

We recommend that you read this entire Notice so that you are informed of our privacy practices. If you want to skip to a particular section in the Notice though, please refer to the Table of Contents below.

Personal Information We Collect

We collect personal information when you use the Services. We collect personal information (i) directly from you, (ii) from third parties, and (iii) automatically when you use the Services. There is a description below of the types of personal information collected from each source.

Personal Information You Provide Directly to Us. We collect personal information that you provide to us. This personal information may include:

• Contact information, such as your business name, job title, name, email address, mailing address and phone number.
• Credentials, such as username and password.
• Event information, such as registration information, payment information, attendance records, emergency contact information, dietary preferences, accessibility requirements, survey responses and photos or recordings in which you may appear.
• Communications that we exchange with you, including when you contact us with questions, feedback or otherwise.
• Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.‍

Personal Information We Collect Automatically. We and third parties may automatically collect information about you, your device and your interaction over time with our Services and any communications we send. Information collected automatically by cookies or similar tracking technologies (described below in “Cookies and Similar Tracking Technologies”) may include:

• Device data, such as your computer or mobile device operating system and version; manufacturer and model; browser type; screen resolution; device type (e.g., phone, tablet); IP address; unique identifiers (including identifiers used for advertising purposes); language settings; mobile device carrier; radio/network information (e.g., WiFi, LTE, 3G); and general location information such as city, state or geographic area.
• Online activity data, such as pages or screens you viewed and how long you spent on them, the frequency of your visits, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times and whether you have opened our emails/texts or clicked links within them.

Personal Information We Obtain from Third Parties. We may collect personal information about you from third parties, such as business partners, social media platforms, advertising providers and data suppliers. This personal information may include:

• Contact information, such as name, job title, company affiliation, business name, email and phone number.
• Social media information, such as personal information that you share through interactions on social media platforms and information collected by social media companies through social media widgets or tracking technologies.
• Device data, such as unique identifiers and IP address.
• Online activity data, such as browsing history and usage data.   

‍Information We Derive. We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.

How We Use Personal Information

We use personal information for the following purposes:

Sales and lead management. We use personal information for sales and lead management, including to:

• Identify potential customers and business opportunities.
• Maintain a database of prospective customers and their representatives.
• Engage with potential customers and interact with customers through the sales cycle.
• Conduct demos and pilots.
• Optimize our sales process and analyze sales performance.

Contract preparation and relationship management. We use personal information for contract preparation and relationship management, including to:

• Prepare, negotiate and execute agreements with customers and service providers.
• Maintain relationships with our customers and service providers.  
• Send contract-related notifications, including renewal reminders.
• Facilitate onboarding processes.

Provide, maintain and improve the Services. We use personal information to provide, maintain and improve the Services, including to:

• Operate the Services and maintain our business.
• Create and manage your account.
• Communicate important service updates, changes and security alerts.
• Personalize your experience with the Services.
• Respond to inquiries, support requests and feedback.
• Analyze how the Services are used.
• Improve the Services and develop new features or services.

Events and programs. We use personal information for events and programs, including to:

• Process your registration for webinars and events.
• Communicate with you about the events you have registered for.
• Arrange travel and accommodations.
• Provide accessibility accommodations and appropriate meal options.
• Follow-up after events with relevant materials, recordings or feedback requests.
• Invite you to future events.

Communications. We may use personal information for communications, including to:

• Send messages and updates about Olo and its products and services.
• Deliver newsletters, blogs and content you have subscribed to.
• Personalize our communications based on your preferences and interactions with us.

Marketing and advertising. We may use personal information for marketing and advertising, including to:

• Send marketing communications, either directly or through a third party, in relation to new or existing Olo products or services (or those of our business partners) that may interest you.
• Create audiences for targeted advertising based on your interests and behaviors.
• Deliver advertisements, including on third-party sites.  
• Measure the effectiveness of our marketing and advertising campaigns and communications.

Compliance and protection. We may use personal information for compliance and protection, including to:

• Comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

• Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims).

• Audit our internal processes for compliance with legal and contractual requirements and internal policies.

• Enforce the terms of services that govern the Services.
• Maintain the security of the Services and prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
  
  

How We Share Personal Information

We may share personal information with the following categories of recipients:

• Our affiliates.
• Service providers, such as third-party entities and individuals that provide services on our behalf or help us operate the Services or our business (e.g., hosting services, information technology services, customer support, email delivery, identity verification/fraud prevention services and website analytics). These companies may need information about you to perform their functions.
• Professional advisors, such as lawyers, auditors, bankers and insurers, in the course of the professional services that they render to us.
• Business partners, such as business partners who offer a service jointly with us or provide products or services that may be of interest to you. 
• Advertising providers, such as advertisers (e.g., advertising agencies and networks), marketing businesses, third-party data suppliers and other entities that help create, deliver and assess our advertising and marketing campaigns.
• Authorities and others, such as law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate, including, for example, to comply with applicable laws or governmental requests; enforce our terms of service; detect, prevent or investigate fraud; and protect against harm to the rights, property or safety of Olo or individuals.
• Business transferees, such as acquirers and other relevant participants in business transactions (or diligence or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Olo or our affiliates (including, in connection with a bankruptcy or similar proceedings).
• At your direction.

Cookies and Similar Tracking Technologies

We use cookies and similar tracking technologies for the Services and for communications with you.

Tracking Technologies We Use

Cookies are small text files that are placed and stored on your browser when you visit a website or on your device when you visit an app. We use both session cookies (cookies that expire when you close your browser) and persistent cookies (cookies that expire after a set period) to provide the Services. The cookies may be set by Olo or by a third party.

Local storage refers to files that are created by websites or apps and stored on your device or browser. These files function similarly to cookies.

Pixels, web beacons, embedded scripts or page tags are similar tracking technologies that are often used in connection with cookies or other identifiers associated with your device. These technologies are small blocks of code or transparent image files placed on webpages, apps, emails or ads that allow us to identify users when providing the Services and track interactions with the Services and our communications to you.

Software Development Kits (SDKs) are blocks of code used for mobile apps, which are functionally like cookies and pixels, web beacons and embedded scripts. SDKs enable developers to collect information about the device and network used to access an app and interactions with the app.

How We Use Cookies and Similar Tracking Technologies

We use cookies and similar tracking technologies for the following purposes:

• Provide our services
• Uniquely identify you or your device
• Remember preferences and settings
• Enable functionality
• Understand user activity 
• Analyze and monitor the performance of the Services
• Personalization and cross-context behavioral advertising purposes (including across applications)
• Deliver and measure the effectiveness of marketing and advertising campaigns
• Improve and develop new Services
• For security

Please see “Your Choices” below for information about how to control the use of cookies and similar tracking technologies.

Your Choices

You have certain choices related to marketing communications and cookies and tracking technologies.

Opt-out of marketing communications. We may send you marketing or other promotional communications. These marketing communications may include emails or text messages (if you have opted in to receive marketing text messages). You can unsubscribe or opt out of any such marketing communications from us by following the instructions contained in the communications we send you. Please note that even if you opt-out of marketing communications, you may continue to receive non-marketing communications.‍

Cookies. Your browser may allow you to decline cookies. If you decline certain cookies, it may impact the functionality of the Services, and the Services may not work properly. Since each browser is different, please consult the “Help” or “Preferences” menu of your browser for information about how to control cookies.

Do Not Track. Some browsers have “do not track” features that allow you to tell websites that you do not want to have your online activities tracked. We do not currently respond to Do Not Track signals. We do, however, treat global privacy control (“GPC”) signals as opt-out of sale and sharing requests under applicable state privacy laws.  

Additional Information for Individuals Residing in California

This section applies only to California residents and supplements the information provided in the other sections of this Notice that pertains to all individuals. Certain terms used in this section have the meanings given to them in the California Consumer Privacy Act (“CCPA”).

Notice at Collection

• For information on the categories of personal information we collect and the sources of such personal information, see “Personal Information We Collect” above.
• For information on the purposes for which we collect personal information, see “How We Use Personal Information” above.
• We may share personal information with other parties to serve ads on our behalf targeted to your online activities or to perform certain analytics services. Information is not shared for money, but certain uses may be deemed a “sale” or “sharing” of personal information under the CCPA. Click the “Do Not Sell or Share My Personal Information” link located at the bottom of the Services to opt-out of these uses of your personal information.    
• For information on how long we retain your personal information, see “Data Retention” below.

Supplemental Information

The CCPA requires that we provide certain additional information to California residents. The information reflects current practices and practices during the past 12 months.

Categories of Personal Information We Collect (for more information, see “Personal Information We Collect”)

• Identifiers (e.g., name, job title, email address, phone number)
• Commercial Information (e.g., event registration information, event attendance and accommodations, communications information, social media information)
• Internet/Network Information (e.g., IP address, browser history, device identifiers, usage details like time, length and frequency of interactions)
• Audio, electronic, visual or similar information (e.g., event recordings)
• Inferences drawn from the above

We collect credentials (i.e., username and password), which are considered sensitive personal information. We use this information only as permitted by CCPA and do not use it to infer characteristics about individuals.

We do not offer financial incentives for the collection or sale of personal information.

Categories of Sources from Which We Collect Personal Information (for more information, see “Personal Information We Collect”)

• Directly from you
• Operating systems and platforms
• Business partners
• Social networks
• Service providers
• Data suppliers
• Advertising providers

Business or Commercial Purposes for Which We Collect, Sell or Share (for Cross-Context Behavioral Advertising) Personal Information (for more information, see “How We Use Personal Information”)

• Sales and lead management
• Contract preparation and management

• Provide, maintain and improve the Services
• Events and programs
• Communications
• Marketing and advertising
• Compliance and protection

Categories of Personal Information We Disclose for Business Purposes and Categories of Third Parties to Whom Personal Information is Disclosed (for more information, see “How We Share Personal Information”)

Categories of Personal Information that We Sell or Share (for Cross-Context Behavioral Advertising) and Categories of Third Parties to Whom Personal Information is Sold or Shared

‍

We do not have actual knowledge that we sell or share the personal information of minors under the age of 16.

If we process deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information unless permitted by applicable law.

‍Privacy Rights

As a resident of California, you have the following privacy rights in relation to your personal information, subject to certain conditions and exceptions:

Access/Portability. You have the right to confirm whether we process any personal information about you. You have the right to request access to your personal information and receive it in a portable and machine-readable format.

Deletion. You have the right to request us to delete your personal information. 

Correction. You have the right to request that we correct or update inaccurate personal information that we hold about you.

Opt-Out. You have the right to opt-out of the sale or sharing (for cross-context behavioral advertising) of your personal information. To opt-out of the sale or sharing of your personal information, use the “Do Not Sell or Share My Personal Information” link on the Services.

Right to Withdraw Consent. If you provide us with consent, you have the right to withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice.

Exercising Your Privacy Rights

You can exercise your privacy rights by submitting this form. This form is only for requests related to the Services. If you are an Olo account holder, you should exercise your privacy rights as set out in this Privacy Notice or by submitting this form.

You can also exercise your privacy rights by emailing us at dataprivacy@olo.com.  

We will not discriminate against you if you exercise your privacy rights.

When we receive your privacy rights request, we may ask for additional information to verify your identity. Any such information requested will only be used for the purpose of confirming your identity.

If an authorized agent is submitting a privacy rights request on your behalf, they must submit proof of your authorization to make the request, such as a valid power of attorney or proof of signed permission from you or such other method as permitted by applicable law. We may deny a request from an authorized agent if they do not provide proof that they are authorized to make the request on your behalf. The authorized agent should also provide us with the name and email of the individual exercising their privacy rights as well as the name and email of the authorized agent.

If we deny your privacy request or are unable to completely fulfill your privacy request, we will provide the reasons to you as permitted by applicable law. If we deny your request, we will notify you within the applicable statutory period (generally, 45-90 days).

Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it or for the period that is required under applicable law. In determining the length of the retention period, we will consider the amount, nature and sensitivity of the personal information; the potential risk of harm for unauthorized use or disclosure of personal information; the purposes for which we collected personal information and whether we can achieve the purposes through other means; and applicable legal requirements.

Additional Information for Individuals in Canada

This section applies only to individuals in Canada and supplements the information provided in the other sections of this Notice that pertains to all individuals.

Consent

Our collection, use and disclosure of your personal information is based on your consent (implied or express) or where otherwise permitted or required by the laws of Canada, including the laws of the applicable province. By using the Services, you accept the terms of this Notice and consent to the collection, use, disclosure and retention of your personal information as described in this Notice. You may change or withdraw your consent at any time subject to legal or contractual obligations and providing reasonable notice. Upon receiving the notice of your withdrawal of consent, we will inform you of the likely consequences of the withdrawal of your consent.

Privacy Rights

You have the right to request access to, and correction of, personal information that we hold about you, subject to conditions and exceptions under applicable law. Depending on where you reside, and subject to conditions and exceptions under applicable law, you may also have the right to delete your personal information, restrict processing of your personal information and access information about how your personal information is used and disclosed. 

You can exercise any of your privacy rights by emailing us at dataprivacy@olo.com.  

When we receive your privacy request, we may ask for additional information to verify your identity. Any such information requested will only be used for the purpose of confirming your identity.

If we deny your privacy request or are unable to completely fulfill your privacy request, we will provide the reasons to you as permitted by applicable law. If we deny your request, we will notify you within the applicable statutory period.

Transfers of Data

The personal information that we collect, use and disclose in connection with the Services is processed and stored in the United States. The privacy laws in the United States are different from Canadian privacy laws. US courts, law enforcement and regulatory agencies may be able to access your personal information. We will protect your information as described in this Notice. When you provide personal information to us through the Services, you consent to the transfer of your personal information to the United States, and processing of such information within the United States.

Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it or for the period that is required under applicable law. In determining the length of the retention period, we will consider the amount, nature and sensitivity of the personal information; the potential risk of harm for unauthorized use or disclosure of personal information; the purposes for which we collected personal information and whether we can achieve the purposes through other means; and applicable legal requirements.

Right to Challenge

You may file a complaint by contacting us as described below if you believe we have not complied with any privacy laws relating to the protection of your personal information or the practices described in this Notice.

Email: dataprivacy@olo.com

Physical mail: Olo Inc., Attn: Chief Legal Officer, 285 Fulton Street, One World Trade Center, 82nd Floor, New York, New York 10007.

We thoroughly investigate all complaints. To ensure we can best respond to your concerns, we may request additional information from you to help investigate your complaint. If our investigation determines your complaint is valid, we will take appropriate actions to resolve the issue, which may include updating our policies or procedures. If you are unsatisfied with the result of our investigation, you have the option to seek remedies available under applicable law and you should reach out to the Privacy Commissioner in the province where you reside. We will retain personal information related to our decision for at least one year after we make a decision.

Other Sites and Services

The Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We encourage you to read the privacy notices provided by third parties on these other websites and online services.

Security

We implement and maintain reasonable security procedures and practices designed to safeguard personal information we collect against theft, loss and unauthorized access, use, modification, and disclosure. Even though we take such measures to protect your personal information, we cannot guarantee that your personal information will be completely secure.

Changes to this Notice

We reserve the right to modify this Notice at any time. If we make changes to this Notice, we will notify you by updating the “Last Updated” date at the top of this Notice. We will communicate changes to you in accordance with applicable law. Your continued use of the Services after any update to this Notice will constitute your acceptance of our changes.

Contact Us

You can reach us by email at dataprivacy@olo.com.

You can reach us by postal mail at:  Olo Inc., Attn: Chief Legal Officer, 285 Fulton Street, One World Trade Center, 82^nd Floor, New York, New York, 10007.