Privacy Policy

Last updated: 12 November 2026

This policy explains what personal data Hollo ("Hollo", "we", "us") collects when you use Ollie, our personal assistant, and hollo.so, why, and what you can do about it. Hollo is the controller of your data. Questions go to contact@hollo.so.

What we collect

When you text Ollie

• Your phone number (or Apple ID email on iMessage), the name your messaging app shares, and the messages and voice notes you and Ollie send each other.
• What you ask Ollie to remember, such as your name, time zone and notes, and the reminders and watches you set.
• Web jobs: the goal you gave, the steps Ollie took, and recent screenshots of the pages it worked on, so a job can pause for your answer and carry on. When a site needs a one-time code or a CAPTCHA, you do it yourself through a private live link, and we don't store what you type there.

If you use your vault (Pro)

• The logins, cards (number, expiry, security code, name and billing postcode) and personal details (such as your address, date of birth and passport number) you save so Ollie can sign in, fill in forms and pay for you, and the accounts Ollie creates for you.
• Each item is encrypted on our servers (AES-256) before it's saved; only a short hint like "Visa •••• 4242" is kept readable. Card numbers, security codes and passwords are never shown to the AI: our servers type them straight into the website, only during a job you approved. Once one has been typed, we stop keeping screenshots of that job.

If you connect apps (Pro)

• For each app you connect (Google, Outlook, Slack, Notion, Linear, GitHub, Granola, Shopify, Todoist or 1Password): the account name and an access token or key, encrypted like your vault.
• Ollie uses each app only to do what you ask, at the time you ask: for example reading your calendar, finding a note, or sending an email you approved. What it reads is sent to our AI provider only to answer you, and isn't kept beyond your chat with Ollie. Disconnecting deletes the token or key, and where the app allows it we also revoke our access there.
• Google: with Google Calendar and Gmail connected, Ollie reads and adds events on your calendar and sends emails you approved, from your Gmail. Ollie can't read your inbox. We use this Google data only to do what you ask Ollie, never for ads, never to train AI models, and we don't sell or share it. Hollo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• 1Password: Ollie can look up a login and copy it into your Hollo vault when you ask. It never shows you or the AI the password.

People and business opportunities

• People: who you're connected with, and the messages you ask Ollie to pass to their Ollie. Only your first name and those messages go to them, never anything from your vault, calendar or chats.
• Opportunities: if you open a profile, your headline, what you offer, what you're looking for and where you are. Other people's Ollies can see it, but never your name or contact details. When someone asks to meet you, we keep the request and your answer. Your name is shared with them only if you say yes. Close your profile, or delete it, any time.

Payments

• Your plan and billing status from Dodo Payments, our merchant of record. We don't see or store your full card details for subscriptions.

When you visit hollo.so

• Basic technical logs, such as IP address and browser type, used to keep the site secure and working.

How we use it

• To be your assistant: to answer you, remember what you asked, send reminders, do web jobs, use your connected apps and pass messages to other Ollies, all as you asked.
• To keep Hollo secure, prevent abuse and fix problems.
• To bill you for a paid plan.

Your messages are sent to our AI provider, Anthropic (Claude), to write Ollie's replies, and Ollie may search the web or open websites in a cloud browser (Browserbase) to do what you asked. Voice notes are turned into text by OpenAI; we keep the text, not the recording. We don't use your data to train AI models, and we choose providers that don't either.

We don't sell personal data, and we don't use it for advertising.

Who we share it with

We use a small number of trusted providers to run Hollo. They process data only on our instructions:

We may also share data if the law requires it, or to protect the rights and safety of our users or the public.

International transfers

Some providers process data outside your country. Where that happens, we rely on the safeguards the law requires, such as standard contractual clauses.

How long we keep it

• Everything about you: until you reply "delete my data" to Ollie or email us. Then your messages, notes, reminders, web jobs, vault, connected apps, People and opportunities are deleted for good, within 30 days at the latest.
• You can remove any vault item, app, person or your opportunities profile yourself at any time.
• Each person has one saved cloud browser that keeps the cookies and site logins from their web jobs (so a site you signed into remembers you). It is deleted with everything else. We never read or copy what is in it.
• Billing records: as long as tax and accounting law requires.

Cookies

hollo.so uses the cookies needed to open your vault safely. These are always on.

We also ask, the first time you visit, whether we may use one advertising cookie: the X (Twitter) pixel. It tells us which of our ads on X brought people to hollo.so. It only loads if you choose Allow. If you choose No thanks, or don't choose, it never loads. You can change your choice at any time: Change your ad cookie choice.

The X pixel is never used on your vault, web job or People invite pages.

Security

Data is encrypted in transit and at rest, and the most sensitive parts (your vault and app keys) are encrypted again before they're saved. The database tables that hold your data can only be read by our servers. See Security for more. No system is perfectly secure, so if something goes wrong that affects you, we'll tell you promptly.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. Reply "delete my data" to Ollie, or email contact@hollo.so and we'll respond within 30 days. You can also complain to your local data protection authority.

Children

Hollo isn't meant for children under 16, and we don't knowingly collect their data. If you think a child is using Ollie, tell us and we'll delete it.

Changes

We'll update this policy as Hollo grows. If a change is significant, we'll tell you in the chat before it takes effect.

Contact

Hollo · contact@hollo.so · hollo.so