Privacy Policy

Updated: July 8, 2026

This Privacy Policy explains how Olva, Inc. ("Olva", "we", "our", or "us") collects, uses, shares, and protects information when you use our websites, applications, browser extension, connected channels, and related services (the "Service").

Olva is an AI-assisted career platform. To do its work, the Service reads and analyzes information about you — résumés, work and education history, answers to questions, and materials you share — and builds a profile (your "Arc") that powers direction guidance, learning, job matching, networking, and application support. This policy describes what that involves and the choices you have.

In short: we collect what you give us and what the Service needs to work, we use it to provide the Service to you, we do not sell it, we do not share it for advertising, and we do not let AI providers train their general models on it. You can access, export, correct, and delete your information.

If you do not agree with this policy, do not use the Service.

1. Who this policy covers

This policy applies to everyone who interacts with Olva, including:

  • Students and individual users who create an Olva account.
  • Agencies, mentors, and staff who use Olva to support the people they work with.
  • Visitors to our public websites.
  • People whose information appears in the Service — for example, professional contacts a user adds to their network. See Information about your contacts.

Where an agency, school, or mentor program gives you access to Olva, both that organization and Olva may handle your information. This policy covers Olva's own handling; the organization's use is governed by its agreement with you.

2. Information we collect

Information you provide:

  • Account information — name, email address, and sign-in details when you create an account or sign in (including via Google).
  • Profile and career materials — résumés, CVs, work and education history, projects, skills, portfolios, writing, and other documents or content you upload or create. These materials may reveal information about your background; provide them at your discretion.
  • Your answers and your Arc — responses to onboarding and direction questions, conversations with Olva, and the profile the Service builds from them, including inferences about your strengths, interests, and direction.
  • Network and outreach information — contacts you add, notes, meeting details, and messages or drafts you create.
  • Communications — messages you send to Olva or to us, and content you share through channels you connect (for example, Telegram).
  • Payment information — if we offer paid plans, payment details will be collected and processed by a payment processor; we will not store full card numbers. We will update this policy and our subprocessor list before introducing paid processing.

Information we collect automatically:

  • Usage data — features you use, actions you take, and pages you view within the Service.
  • Device and log data — IP address, browser and device type, operating system, and timestamps. IP address may indicate your approximate location.
  • Cookies and similar technologies — see Cookies and similar technologies.

Information from other sources:

  • Sign-in providers — if you sign in with Google, we receive basic account information such as your name and email address.
  • Public and licensed sources — for job, company, and networking features, we collect information from publicly available and third-party sources, such as job postings, company websites, and professional web pages.

Information about your contacts. When you add people to your network or use discovery features, we process information about those people — such as name, role, company, and public professional links — sourced from you or from publicly available web sources. We use this information only to provide networking features to you; we do not sell it, use it for advertising, or use it to build profiles for anyone other than the user who added it. If you are a non-user whose information appears in Olva and you want it removed, contact us using the details below.

We do not intentionally collect special-category or sensitive data such as health, biometric, or precise geolocation data, and we ask that you not upload it. Account credentials are handled by our authentication provider and are used only to operate sign-in.

3. How we use information

We use information to:

  • Provide the Service — create and maintain your account, build and display your Arc, and operate the features you use.
  • Power AI features — analyze your materials, generate direction insights, teach concepts, rank and recommend jobs, prepare meeting and networking research, and draft résumés, outreach, and application content. See AI and automated processing.
  • Personalize — tailor recommendations, learning, and check-ins to you.
  • Communicate — send service and account messages (for example, sign-in codes and invitations) and respond to your requests. Where we send optional updates, you can opt out.
  • Maintain safety and integrity — authenticate users, secure the Service, and detect, prevent, and address abuse, fraud, and technical issues.
  • Improve the Service — understand usage, debug, evaluate quality, and develop features. We may use de-identified or aggregated information that no longer identifies you.
  • Comply with law — meet legal obligations and enforce our Terms of Service.

Where GDPR or similar laws apply, our legal bases are: performance of our contract with you; your consent (which you may withdraw); our legitimate interests in operating, securing, and improving the Service; and compliance with legal obligations.

4. AI and automated processing

Olva uses AI throughout the Service. When you converse with Olva, you are interacting with an AI system, not a human.

  • What the AI does. AI models read materials you provide, generate analysis and inferences about your direction and strengths, rank jobs and contacts by fit, and draft content for your review.
  • Suggestions, not decisions. Olva's outputs are informational suggestions for you to review and act on. We do not use automated decision-making technology to make significant decisions about you — decisions with legal or similarly significant effects, such as the provision or denial of employment, education enrollment, financial services, housing, or healthcare. Where an employer, agency, or school makes such decisions, those decisions are theirs, made by humans, not by Olva.
  • No training of general models on your content. Content sent to our AI providers is processed under agreements that limit its use to providing the service to us and prohibit the providers from using it to train their general-purpose models.
  • Your rights. You may ask how an AI feature works, request human review of an output that affects you, contest a result, and dismiss or correct inferences shown in your Arc. See Your rights and choices.

5. When you use Olva through an agency

If an agency, school, or mentor program is connected to your account, that organization and its authorized staff may see information relevant to the support they provide — for example, your progress, applications, sessions, and materials you share in that context. We process this information to provide the Service to you and to the organization. The organization's own use of your information is governed by its agreement with you.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding 12 months.

We disclose information only as needed to run the Service:

  • Service providers (subprocessors) — vendors that host, process, or support the Service under contracts that restrict their use of your information. See Subprocessors.
  • AI providers — content needed to generate AI features is sent to AI model providers under the restrictions described above.
  • Your organization — where you use Olva through an agency, school, or mentor program, as described in Section 5.
  • Other users, at your direction — content you choose to share with mentors, staff, or contacts through the Service.
  • Destinations you choose — services you connect or open (for example, Telegram, or an email compose window). Once information reaches a destination you chose, that destination's terms and privacy practices govern it.
  • Legal and safety — when required by law or legal process, or to protect the rights, safety, and security of users, the public, or Olva.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case this policy will continue to apply to your information.

For purposes of the California Consumer Privacy Act, the categories of personal information we collect are: identifiers (name, email, IP address); professional and employment-related information; education information; internet and electronic network activity; approximate geolocation derived from IP address; audio or visual information you upload; inferences drawn to build your profile; and account credentials used for sign-in. We disclose these categories to service providers for the business purposes described above.

7. Subprocessors

We use a limited set of providers to operate the Service:

  • Supabase — database, authentication, and file storage.
  • OpenAI — AI model processing for analysis, generation, and embeddings.
  • Google — sign-in (OAuth) and AI model processing (Gemini).
  • Exa — web search used for job, company, and networking research.
  • Resend — transactional email delivery.
  • Cloud hosting and infrastructure providers — application hosting and content delivery.
  • Telegram — messaging, only if you connect a Telegram channel.

We update this list as providers change. For current details or notice of material changes, contact us using the details below.

8. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and secure the Service. We do not use third-party advertising cookies. You can control cookies through your browser; disabling some may affect how the Service works. Because we do not sell or share personal information, there is no sale or sharing to opt out of; where required, we treat browser-based opt-out preference signals such as Global Privacy Control consistently with that commitment.

9. Your rights and choices

Depending on where you live, you may have the right to:

  • Access and portability — request a copy of your personal information. You can also export your materials directly in the Service.
  • Correction — correct inaccurate information, including by editing your profile and dismissing inferences in your Arc.
  • Deletion — delete your account and personal information.
  • Object or restrict — object to or restrict certain processing.
  • Withdraw consent — where processing relies on consent, withdraw it at any time.
  • Human review — request human review of an AI output that affects you.
  • No discrimination — exercise your rights without discriminatory treatment.

California residents: you have the rights to know, access, correct, and delete personal information; to opt out of sale and sharing (we do neither); and to limit use of sensitive personal information (we use it only to provide the Service). We do not use automated decision-making technology to make significant decisions about you.

EU/UK residents: you may exercise the rights above and lodge a complaint with your data protection authority. We rely on the legal bases described in Section 3.

To exercise any right, email privacy@olva.app. We will verify your request — typically by confirming control of the email associated with your account — and respond within the time required by law. You may use an authorized agent where the law allows; we may ask the agent for proof of authorization. If we decline a request, we will explain why, and you may appeal by replying to our response; we will review the appeal and inform you of the outcome as required by law.

10. Data retention

We keep personal information only as long as needed to provide the Service, support legitimate business operations, resolve disputes, and comply with legal obligations. How long depends on the type of information and how you use Olva. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required by law, and remove it from backups on a rolling schedule.

11. International data transfers

Olva is based in the United States and processes information in the United States and in other countries where our providers operate. Where we transfer personal information from jurisdictions with data transfer requirements, we use appropriate safeguards, such as standard contractual clauses, where required.

12. Security

We use reasonable technical and organizational safeguards, including encryption in transit (HTTPS/TLS), access controls, and vendor security review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and regulators as required by law.

13. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, use Olva only with the involvement and consent of a parent, guardian, or your school or program. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will update the "Updated" date above, and for material changes we will provide additional notice, such as by email or in the Service, before they take effect.

15. How to contact us

For privacy questions or requests: