Privacy Policy

1. Overview

This Privacy Policy explains how HIGHPOINT VENTURES PTY LTD (ABN 95 697 123 096) trading as Olani ("we", "us", or "our") collects, uses, stores, and discloses personal information when you use our website (tryolani.com) and our software application ("the Service").

We are based in Sydney, New South Wales, Australia. We are committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

2. Information We Collect

We collect information in two main contexts: from our business account holders, and from end-customers who submit forms.

3. How We Use Information

We use collected personal information solely for legitimate business purposes, including:

• Providing and operating the Service, including rendering forms and recording responses.
• Generating pre-formatted WhatsApp deep links (wa.me) so customers can message businesses directly.
• Managing account access, magic-link logins, and passwordless authentication.
• Administering subscription plans and response usage allowances.
• Providing customer support and responding to inquiries sent to hello@tryolani.com.
• Protecting against fraud, bot submissions, and abuse through automated anti-spam honeypot fields.

4. WhatsApp Handoff and External Messaging

When an end-customer clicks "Send on WhatsApp", Olani opens a standard WhatsApp deep link containing the customer's pre-filled answers.

We do not read, intercept, or store messages sent within WhatsApp itself. Once a customer is redirected to WhatsApp, all subsequent communications and data exchanges take place directly between the customer and the business under WhatsApp's own Terms of Service and Privacy Policy.

5. Third-Party Service Providers (Sub-Processors)

We engage trusted third-party service providers to support our operations:

• Supabase: Secure cloud database hosting and user authentication infrastructure.
• Stripe: Secure payment processing and subscription billing management.
• OpenAI / Anthropic: Used optionally when a business uses the "Draft from website" feature to analyze public website text and suggest form questions. We do not send customer responses to these AI providers.

6. Data Storage and Security

We take reasonable administrative, technical, and physical measures to safeguard your personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.

All traffic between your browser and our servers is encrypted in transit using Transport Layer Security (TLS). Database records are protected with database-level Row Level Security (RLS) policies ensuring account data is accessible only by authenticated business owners.

7. Data Retention and Deletion

We retain form definitions and customer responses for as long as your business account remains active.

You can delete individual responses or forms directly inside your dashboard at any time. When you delete a form, all associated responses are immediately purged. If you wish to delete your entire business account and all associated data, contact us at hello@tryolani.com, and we will permanently delete your records within 30 days.

8. Your Rights Under Australian Privacy Law

Under the Australian Privacy Principles, you have the right to request access to personal information we hold about you, and to request that we correct inaccurate, out-of-date, incomplete, or irrelevant information.

To make an access or correction request, please email hello@tryolani.com. We will respond to your request within a reasonable period (typically within 30 days).

If you have a complaint about how we have handled your personal information, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.