Who is responsible
Olyvia Labs, based in Guadalajara, Jalisco, México, is the party responsible for the personal data described here. For anything about your data, write to hi@olyvia.io. Portal clients can also use support@olyvia.io.
What we collect, and where
Contact form and newsletter. Your name, email address, the message you write, and the budget and timeline you pick. The newsletter keeps only your email address.
Client portal(portal.olyvia.io). The email you sign in with, your company name and contact details, your project records, the invoices we issue to you, and the references PayPal returns when you pay (order, subscription and transaction identifiers, amount, date). We never receive or store card numbers: payment happens on PayPal, under PayPal's own privacy policy.
Support requests sent from inside the portal: your message and the account it came from.
Technical records. IP address, browser type and timestamps in server logs, kept for security and to diagnose failures.
What we use it for
- Answering your inquiry and, if we work together, scoping and delivering the project.
- Running your portal account: sign-in, project status, invoices and payment history.
- Issuing invoices, collecting payments and keeping the records tax law requires.
- Keeping the site and the portal secure, and investigating abuse.
- Sending the newsletter, only if you subscribed, and only until you unsubscribe.
We do not sell personal data, and we do not use it for advertising profiles.
Who processes it on our behalf
We use a small number of providers, each for one job, under contracts that limit what they may do with your data: Vercel hosts this website; Hetzner hosts the client portal on servers in the United States; Google Workspace carries our email; PayPal processes payments; Clerk handles portal sign-in; Cloudflare serves our DNS. Some of these providers operate outside México, so your data may be transferred internationally with those safeguards in place.
Cookies and analytics
This website sets no tracking cookies. Your theme preference is stored in your own browser. If we measure traffic, we do it with Umami, a self-hosted, cookieless analytics tool that keeps aggregate counts and cannot follow you across sites. When we run advertising campaigns, the ad platform's conversion tag (Google Ads or Meta) may set a first-party cookie so a contact can be attributed to the campaign that brought you; it never receives the content of your message. The client portal uses strictly necessary session cookies to keep you signed in, and nothing else.
How long we keep it
Inquiries that do not become projects, up to two years. Client records and invoices, for the period tax law requires, which in México is five years. Server logs, ninety days. Newsletter addresses, until you unsubscribe.
Your rights
Under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties you may access, rectify, cancel or oppose the processing of your data (ARCO rights), and revoke consent you have given. Write to hi@olyvia.io from the address you used with us, say which right you are exercising, and we answer within twenty business days. If you are in the European Union or the United Kingdom, the equivalent rights under GDPR apply, including the right to lodge a complaint with your supervisory authority. In México, the authority is the INAI.
Minors
This site and the portal are for businesses and are not directed to anyone under eighteen.
Changes
When a data flow changes, this notice changes with it, and the date below moves. Material changes to portal clients are also announced by email.
Last updated: September 23, 2026 · Terms