Privacy Policy

Columa — a technology product of Olive Group, LLC
Effective date: July 3, 2026 · Last updated: July 3, 2026

1. Who we are

Columa is operated by Olive Group, LLC (“we,” “us”). This Privacy Policy explains how we collect, use, share, and protect information in connection with the Columa platform and website (the “Service”).

2. Our role: controller and processor

• For information about our direct customers (account, billing, and usage data), we act as a controller.
• For the business data our customers process through Columa about their own end users (for example, their leads, chat visitors, callers, or the customer and invoice records in their connected QuickBooks), we act as a service provider / processor on that customer’s behalf and at their direction.

3. Information we collect

• Account & billing data: name, business name, email, and subscription/billing details (billing is handled by Olive Group, LLC).
• Site & license data: the site URL, license key, plan, and configuration you set.
• Usage & diagnostic data: feature usage, metering counts, and error logs used to operate and support the Service.
• Customer-provided end-user data: data you route through Columa’s features (e.g., form submissions, chat and call records, CRM contacts) and data from services you connect.

4. How we use information

We use information to provide, secure, support, and improve the Service; to process billing; to communicate with you; to meter usage; and to comply with law. We do not sell personal information, and we do not use data you process through the Service to build advertising profiles.

5. Third-party services we integrate with (subprocessors)

When you enable them, the Service exchanges data with third-party providers at your direction, which may include: Intuit QuickBooks or Wave Accounting (invoicing), AI model provider(s), voice/telephony provider(s), email delivery, CRM, payment processing, and hosting. Each provider processes data under its own terms and privacy policy. A current list of subprocessors is available at /subprocessors or on request.

6. QuickBooks / Intuit data

If you connect QuickBooks to Columa:

• What we access: through Intuit’s Accounting API, we access the QuickBooks company data needed to create and manage customer and invoice records you initiate.
• How we use it: solely to perform the actions you direct (for example, creating an invoice when an agreement is signed). We do not use QuickBooks data for advertising or profiling, and we do not sell it.
• Authorization storage: the OAuth access and refresh tokens that authorize this connection are stored encrypted at rest on our servers and are transmitted only over encrypted (TLS) connections. The Intuit application credentials are held only on our server infrastructure and are never exposed to your website or browser.
• Your control & deletion: you can disconnect QuickBooks at any time from the Columa Payments screen, which revokes the authorization and deletes the stored tokens. You may also request deletion of related records as described in Section 10.

Wave Accounting: if you connect Wave instead, your Wave access token and invoice data are stored on and sent from your own website directly to Wave — they are not transmitted through or stored on Olive Group infrastructure. See Wave’s privacy policy for how Wave handles that data; you can disconnect Wave at any time from the Columa Payments screen.

7. How we share information

We share information only: with subprocessors as described above; with service providers acting on our behalf under confidentiality obligations; to comply with law or valid legal process; to protect rights and safety; and in connection with a business transfer (e.g., merger or acquisition). We do not sell personal information.

8. Data security

We use administrative, technical, and physical safeguards appropriate to the data, including TLS in transit, encryption at rest for integration credentials/tokens, access controls, and least-privilege handling of secrets. No method of transmission or storage is 100% secure.

9. Data retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Integration tokens are deleted when you disconnect the integration. We retain personal information for as long as your account is active and as needed for the purposes described in this policy, after which it is deleted or de-identified unless a longer retention period is required by law (for example, tax and accounting records).

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@olive.group. Where we process end-user data on behalf of a customer, we will refer requests to that customer and assist as their processor.

11. Cookies

columa.co does not run open blog comments. Training videos on this site are embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com), which avoids advertising cookies but may use device storage when you press play — see Google’s privacy policy for details. The site uses the following cookies:

• Essential/security cookies — set by our hosting platform (GoDaddy) to help protect the site against automated abuse and bots.
• Hosting-platform analytics cookies — our hosting provider (GoDaddy) sets its own traffic/analytics cookies as part of its website platform.
• Google Analytics — we use Google Analytics to understand site traffic and improve our website. Google Analytics sets cookies that collect information such as pages visited, time on site, and general visitor behavior. See Google’s Privacy Policy for how Google handles this data.
• Payment cookies — Stripe, our payment processor, sets a fraud-prevention cookie when payment features are used.
• Offer & referral cookies — if you arrive via a promotional or referral link, first-party cookies (columa_offer, columa_ref) remember the offer code or referrer for up to 7 days so the right discount or referral credit is applied at checkout. No third party receives these.

You can control cookies through your browser settings, and can opt out of Google Analytics using Google’s browser add-on; blocking essential cookies may affect site functionality.

12. Children’s privacy

The Service is intended for businesses and is not directed to children under 13, and we do not knowingly collect their personal information.

13. International users

We are based in the United States and process information in the U.S. and where our subprocessors operate. If you access the Service from outside the U.S., you consent to this processing.

14. Changes to this policy

We may update this policy; material changes will be posted with a new effective date.

15. Contact

Olive Group, LLC · 1230 Rosecrans Ave STE 300 9018, Manhattan Beach, CA 90266 · privacy@olive.group