Skip to content Skip to footer
Olurai
Get Started
Get Started
Olurai

Privacy Policy

Close

Privacy Policy

Effective date: 4 September 2026

This notice explains how Devantai, trading as Olurai (“Olurai”, “we”, “us”), collects, uses, stores and shares personal information through olurai.io, app.olurai.io, creator and affiliate accounts, sponsor matching, connected inboxes and related services.

Controller and contact: Devantai, trading as Olurai, Roman Road, Basingstoke, Hampshire, RG23 8EP. Email hello@olurai.io for privacy questions, rights requests or professional-contact opt-outs.

1. Information we collect

  • Account and profile: name, email address, authentication identifier, country, niche, biography, social or website handles, audience figures, content formats, account status and support correspondence.
  • Creator prospects: professional contact email, public Instagram handle and profile URL, public biography, follower count, publicly presented name where available, recent public content and limited inferences about content category and primary publishing format. We do not infer sensitive personal information or private income.
  • Connected inboxes: email address, provider, encrypted authorisation credentials, message and thread identifiers, recipients, subjects, message content, sending status and reply signals needed for the features you select.
  • Managed email: requested address or domain, availability checks, provider references, mailbox status and messages handled through that inbox.
  • Sponsors: organisation, industry, website, professional contact name, role, business email, source and campaign history. We do not intend the catalogue for private or household contacts.
  • Billing and affiliate: plan, Stripe customer/subscription references, status, invoices, referrals, commissions and payout readiness. Stripe handles full card, bank, identity and tax details.
  • Technical information: IP address, browser or device information, security/request logs, feature activity, errors and local preferences.

Firebase Authentication handles your Olurai password. We do not add the raw password to your Olurai profile.

2. Sources

Information comes from you, your use of Olurai, integrations you choose, payment and email providers, and public or licensed professional sources used to build and verify the sponsor catalogue.

For Olurai’s limited creator introductions, we may manually collect professional contact information from publicly accessible United States Instagram creator profiles and review a small amount of recent public content, a public creator website or channel to understand the creator’s content and personalise the introduction. We do not use this campaign to infer sensitive traits.

3. Purposes and lawful bases

  • Contract: create and secure accounts; provide profiles, matches, drafts, email connections, sending, replies, billing, support and affiliate features.
  • Legitimate interests: maintain a relevant professional sponsor catalogue; send limited relevant creator introductions; prevent misuse; improve reliability, matching and usability. We balance these interests against people’s rights.
  • Legal obligations: financial/compliance records, lawful requests, tax, accounting and data-protection duties.
  • Consent: optional integrations, non-essential technology or marketing where consent is required. Consent may be withdrawn at any time.

Creator outreach is limited to eligible United States professional contacts, identifies Olurai, explains the source, provides an immediate opt-out and globally suppresses anyone who objects. Olurai does not make solely automated decisions producing legal or similarly significant effects.

4. Email and sponsor outreach

For account and sponsor-catalogue administration, Olurai acts as controller. When Olurai handles a user’s connected inbox solely to send, organise or monitor messages under that user’s choices, it performs those operations on the user’s instructions. Users remain responsible for the audience, content and lawful basis of their outreach.

Professional contacts may opt out using the unsubscribe link, by replying to the sender, or by emailing hello@olurai.io. We retain a minimal suppression record so an opt-out remains effective.

5. Who receives information

We share only what is reasonably necessary with Google Cloud and Firebase (hosting, authentication, database, logs and security); contracted AI model providers acting under Olurai’s instructions for requested summaries, matching explanations and drafts; Stripe (subscriptions and affiliate payouts); Microsoft (connected Microsoft 365/Outlook); Nylas and relevant domain/mailbox providers (managed inboxes); your connected email provider; professional advisers and authorities where legally necessary; and a successor if Olurai is reorganised or sold subject to safeguards.

We do not sell account-holder personal information or permit sponsor-contact data to be used for unrelated consumer advertising.

6. Google and YouTube account data

Connecting YouTube is optional. Olurai requests access only after you select Connect YouTube and approve Google’s consent screen. The requested access is read-only. Olurai cannot upload, edit or delete your YouTube videos, comments, playlists or channel.

Data accessed and stored:

  • your primary Google Account email address;
  • YouTube channel ID, channel name, handle and thumbnail;
  • channel totals provided by YouTube, including subscriber, video and lifetime-view counts; and
  • read-only YouTube Analytics for the period requested in the app, including daily views, estimated minutes watched, likes, comments, subscribers gained and subscribers lost. The default view is the most recent completed 28-day period.

How it is used: to connect the correct channel, populate/update your creator profile, show analytics to you, calculate creator pricing guidance, improve sponsor matching and prepare personalised sponsor-outreach features you request. If limited profile or performance information is processed by our contracted AI provider, it is used only to provide that requested Olurai feature and not to train a general-purpose model.

Storage and sharing: Google authorisation tokens are encrypted on Olurai’s server-side systems and never returned to the browser after connection. Channel metadata and analytics are limited to the authorising account and service providers required to operate Olurai. We do not sell Google or YouTube data, use it for advertising, build advertising profiles from it, or allow it to train general-purpose or non-personalised AI/ML models.

Olurai’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements, and the YouTube API Services Developer Policies.

Control and deletion: disconnect YouTube in Olurai Settings, delete your Olurai account, or remove access through Google Account permissions. Disconnecting/deleting removes active YouTube connection data and makes the stored token unusable. We complete deletion from active systems as soon as possible and no later than seven calendar days after a valid request. Secure backups are isolated from ordinary processing and expire on a controlled schedule. Removing data from Olurai does not delete your YouTube channel or content from YouTube.

7. International transfers

Providers may process information outside the United Kingdom, including in the United States. Where required, we use UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful safeguard.

8. Retention

  • Account, profile, integration and campaign data is kept while the account is active and then deleted or anonymised when no longer reasonably needed to close the account, resolve disputes or meet legal duties.
  • Connected credentials are removed or made unusable when disconnected or the account is deleted, subject to secure backup expiry.
  • Billing, invoice, commission and tax records may be kept for up to six years where needed for UK accounting, tax or legal obligations.
  • Security/operational logs are kept for a limited period appropriate to detecting abuse and investigating incidents.
  • Professional sponsor data is reviewed while relevant. Suppression data may be kept longer so opt-outs remain honoured.
  • Creator-prospect contact and research data is deleted or anonymised within 12 months if no account, affiliate or other relationship begins, subject to any shorter required period. A minimal hashed suppression record may be retained longer.

9. Your rights

Depending on location and circumstances, you may have rights to access, correct, erase, restrict or receive personal information; object to legitimate-interest processing; withdraw consent; and complain to a regulator. Email hello@olurai.io. UK users may complain to the Information Commissioner’s Office.

10. Security

We use access controls, encryption in transit, restricted service identities, secret management, logging and provider safeguards. No internet service is completely secure; use a strong unique password and promptly report suspected misuse.

11. Browser storage and cookies

Olurai uses cookies or browser storage necessary for sign-in, security, referral attribution, preferences, previews and service operation. If non-essential analytics or advertising technology requiring consent is introduced, the required choice will be presented first.

12. Children

Olurai is for people aged 18 and over. We do not knowingly offer accounts to children or include known/suspected minors in creator-prospect outreach.

13. Changes and contact

We update this notice when processing changes and will bring material new uses to affected users’ attention where required. Contact hello@olurai.io or review the Terms of Service.