Privacy Policy

Document version: 2026-07-08

At OLAhome, privacy is not a slogan. It is the reason these services exist. This policy explains what data we collect, why we use it, how long we keep it and what rights you have.

OLAhome does not sell, rent or transfer your data to third parties for commercial purposes. We do not use your data for advertising profiling or commercial tracking.

1. Data controller

The data controller for the OLAhome website and services is OLA NETWORKS S.R.L., registered with the Bucharest Trade Register under no. J2026016637007, unique registration code 54239598, with registered office at Bulevardul Theodor Pallady No. 3, Sector 3, Bucharest, 032251, Romania.

For questions regarding personal data, you can contact us at contact@olahome.eu.

2. What data we collect

We collect only the data required to operate the services, process payments, issue tax documents, secure the account, prevent abuse and maintain the infrastructure.

  • email address;
  • phone number and normalized phone number, used for security and SMS checks;
  • account password, stored as a hash and not in plain text;
  • 2FA status and technical data required for 2FA operation, if you enable this feature;
  • account type: personal or company account;
  • company details such as company name, country, tax identifier and contact person, if you choose a company account;
  • payment and billing data received through the payment processor or required for tax documents;
  • plans, activated services, subscription statuses, activation, cancellation or deletion dates;
  • technical data such as IP address, user-agent, security events, diagnostic logs and information required for service operation;
  • consents and confirmations given, including acceptance of terms, acknowledgement of the privacy policy and account deletion confirmation.

3. OLAcloud-specific data

For OLAcloud, OLAhome may process data required to create the cloud account, allocate storage, administer the plan, check service status, perform technical backups, restore data, maintain security and provide support.

Files in OLAcloud are protected by technical security and encryption measures where active and applicable. OLAhome does not use file content for marketing, profiling or sale to third parties.

Even where encryption and access-limiting measures are in place, OLAhome may technically operate the infrastructure that stores, synchronizes, backs up or restores data strictly to provide the service.

4. OLA Vault-specific data

OLA Vault is built on the idea that passwords stored by the user are protected by end-to-end encryption. OLAhome cannot see the passwords saved in Vault and cannot recover a forgotten master password.

OLAhome may process technical data required to create the instance, subdomain, service status, technical backups, monitoring, security and support.

5. OLAhome DNS, DNS Corporate and Internet Guard data

For DNS services, OLAhome may process technical data required for filtering, security, abuse limitation, rule enforcement, diagnosis and support.

This data may include, as applicable:

  • the active DNS profile or DNS name used;
  • the device IP or IPs associated with a DNS profile;
  • domains, SNIs or technical events required for filter enforcement;
  • active, modified or removed Internet Guard rules;
  • blocking, unblocking, limitation, security or limit-exceeded events;
  • information regarding generation and download of device configurations.

This data is not used for commercial profiling, advertising tracking or sale to third parties.

6. Business accounts, OLAcloud Multi-user and DPA

For company accounts, OLAhome may process data about the company, contact person, additional users in OLAcloud Multi-user, employees, collaborators, purchased plans, active services and technical data associated with service use.

For data required to administer the account, payments, billing, security, SMS checks, abuse prevention and contractual records, OLAhome acts as data controller.

For content, files, documents, additional users in OLAcloud Multi-user or other data entered by the company into Business services, the company determines the purposes and means of processing. In this area, the company is the data controller and OLAhome may act as processor for hosting, storage, backup, restoration, security and technical operation.

The Business data processing terms and data processing agreement are included in the “Business accounts, company data and DPA” section of the Terms and Conditions.

7. Purposes of processing

Data is used for:

  • creating and administering the OLAhome account;
  • verifying email, phone number and sensitive operations;
  • activating, administering, changing or cancelling services;
  • processing payments and issuing tax documents;
  • providing OLAcloud, OLA Vault, OLAhome DNS, DNS Corporate and Internet Guard;
  • account security, prevention of fraud, abuse and unauthorized access;
  • technical diagnosis, maintenance, backup, restoration and support;
  • compliance with legal obligations and defense of OLAhome rights;
  • keeping evidence of consents and minimal history of deleted accounts.

8. Legal bases

Depending on the situation, we process data based on contract performance, legal obligations, legitimate interest in security and service administration, your consent or the defense of OLAhome rights.

9. Third-party services and recipients

To operate the services, we may use third-party providers strictly as necessary. These may include payment processors, email services, SMS services, infrastructure providers, software services, open-source applications or other technical components.

Payments may be processed by external services such as Stripe. OLAhome does not have access to full card details.

Data may be disclosed to public authorities or other recipients only where there is a legal obligation, a valid request or a legitimate interest in defending rights.

10. How long we keep data

Data is kept only as long as necessary for the purposes for which it was collected, for service provision, security, tax or legal obligations, contractual records and defense of OLAhome rights.

Active account data is kept for the duration of the account and active services. Billing data may be kept according to the legal periods applicable to tax documents.

Technical logs and diagnostic data are kept temporarily, depending on the technical, security or abuse-prevention purpose.

After account deletion, OLAhome may keep a minimal history for contractual records, security, abuse prevention, evidence of consent and defense of rights. This history may include email, phone number, account type, language, creation date, deletion date, deletion reason, accepted consents and information about previously held services.

Deleted account history does not keep the password, password hash, 2FA secrets, SMS codes or SMS message content. The standard retention period for minimal deleted account history is up to 5 years, unless the law requires or allows a different period.

11. Security

OLAhome uses technical and organizational measures to protect data, including access control, logical service separation, passwords stored as hashes, SMS confirmations for sensitive operations, backup mechanisms, monitoring, abuse limitation and encryption where available and applicable.

No method of electronic transmission or storage is perfectly secure. OLAhome makes reasonable efforts to secure the services, and the user is responsible for the security of their own devices, passwords and access methods.

12. Your rights

Under data protection law, you may request access to data, rectification, deletion, restriction of processing, data portability, objection to certain processing and withdrawal of consent where processing is based on consent.

Exercising certain rights may affect OLAhome's ability to provide the services. For example, deletion of data essential to the account may lead to account closure or make service continuation impossible.

For privacy requests, you can contact us at contact@olahome.eu.

You have the right to contact the competent data protection supervisory authority if you believe your rights have been infringed.

13. Cookies and tracking

OLAhome does not use cookies for behavioral advertising, commercial profiling or selling data. If the website uses elements strictly necessary for operation, they are used only for service operation, security or the user's session.

14. Changes to this policy

OLAhome may update this policy to reflect changes to services, law or technical practices. The updated version will be published on the website.

15. The OLAhome principle

If a service is free, you are the product. At OLAhome, you are the customer.