Privacy Policy.

This Privacy Policy explains how Cardona Strategy, Inc. (“Cardona,” “we,” “us”) handles personal information in ooLEO, including ooleo.app, the waitlist, the ooLEO platform, the LEO agent and our communications. It is also our notice at collection under the California Consumer Privacy Act, as amended (CCPA).

ooLEO is built for businesses. Most of the information we handle is business information, but some of it, such as a contact’s name and work email, is personal information, and we treat it that way.

When you join the waitlist

When accounts open

To run the platform, we will also collect information you choose to add, such as your company profile, team members, capability statements, past performance, certifications, documents, prompts to LEO and the outputs generated for you; usage data such as features used and settings; and billing details, which are handled by our payment processor. We will update this policy before we begin collecting any new category.

We do not collect sensitive personal information as the CCPA defines it.

• to run the waitlist, review applications for early access, verify eligibility and deliver the Early Access Offer;
• to build and match your opportunity feed to your business;
• to provide the platform and LEO’s features to you, including reports, drafts and tasks;
• to contact you about the waitlist, early access, your account and changes to our terms, and, if you opt in, to send product news;
• to secure, maintain, troubleshoot and improve the Services, using aggregated or de-identified data where we can;
• to comply with the law and enforce our Terms.

When you use LEO, your prompts and the content needed to complete the task, such as a solicitation or your capability statement, are processed by our systems and by the AI model providers we use as service providers. Those providers process it only to deliver the Services to us, under contracts that limit their use of it.

We share personal information only:

• with service providers that help us run ooLEO, such as hosting, email delivery, analytics we disclose in our Cookie Policy, AI model providers, customer support and payment processing, under contracts that limit their use of it;
• with team members and integrations you authorize in your account;
• when the law requires it, or to protect the rights and safety of our users, the public or Cardona;
• with a buyer or successor in a merger, acquisition, financing or sale of assets, subject to this policy;
• when you ask us to.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We keep waitlist information for up to one year from the date you join. If you open an ooLEO account during that time, we keep account information for as long as your account is open and as needed afterward to meet legal, tax and security obligations. You can ask us to delete your information sooner at any time. We may keep a minimal record when the law requires it, for example to honor an unsubscribe or deletion request.

• Marketing email. Use the unsubscribe link in any marketing email, or email us. You will still receive messages about your account, the waitlist and legal notices.
• Text messages and calls. We do not text or call you about ooLEO unless you give us your number and separately agree at that time.
• Cookies. See our Cookie Policy.

If you are a California resident, you have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• correct inaccurate personal information;
• delete your personal information;
• opt out of the sale or sharing of personal information (we do neither);
• limit the use of sensitive personal information (we do not collect it);
• not be treated differently for using these rights.

To make a request, email contact@cardonastrategy.com or write to us at the address below. We will confirm receipt within 10 business days and respond within 45 days, or tell you if we need up to 45 more. We verify requests by matching the email address you used with us. You may use an authorized agent with your signed permission.

We treat Global Privacy Control signals from your browser as a request to opt out of sale and sharing.

We use reasonable administrative, technical and physical safeguards, including encryption in transit and access controls, to protect information. No system is completely secure, so please tell us right away if you believe your account has been compromised. We store and process information in the United States.

ooLEO is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We will update this policy as ooLEO grows, change the “Last updated” date and, for material changes, notify you by email or in the app before they take effect.