Close

Privacy Policy

OliveBox - Invoicing software, e-mail marketing, booking and appointment solution.

Effective Date: 13 October 2025
Last Updated: 13 October 2025

1. Introduction

Welcome to OliveBox, a scheduling and business management platform for salons, wellness centers, and service providers, operated by Mobi Mouse d.o.o., Stojana Protica 39, 11000 Belgrade, Serbia (“we”, “us”, or “our”).

We value your privacy and are committed to protecting the personal data of our users and their clients. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

By using OliveBox.net or the OliveBox Mobile applications for Android and iOS (collectively “the Service”), you agree to the terms of this Privacy Policy.

2. Who we are

Controller:
Mobi Mouse d.o.o.
Stojana Protica 39, 11000 Belgrade, Serbia
PIB: 104122416
Email: support@olivebox.net
Website: www.olivebox.net

Mobi Mouse d.o.o. is responsible for processing your personal data in accordance with this Privacy Policy and applicable Serbian and EU data protection laws (including the General Data Protection Regulation – GDPR).

3. Data we collect

We collect and process the following categories of data:

3.1. User (business) data

  • Company name
  • Contact person’s name and surname
  • Email address
  • Mobile phone number
  • Business address
  • Appointment history and related business data

3.2. End-client data (collected by users)

Our business users may collect limited information about their clients (e.g., salon customers), such as:

  • Client name and surname
  • Email address
  • Phone number
  • Appointment records

Business users are solely responsible for ensuring that their clients are informed about such data processing and that it complies with applicable laws.

4. Purpose and legal basis for processing

We process data for the following purposes:
 

Purpose Legal basis
To register and manage business user accounts Performance of contract
To provide and maintain the OliveBox services Performance of contract
To communicate with users and provide support Legitimate interest / Contract
To manage billing, subscriptions, and trial periods Performance of contract
To secure, maintain, and improve our Service Legitimate interest
To comply with legal obligations (e.g., tax, accounting) Legal obligation

We do not use collected data for marketing, profiling, or advertising, and we do not share any user or client data with third parties for commercial purposes.

5. Data storage and security

All data is stored securely on servers hosted by Amazon Web Services (AWS) in Ireland (EU). We apply technical and organizational measures, including encryption, access control, and monitoring, to protect your data against unauthorized access, loss, or alteration.

We retain personal data only for as long as necessary to fulfill the purposes above, unless a longer retention period is required by law (e.g., accounting records).

6. Data sharing and third parties

We do not share, sell, or rent any personal data with third parties.

Limited access to personal data may occur only in the following cases:

  • Service providers (e.g., AWS cloud hosting, SMS gateway) who act as data processors under our instructions and are bound by confidentiality and data protection obligations.
  • Legal obligations, if we are required by law, regulation, or court order to disclose data.

We never transfer personal data outside the European Economic Area (EEA).

7. Cookies and analytics

Our website and applications use only essential cookies and technical logs required for proper functionality. We do not use analytics, advertising, or tracking cookies.

8. Your rights

Under the GDPR and Serbian data protection law, you have the following rights:

  • Right to access your data
  • Right to rectification (correction)
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Serbia)

To exercise your rights, contact us at support@olivebox.net.

9. Data of minors

The Service is intended only for business users aged 18 or older. We do not knowingly collect or process data from minors.

10. Data retention

We keep personal data:

  • For as long as your account is active
  • For 12 months after account deletion, unless otherwise required by law
  • Certain accounting records may be retained up to 10 years as required by Serbian legislation.

After retention periods expire, data is securely deleted or anonymized.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available at www.olivebox.net/privacy-policy/. If changes are significant, we will notify users via email or in-app notification.

12. Contact

For any questions, requests, or concerns regarding this Privacy Policy, please contact:

Mobi Mouse d.o.o.
Stojana Protica 39
11000 Belgrade, Serbia
Email: support@olivebox.net
Website: www.olivebox.net

Open a OliveBox account in 20 seconds
* no credit card required