Privacy Policy

Introduction

OneClick Onboard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service.

Information We Collect

We collect information you provide directly to us:

• Account information: name, email, company, role
• Payment information: processed securely through Stripe
• Profile and account settings you configure
• Communication preferences and support inquiries
• OAuth tokens and credentials (encrypted at rest)

OAuth Tokens and Third-Party Access

OneClick Onboard uses OAuth 2.0 to securely obtain access to your client accounts:

• OAuth tokens are encrypted using AES-256 encryption
• Tokens are stored securely in our database
• We never see or store your account passwords
• You can revoke access at any time through your account settings
• We only request permissions necessary for the specific integrations you enable

How We Use Your Information

We use the information we collect to:

• Provide and improve our service
• Process payments and send billing information
• Send service updates and security notifications
• Respond to your support requests and questions
• Monitor for fraud and maintain security
• Comply with legal obligations
• Analyze usage patterns to improve our product

Cookies and Tracking

We use cookies to enhance your experience:

• Session cookies: Required to maintain your logged-in state
• Authentication cookies: Used for OAuth state management
• Analytics cookies: To understand how you use our service
• Preference cookies: To remember your settings

You can control cookie settings through your browser preferences, though some cookies are necessary for the service to function.

Third-Party Services

We use third-party services that may collect information:

• Stripe: Payment processing (see Stripe's privacy policy)
• Supabase: Database and authentication hosting
• Vercel: Website hosting and deployment
• Google Analytics: Usage analytics
• Meta, Google, TikTok APIs: Only when you authorize integration

Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we delete personal data within 30 days, except where required to retain for legal compliance. Encrypted OAuth tokens are securely deleted upon account deletion.

Your Privacy Rights

Depending on your location, you may have rights including:

• Right to access: Request a copy of your data
• Right to rectification: Correct inaccurate information
• Right to erasure: Request deletion of your data
• Right to data portability: Receive your data in a portable format
• Right to restrict processing: Limit how we use your data
• Right to object: Opt out of certain data processing

GDPR and CCPA Compliance

GDPR (EU Users): We process data based on your consent and legitimate business interests. You have rights to access, correct, and delete your data. Contact us to exercise these rights.

CCPA (California Residents): You have the right to know, delete, and opt out of the sale of your personal information. We do not sell personal information but share data with service providers. Email us to submit requests.

Security

We implement industry-standard security measures including AES-256 encryption for sensitive data, HTTPS/TLS for data in transit, secure OAuth 2.0 flows, and regular security audits. However, no method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy

OneClick Onboard is not intended for users under 18 years old. We do not knowingly collect information from children under 18. If we discover we have collected information from a child under 18, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the "Last updated" date and, for material changes, by sending you a notification. Your continued use of the service constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: