Privacy Policy

Account information. When you sign up we collect your name, email address, and a password (stored only as a secure hash), or your basic Google profile if you sign in with Google. You can optionally add a company name and timezone to your profile.

Project and onboarding content.Content you or your clients add to a project: project details, step responses, briefs, links, and uploaded files. Freelancers also provide their client’s name and email address to send an invitation.

Waitlist. If you join the waitlist on our website, we collect the email address you submit.

Technical data. Standard server logs (IP address, browser type, timestamps) and the cookies described below.

• To provide the Service: accounts, projects, file storage, and client invitations.
• To authenticate you and keep your session secure.
• To send transactional emails: client invitations, step reminders, and project completion notices.
• To send waitlist confirmations and occasional product updates (you can unsubscribe at any time).
• To protect the Service against abuse and to debug problems.

If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information only to create and authenticate your OneBoarding account. We do not request access to any other Google data, and we never sell it or use it for advertising.

OneBoarding’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We never sell your personal information. We share it only with the service providers that run our infrastructure, strictly to operate the Service:

• Supabase — database, authentication, and private file storage (hosted in Sydney, Australia).
• Vercel — web hosting.
• Google — optional sign-in with Google.
• Resend — transactional email delivery for the portal.
• Kit — waitlist and product update emails for the website.
• Cloudflare — DNS and network security.

We may also disclose information if required by law or to protect the rights, safety, or security of OneBoarding and its users.

The portal uses essential cookies only — they keep you signed in and secure your session. We do not use advertising or third-party tracking cookies.

We keep your information for as long as your account is active or as needed to provide the Service. You can request deletion of your account and its data at any time by emailing hello@oneboarding.app — we will delete it within a reasonable period, except where the law requires us to retain it. Waitlist subscribers can unsubscribe via the link in any email.

Data is encrypted in transit, uploaded files live in private storage buckets, and database access is restricted by row-level security so users can only reach their own projects. No system is perfectly secure, but we design the Service so that access is limited to what each user needs.

Subject to applicable law — including the Philippine Data Privacy Act of 2012 (RA 10173) — you have the right to access, correct, or delete your personal information, to object to or restrict its processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at hello@oneboarding.app.

The Service is not directed at children and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The “Last updated” date at the top reflects the current version.

Privacy questions or requests? Email us at hello@oneboarding.app.