Privacy Policy

We use the information we collect to:

• Provide, operate, and maintain the Service
• Execute actions you request (send emails, publish posts, sync calendars, transcribe audio) using your connected accounts
• Authenticate you and keep your account secure
• Communicate with you about your account, updates, and support
• Monitor usage against plan limits and enforce them
• Improve and develop new features based on aggregate, anonymized usage patterns
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your email content, contact lists, or documents to train AI models without your explicit consent.

The Service integrates with third-party platforms. When you connect them, their own privacy policies also apply:

• Supabase — database, authentication, and file storage
• Anthropic (Claude) — AI responses and content generation. Prompts you send are processed by Anthropic subject to their usage policies.
• Google — Gmail sending and Google Calendar sync
• X (Twitter), LinkedIn, Instagram, TikTok, YouTube — social media publishing

We only request the permissions these services require to perform the actions you explicitly instruct.

We share your information only in the following circumstances:

• Service providers — vendors who help us operate the Service (e.g. Supabase, payment processors) under confidentiality obligations
• Business transfers — if AISquads LLC is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
• Legal requirements — when required by law, court order, or to protect our legal rights or the safety of others
• With your consent — for any other purpose with your explicit permission

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or compliance purposes.

We use industry-standard security measures including encryption in transit (TLS) and at rest. OAuth tokens are stored encrypted. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but we take reasonable steps to protect your information.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — request deletion of your personal information, subject to certain exceptions
• Right to Opt Out of Sale — we do not sell personal information
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights

To exercise your rights, contact us at support@onekit.co. We will respond within 45 days.

The Service is operated from the United States. If you access it from outside the US, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the app at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: