Privacy policy

1. Operator and the parties’ roles

Service operator: [full legal entity name, registration details, address and jurisdiction — to be completed after the owner’s decision]. Data enquiries: hello@onoichat.com.

Each company determines why it communicates with its customers and is responsible for lawful collection and use of their data. ONOICHAT’s role in processing on the company’s instructions, applicable law and processing terms must be agreed by contract before real data is processed.

2. Data used

For enquiries: the name, company, contact details and message you choose to send. For the workspace: company details, director and staff accounts, access settings and channel settings.

For customer work: customer identifiers and profiles, display names, available contacts, conversations, messages, attachments and delivery information provided by the channel. Technical logs and audit records are also used to operate and protect the service. Avoid unnecessary or sensitive information.

3. Purposes and legal grounds

Purposes include responding to enquiries, providing a company workspace, delivering messages, managing access, investigating errors and protecting data. Specific legal grounds, customer notice obligations and international transfer terms must be established for the selected countries in the final policy and contract. This draft does not replace that assessment.

4. Access and external services

Companies manage staff access. Support content access is allowed on a company request for a limited time and is recorded in the audit log. Messages are processed by the respective messaging service under its own terms. Infrastructure processors and storage locations must be listed in the final policy.

The account owner can see all conversations in the native app. ONOICHAT visibility rules apply only within ONOICHAT. Telegram requires a work account with no personal chats and a checked selection of chats accessible to the bot.

5. Retention and protection

Data is used during the agreed service period and then deleted on a verified request, subject to applicable retention obligations. Exact retention periods for operational data, logs and backups are not yet approved; they must be agreed and disclosed before processing real data. Indefinite storage and instant removal of all backup copies are not promised.

Protection rules include company data separation, password hashing and encryption of channel secrets. No measure eliminates all risks; companies remain responsible for their devices and messaging account access.

6. Rights and deletion

Send access, correction and deletion enquiries to hello@onoichat.com. If you are a company’s customer, identify that company so the request can be coordinated with an authorised representative. We will verify authority, ask only for necessary clarification and explain the process.

A company can request deletion of all its data or a single customer’s profiles, conversations, messages and attachments. Deletion in ONOICHAT does not remove copies held by messaging services or conversation participants. See the Data deletion page for the process.

7. Public website and changes

The site uses no advertising trackers or third-party analytics scripts. Your theme choice is stored locally in your browser and is not sent with an enquiry. The site works without JavaScript. The contact form opens your email app, so your email provider also processes the sent message.

Draft date: 15 November 2026. Operator details, applicable law, retention periods and processing terms will be published after review. Material changes for active companies should be communicated using the method agreed in their contract.