Privacy Policy

This policy describes what we collect, why, and your controls. Beta copy: it accurately describes what the software does, and it has not been reviewed by a lawyer. Have it reviewed before general availability.

What we collect

• Account info: email, name, and (optional) avatar.
• Waitlist: when you ask for access, your email address and, if you give them, your name, company and what you would use OneManage for, with the network address the request came from (to stop abuse). We use them only to decide on access and to email you about it. They are deleted when you delete your account; to have them removed sooner, email privacy@onemanage.io.
• Workspace content: documents, boards, sheets, and other artefacts you create.
• Usage telemetry: minimal logs to keep the service running (request paths, response codes, user/org ids). No third-party analytics during beta.
• Crash reports: when something throws in the app, we capture the error stack + page URL so we can fix it. Tied to your user id when logged in.

Leads collected through Engage

If you run adverts through Engage, people who respond to them submit their details — typically a name, a telephone number and an email address — to Meta, on a lead form you have published. Engage reads those submissions and stores them in your workspace so you can follow them up.

For this data, you are the controller and we are the processor. The relationship with the person who filled in that form is yours, not ours: they responded to your advert, about your business. Practically, that means:

• Your own privacy policy has to cover them. Meta requires a privacy policy URL on every lead form before it will serve one, and that policy is yours — this one describes our handling, not your relationship with your customers.
• Requests come to you first. If somebody asks you to erase their details, Engage → Leads → "Forget them" does it: the name, telephone number, email address and everything they typed into the form are erased permanently, and who did it and when is recorded.
• The commercial record survives that erasure, on purpose. Which advert produced the enquiry, what it was worth and the date it arrived are kept. With the person removed, that record identifies nobody — and deleting it would change figures your business has already counted.
• We do not delete leads on a schedule. They are your customer records and we hold them for as long as your workspace exists. Deleting the workspace deletes them with it.
• We never sell them, and never use them to train anything.

Children

OneManage is for people aged 18 and over. When an account is created we ask for a date of birth, check it, and keep only that it was answered and when — never the date. If someone under 18 tries to sign up, no account is made, and the address they gave is deleted from our records of the attempt. If you believe a child has an account, email privacy@onemanage.io and we will close it and delete what it holds.

Why

To operate the service, support you when something breaks, and improve OneManage. We don't sell or share your data with advertisers.

Your controls

• Export: Settings → Profile → "Export my data" produces a JSON dump of everything we hold for you.
• Delete: Settings → Profile → "Delete my account". Sessions revoke immediately; your data is retained for 30 days for recovery, then permanently purged.
• Notification preferences: Settings → Notifications lets you opt out per type (in-app and email).
• Your connected Facebook account: if you have connected Meta to run adverts, you can remove it from Facebook's own Apps and Websites settings. Doing so destroys the access token, the permissions you granted and the account name we held, and Facebook gives you a confirmation code and a link to check it. That covers your connection — it does not reach enquiries other people sent to a business, because those arrive with no Facebook identity attached to them. Those are erased by the business, above.

Sub-processors

We use the following infrastructure providers: cloud hosting and object storage (Amazon Web Services), email delivery (Amazon SES), and — where you have connected one — the advertising platform you asked us to connect to, at present Meta. We pick vendors that sign a DPA and align with GDPR and India's DPDP Act.

Contact

Questions or requests? privacy@onemanage.io. If you are asking about an enquiry you made to a business that advertises through OneManage, please contact that business: the details are theirs, and we hold them only on their behalf.