Privacy Policy

1. Our commitments

1. We use your information only to provide and improve the Services.
2. We do not sell your information or use it for advertising.
3. We never use data from your Google account to train AI models.
4. Nothing is published to your accounts without your approval.
5. The credentials you connect are encrypted, and you can disconnect at any time.
6. You can ask for a copy of your information, or for its deletion, at any time.

2. Information we collect

2.1 Information you provide

When you create an account or contact us, you give us information such as your name, email address, and website. When you use the App, you also provide details about your business, such as its locations, services, and writing voice, and the content you create or upload.

2.2 Information from accounts you connect

You can connect accounts such as Google, WordPress, Wix, and GitHub so the App can read your performance data or publish for you. You choose what to connect, and we access only what the App needs. Section 3 describes what we receive from Google. Our payment processor collects your payment details and tells us the status of your subscription; we never see your full card number.

2.3 Information collected automatically

When you visit the Site, we collect information such as your IP address, browser and device type, the pages you view, and the site that referred you. When you use the App, our servers keep technical logs needed to operate and secure it.

2.4 Public web pages

To research a topic, the App reads public web pages using our crawler, OncaBot. It does not collect personal information. The OncaBot page explains how it works.

3. Google user data

3.1 What we access

If you connect Google, the App can read your Google Search Console data, such as how your pages perform in search, and, if you turn it on, your Google Business Profile locations and performance. Search Console access is read only. The only thing the App writes to your Google account is a Business Profile post that you have approved. If you sign in with Google, we receive your name and email address.

3.2 How we use and protect it

We use this data only to show you how your site and business are performing and to recommend and draft the content you ask for. It is stored encrypted. You can disconnect Google in the App, or from your Google account permissions, at any time.

3.3 Limited Use

Onça's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data, or anything derived from it, to develop, improve, or train generalized artificial intelligence or machine learning models. We do not sell it, use it for advertising, or allow people to read it, except with your permission, for security purposes, or where the law requires.

4. How we use your information

1. To provide the App, including reporting, recommendations, and drafted content.
2. To publish content you have approved to the accounts you have connected.
3. To manage your account and billing, and to send you messages about your account.
4. To secure the Services and prevent fraud and abuse.
5. To respond to your questions and requests.
6. To understand how the Services are used, and to improve and develop them.
7. To comply with our legal obligations.

The App uses an AI provider to help draft content. We send it only what a draft needs, such as your business details and the topic you chose, and only under terms that prohibit it from training its models on that information.

We do not sell or rent your personal information.

5. Cookies

The Site uses analytics cookies to understand which pages are useful. You can block or delete cookies in your browser settings, and the Site will still work. The App does not use cookies; it keeps your sign-in session in your browser's local storage.

6. Data sharing and disclosure

We share information only as needed to operate the Services or comply with the law. For the names of our current service providers, email support@oncahq.com.

6.1 Service providers

We use service providers that perform work on our behalf and are required to keep your information secure and confidential:

1. Hosting and security providers, which run and protect the Services.
2. An AI provider, which helps draft content.
3. A search-data provider, which supplies search results for research.
4. A payment processor, which handles billing.
5. Email delivery, which sends our emails.
6. Website analytics, on the Site only.

6.2 Accounts you connect

When you direct the App to publish content, we send it to the account you choose.

6.3 Legal requirements

We may disclose information when the law requires it, or to protect the rights and safety of others.

6.4 Business transfers

If Onça is involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor. We will notify you before it becomes subject to a different privacy policy.

7. Data retention

We keep your information only as long as necessary to provide the Services, meet our legal obligations, resolve disputes, and enforce our agreements. When it is no longer needed, we delete or anonymize it. If you ask us to delete your account, we will do so within 30 days, keeping only the limited records we need to prevent abuse and meet legal obligations.

8. Your rights and choices

Depending on where you live, including under the GDPR and California law, you may:

1. Request access to, or a copy of, the information we hold about you.
2. Request that we correct or delete it.
3. Object to or restrict certain processing, or withdraw your consent.
4. Opt out of marketing emails.
5. Complain to your local data protection authority.

You can disconnect any connected account at any time. To make a request, email support@oncahq.com with the subject “Privacy request”. We will not charge you or treat you differently for exercising your rights.

9. Data security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest and additional encryption for the credentials you connect. No online service is completely secure. If a breach affects your information, we will notify you as the law requires.

10. International data transfers

Onça is based in the United States, and the Services are operated from there. If you use the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Wherever your information is processed, we protect it as this policy describes.

11. Children's privacy

The Services are intended for businesses and are not directed at anyone under 16. We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date, and we will notify account holders of material changes by email or with a notice on the Site.

13. Contact us

Questions about this policy or your information can be sent to support@oncahq.com. See also our Terms of Service.