Privacy Policy for Onya

Onya is operated by Jason Charles Engelmann.

Contact: jasons147gta@gmail.com

2.1 Account Information

When you sign up for Onya, we collect basic account details such as your name and email address.

2.2 Gmail Data (via Google API Services)

If you choose to connect your Gmail account, Onya requests read-only access to your inbox using the following Google OAuth scopes:

• https://www.googleapis.com/auth/gmail.readonly — allows Onya to read, but not send, delete, or modify, messages in your Gmail inbox.
• https://www.googleapis.com/auth/userinfo.email and openid — used to verify your identity and associate your Gmail account with your Onya account.

We use this access solely to help your team identify important emails from clients or team members that appear to require a response. Onya may evaluate signals such as the sender, message content, urgency, requested actions, approval requests, and relevant client or work context. Examples include client questions, requests for approval, and urgent updates related to active work.

Emails identified as potentially requiring a response are flagged inside the Onya application so an authorised team member can follow up. Onya does not send, delete, archive, label, or otherwise modify messages in your Gmail account. We do not access, read, or process unrelated emails beyond what is technically necessary to scan and filter messages for this response-alert feature.

2.3 Usage Data

We may automatically collect limited technical information such as IP address, browser type, device information, and usage patterns within the Service for security and analytics purposes.

Onya's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Gmail data to provide the user-facing response-alert feature described above: identifying important client or team emails that appear to need a response and displaying those alerts inside Onya.
• We use read-only access and do not send, delete, archive, label, or otherwise modify Gmail messages.
• We do not use Gmail data for serving advertisements.
• We do not allow humans to read Gmail data unless: (a) we have your affirmative agreement for specific messages, (b) it is necessary for security purposes, such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the use is limited to internal operations and the data has been aggregated and anonymized.
• We do not transfer Gmail data to third parties except as necessary to provide or improve the Service, with the same data protection obligations; to comply with the law; as part of a merger or acquisition; or with your explicit consent.
• We do not sell Gmail data.

We use the information we collect to:

• Provide, operate, and maintain the Onya Service.
• Detect and surface important emails from clients or team members that appear to need a response, including questions, approval requests, and urgent work updates.
• Authenticate your identity and secure your account.
• Communicate with you about your account or the Service.
• Monitor and improve Service performance and reliability.
• Comply with legal obligations.

Gmail access tokens are stored using industry-standard encryption and are never exposed to unauthorized parties.

We implement reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

Access to Gmail data within our systems is restricted to what is necessary to provide the Service.

We retain your Gmail access token and associated data only for as long as your account remains connected to Gmail, or as needed to provide the Service. You may revoke access at any time as described in Section 7, after which we will delete stored tokens and cease accessing your Gmail account.

• Revoke Access: You can disconnect Onya's access to your Gmail account at any time through your Google Account security settings or within the Onya app settings.
• Access and Deletion: You may request access to, correction of, or deletion of your personal information by contacting us at jasons147gta@gmail.com.
• Data Portability: Where applicable under your local law, you may request a copy of your data in a portable format.

We do not sell your personal information. We may share information only:

• With service providers who help us operate Onya and are bound by confidentiality and data protection obligations.
• To comply with legal obligations, such as a subpoena or court order.
• To protect the rights, property, or safety of Onya, our users, or others.
• With your consent.

Onya is not directed to individuals under the age of 16, or the applicable age of digital consent in their jurisdiction, and we do not knowingly collect personal information from children.

If you access Onya from a country other than the countries where we or our service providers operate, your information may be transferred internationally and processed in those countries. By using the Service, you acknowledge these transfers, subject to applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above or through other reasonable means. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at: