Last updated:
Scope
This policy covers the Ondit directory at ondit.ai and the Ondit app at app.ondit.ai. It does not cover third-party services you connect to Ondit; their own policies apply to them.
What we collect
- Account information: your name, email address and, if you sign in with Google or GitHub, the identifier that service gives us.
- Workspace content: brand facts, prompts, files, generated pages and settings you create or upload.
- Data from connected accounts: only what the permissions you approve allow, and only when a feature you use needs it — for example the emails a Gmail task reads or the files a Drive task opens.
- Directory submissions: the product details you submit and the email address we use to tell you when a listing is live.
- Payment records: your plan, invoices and payment status. Card details are handled by our payment provider and never reach Ondit.
- Technical data: server logs, IP addresses, browser type, and the cookies described below.
How we use it
- To run the service: sign you in, store your work and carry out the tasks you or your automations request.
- To send transactional email such as address confirmation, password resets and billing notices.
- To bill for paid plans and keep financial records the law requires.
- To keep Ondit secure, prevent abuse and fix problems.
We do not sell personal data, we do not show advertising, and we do not use your content or data from your connected accounts to train AI models.
Connected accounts
When you connect an account, the access token the provider issues is stored encrypted and used only to perform actions you request within the permissions you granted. Disconnecting an account in Ondit deletes the stored token; you can also revoke Ondit's access from the provider's own security settings.
Ondit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information from other providers, including Microsoft, TikTok and LinkedIn, is used only to provide the features you use and is not shared for any other purpose.
AI processing
To answer a question or complete a task, Ondit sends the relevant prompt and content to AI model providers through our model gateway. They process it to return a result and do not receive your account details.
Who else handles data
- Alibaba Cloud, which hosts the service and stores uploaded files.
- Brevo, which delivers transactional email.
- Our payment provider, which processes payments.
- AI model providers, reached through our model gateway, as described above.
- Sign-in and integration providers you choose to use, such as Google, GitHub and Microsoft.
Cookies
We use a session cookie to keep you signed in and store your language and theme preferences. We do not use advertising or cross-site tracking cookies.
Retention and deletion
We keep your data while your account is active. When you ask us to delete your account, we delete its personal data within 30 days, except records we must keep by law, such as invoices. Backups roll over and are removed on their normal cycle.
Your choices and rights
You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing support@ondit.ai. We answer within 30 days. You may also complain to the data protection authority where you live.
Security
Data travels over HTTPS, stored credentials are encrypted, and access inside Ondit is limited to people who need it to run the service. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Children
Ondit is a business tool and is not meant for anyone under 16.
International transfers
Our servers and providers may be in countries other than yours. Where the law requires it, we rely on appropriate safeguards for those transfers.
Changes and contact
We will update the date above when this policy changes and email account holders about material changes. Questions: support@ondit.ai.