Privacy Policy

Last Updated : November 2025

1. Introduction

This Privacy Policy explains how (“Onekly”, “We”, “Us”, or “Our”) collects, uses, stores, and protects personal data when You (“Client”, “User”, “You”) access or use the Onekly Services, including our CRM, B2B enrichment features, automation tools, AI agents, connectors, and all related functionalities (the “Services”).This Privacy Policy applies globally, including to individuals and organizations located in the European Union (EU), United Kingdom (UK), United States (US), Canada, and other regions where the Services are used.“Personal Data” or “Personal Information” means any information relating to an identified or identifiable individual, as defined under applicable privacy laws.By accessing or using the Services, You acknowledge that You have read and understood this Privacy Policy.

2. Data Controller & Contact Information

The Data Controller responsible for Your Personal Data is:
Onekly
Email: hello@onekly.com
Clients may contact Us to exercise any privacy rights or request information about this Policy.

3. Personal Data We Collect

3.1. Information You Provide to Us

We collect Personal Data that You voluntarily provide, including:
• Account information: name, email address, password, profile details.
• Billing information: payment method, billing address (handled securely by payment providers).
• CRM content: contacts, companies, notes, tags, fields, activities imported or created by You.
• Support interactions: messages, tickets, or communications sent to Onekly.

3.2. Information Collected Automatically

When You use the Services, We automatically collect:
• Device and browser type
• Usage logs and activity data
• Clickstream and interaction information
• Performance and diagnostic data

3.3. Information from Third Parties

We may receive data from:
• Public business sources
• Licensed data enrichment providers
• Integrations (e.g., Google, Outlook, CRMs)
• Identity or authentication services

4. How We Use Personal Data

We process Personal Data for the following purposes:
• To provide, operate, and maintain the Services
• To enrich Client Data, where requested
• To enable AI agents and automations
• To authenticate Users and secure access
• To process payments and manage subscriptions
• To send service-related communications
• To improve features, performance, and user experience
• To enforce our Terms and Acceptable Use Policy
• To comply with legal obligations

6. Cookies & Tracking Technologies

Onekly uses cookies and similar technologies to:
• Authenticate Users
• Track usage and performance
• Improve the interface and functions
• Analyze aggregated behavior
Where required by law (EU/UK), You will be shown a cookie consent banner to manage Your preferences.
A separate Cookie Policy may provide additional detail.

7. Sharing & Disclosure of Personal Data

We do not sell Personal Data.
We may share Personal Data with:

7.1. Sub-Processors

Third-party providers who support the Services, such as:
• Amazon Web Services (AWS Europe) — hosting and infrastructure
• Email delivery providers
• Analytics and monitoring services
• Data enrichment partners
• Payment processors

7.2. Integrations & Connectors

When You activate an integration, We may transmit the necessary data to the chosen application under Your instruction.

7.3. Legal & Regulatory Requirements

We may disclose Personal Data where required to comply with:
• Court orders
• Government or supervisory authorities
• Applicable laws

7.4. Business Transfers

In the event of a merger, acquisition, or asset transfer, Personal Data may be included in the transferred assets.

8. International Data Transfers

8.1. Data Hosting Location

All data is hosted exclusively in AWS Europe (EU), specifically in Ireland and/or Frankfurt.

8.2. Transfers Outside the EU/UK

Clients located outside the EU/UK acknowledge and consent to data being stored and processed in the EU.

8.3. GDPR Safeguards

Where data is transferred outside the EU/UK:
• Standard Contractual Clauses (SCCs)
• UK International Data Transfer Addendum
• Additional technical and organizational measures
may be implemented to ensure compliance.

8.4. Canadian Cross-Border Notice

Canadian Clients acknowledge that data stored abroad may be accessible to foreign authorities under lawful requests.

9. Data Retention

We retain Personal Data for as long as necessary to:
• operate the Services,
• comply with legal obligations,
• resolve disputes,
• enforce Our agreements.
Upon subscription termination:
• Client Data remains accessible for 30 days,
• after which it is securely deleted or anonymized, unless retention is legally required.

10. Security Measures

We implement industry-standard security measures, including:
• Encryption in transit (TLS) and at rest
• Access control and authentication
• Network monitoring and logging
• Data backups and redundancy
• Principle of least privilege for staff access
While We strive to protect Personal Data, no system is fully secure, and Onekly cannot guarantee absolute security.

11. Your Privacy Rights

11.1. EU/UK GDPR Rights

You may exercise the following rights:
• Access to Your data
• Rectification
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

11.2. U.S. Privacy Rights (CCPA/CPRA and others)

Depending on Your state of residence, You may have:
• Right to know what personal data is collected
• Right to access
• Right to deletion
• Right to correct inaccuracies
• Right to opt-out of “selling” or “sharing” data
• Right to non-discrimination
Onekly does not sell Personal Information.

11.3. Canada (PIPEDA) Rights

Canadian users may:
• Access their personal information
• Request corrections
• Receive explanation about how information is handled abroad

11.4. Exercising Your Rights

To exercise any privacy rights, contact:
hello@onekly.com
We will respond within the time required by applicable law (typically 30 days).

12. Children’s Privacy

The Services are not intended for minors.
We do not knowingly collect data from individuals under the minimum legal age (13 US/Canada, 16 EU/UK).

13. Email & Marketing Communications

Onekly complies with:
• EU/UK opt-in rules
• Canada CASL anti-spam rules
• US CAN-SPAM requirements
You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails.
Service notifications cannot always be disabled (e.g., billing alerts, critical updates).

14. Third-Party Websites & Integrations

The Services may contain links or integrations that lead to third-party websites or applications.
Onekly is not responsible for their privacy practices, content, or policies.
We encourage You to review their respective privacy policies before using their services.

15. Automated Decision-Making & AI Processing

Onekly uses AI-driven features to support automation and data enrichment.
You acknowledge that:
• AI outputs may be probabilistic or imperfect,
• No fully automated decisions with legal or significant effects are made about Users,
• You remain responsible for reviewing and validating any AI-generated content.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
If changes are material, We will provide reasonable notice through the Platform or by email.
Your continued use of the Services after changes are published constitutes acceptance of the updated Privacy Policy.