Privacy

onc9.com uses PostHog for product analytics. PostHog records page views and anonymous interaction events (button clicks, form submissions) to help us understand which content is useful. PostHog is configured to anonymize IP addresses and is served through a reverse proxy on our domain.

We do not run third-party advertising trackers, social pixels, or session replay tools that capture form input. We do not sell or share visitor data with any party.

If you contact us by email or WhatsApp, we use the information you provide only to respond to your inquiry. WhatsApp is a third-party messaging service with its own privacy policy.

The ONC9 Workspace is open only to people a company has invited. You sign in at login.onc9.com with Google, Microsoft, your company's single sign-on, a passkey, or a link sent to your email address. Signing in never creates an account. It only matches you to the invitation your company sent.

When you sign in with Google or Microsoft, we ask only for your basic profile: your name, your email address, whether the provider has verified that address, and your profile picture if the provider sends one. We do not ask for access to your email, files, calendar or contacts.

We use this information to confirm who you are, to keep you signed in, and to record your actions in your company's audit log. For security, we also record the time of each sign-in and the IP address and browser it came from. We do not sell this information, share it for advertising, or use it to train AI models.

ONC9's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

The data a company puts into its workspace belongs to that company. ONC9 processes it only to run the workspace, as the company's agreement with ONC9 defines. Each workspace keeps its data in its own database.

We host the Workspace on Cloudflare, store its data with Neon, and send sign-in emails through Resend. Each of these providers processes data only on our instructions.

Within client engagements, ONC9 processes data only for the purposes defined in the engagement scope. Production systems are deployed into your cloud or ours, as the agreement sets out. Data residency, encryption at rest and in transit, and access controls are documented for each engagement.

We do not use client data to train general-purpose models. Where we use third-party AI model providers, we choose providers whose contracts forbid training on customer data (OpenAI Enterprise, Anthropic, Mistral EU). The provider can be chosen per region and per workload.

NDAs are signed before any client data is shared.

When your company removes you from its workspace, you can no longer sign in. We delete your sign-in details on request, or when the company's agreement with ONC9 ends.

We delete client data from our systems when an engagement closes, on the schedule the agreement sets, or on request.

For data requests, deletion, or any privacy question, contact andres@onc9.com. We respond within five business days.

ONC9 LLC is a Wyoming limited liability company. Registered office: 30 N Gould St, Ste N, Sheridan, WY 82801, USA.