Privacy

This page explains, in plain language, what data Onceproof handles and why.

What we collect

• Account: your name, work email, company name, a hash of your password (never the password itself), and an optional profile photo.
• Sign-in security: the IP address and browser of each session, and security events such as sign-ins and role changes.
• Your workspace's actions: the refunds and credits your agents ask for, the policy decisions, what Stripe reports back, and signed receipts. This is the service itself.
• Billing: handled by Stripe. We keep your Stripe customer id and subscription status; card details go to Stripe and never reach us.

What we do not collect

We do not see or store your Stripe secret keys: you connect Stripe through Stripe Connect and can revoke it at any time. We do not sell data, and advertising cookies load only if you accept them.

How we use it

To run the service, keep it secure, bill for it, send the emails you need (confirming your address, password resets, invites) and answer you when you write to us.

Who processes it for us

• Stripe for payments and subscriptions.
• Resend to send email.
• Render to host the service.
• Cloudflare for our domain.
• Google and Meta: analytics and ad measurement, only after you accept cookies.

Isolation and security

Each workspace can only see its own data. Sessions use HttpOnly cookies with CSRF protection, passwords are hashed with scrypt, and every state change to an action is recorded in a tamper-evident history.

Cookies

Always: the cookies needed to keep you signed in and to protect forms (op_session, op_csrf), and your theme and cookie choice, kept in your browser.

Only if you click Accept on the cookie banner: Google Analytics and Google Ads (to count visits and see which ads lead to sign-ups) and the Meta Pixel (the same for Facebook and Instagram ads). They receive the pages you visit and events such as signing up or starting a trial; never passwords, keys or payment details. Change your choice any time with Cookie settings in the footer.

How long we keep it

For as long as your account exists. Action records and receipts are evidence, so we keep them for the life of the workspace. Ask us to delete your account and we will, except where the law requires us to keep billing records.

Your choices

You can see and change your profile, sign out other sessions, and disconnect Stripe in the console. To get a copy of your data or delete it, email hello@onceproof.com.