Privacy Policy

Who is responsible for your data

EDSDEV INC., Kanata, Ontario, Canada, operates OneClickWebsite and is responsible for the personal data described on this page. You can reach us at [email protected].

What we collect

• Your Google account’s name, email address, and profile photo, which Google shares with us when you sign in.
• The data you enter in your workspace.
• Your billing name, billing address, business tax ID, and payment details, which you enter in Stripe Checkout. We never receive your full card number.
• The email addresses of the people you invite to your workspace.
• The messages you send to support.
• Analytics events about how you use the site, only after you accept analytics.
• Server logs of the requests your browser makes, which include your IP address.

Why we collect it

We use this data to sign you in, to run your workspace, to answer your support requests, to keep the service secure, and, if you accept analytics, to understand how visitors use the site so that we can improve it.

Who processes it and where

• Google handles sign-in with your Google account.
• Hetzner hosts the application and its database on servers in Helsinki, Finland.
• Cloudflare delivers the website.
• Cloudflare stores encrypted backups of our database in the European Union, so that we can restore the service after a failure.
• Stripe processes payments, calculates sales tax, and stores your billing details and invoices.
• Mailgun delivers the team invite emails that we send for you, and it processes them on servers in the United States.
• Crisp runs the support chat.
• Google Analytics 4 measures how the site is used, only after you accept analytics.

Cookies and browser storage

• A session cookie keeps you signed in. It is necessary for the app to work.
• The oneclick_consent cookie, named __Host-oneclick_consent over HTTPS, records your analytics choice and nothing else. It is necessary, so that we can respect your choice on every page. Our website and our app each keep their own copy, which no other site can change, so each asks you once.
• Google Analytics cookies are set only after you choose “Accept”.
• Crisp sets its own cookies when the support chat loads.

Before you choose, the name of the AI assistant that referred you to us may be kept in your browser’s sessionStorage, which is cleared when you close the tab, and it is sent to Google Analytics only after you accept analytics. After you accept, our sign-up links also carry that name to our app, so Google Analytics can count sign-ups by the assistant that referred them.

How long we keep it

A signed-in session expires after 30 days of inactivity.

A team invite that nobody accepts expires after 7 days.

Database backups are kept for 14 days. Data that you delete stays in the backups until they expire, at most 14 days later.

Your rights

You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete it. To make a request, email [email protected].

Changes to this policy

When we change this policy, we update the date at the top of this page.