Privacy policy

This policy explains what personal data Onfre ("we", "us") collects, why, and what choices you have. It covers our website at onfre.com and the Onfre service. There are two groups of people this applies to: our customers (the businesses that use Onfre) and their end customers (the people who message those businesses).

1. Data we collect from our customers

• Account details: name, work email, company name, password (stored hashed) and billing details.
• Workspace content: the documents, help-center pages, product data and past tickets you connect so Onfre can learn your business.
• Usage data: how you use the dashboard, such as features opened and settings changed, used to improve the product.

2. Data we process for our customers

When an end customer messages a business that uses Onfre, we process the conversation, their contact details on that channel (for example a phone number on WhatsApp) and any order or account data the business connects. We do this only on the business's instructions, as a data processor. The business is responsible for telling its customers how their data is used.

3. How we use data

• To provide the service: answering messages, taking actions and handing conversations over.
• To train and improve each customer's own agent. Workspace content and conversations are never used to train a model shared with other customers.
• To bill, secure and support your account.
• To send product and service emails. You can opt out of marketing emails at any time.

4. AI model providers

Onfre uses third-party large language model providers to generate replies. Data sent to these providers is used only to produce a response for your workspace, under agreements that prohibit them from training on it.

5. Sharing

We share data only with service providers that help us run Onfre (hosting, AI models, payments, email), with the integrations you choose to connect, or when the law requires it. We do not sell personal data.

6. Retention

Conversation data is kept for as long as your workspace is active, or for a shorter period you set. When you close your workspace, we delete your workspace content and conversations within 30 days, except where we must keep records for legal or billing reasons.

7. Security

Data is encrypted in transit and at rest. Access to customer data is limited to staff who need it to provide support, and every access is logged. Personal details such as card and ID numbers are redacted from logs and analytics.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to certain uses. End customers should contact the business they messaged first; we will help that business respond. To make a request, email hello@onfre.com.

9. Cookies

Our website uses essential cookies to keep you signed in and, with your consent, analytics cookies to understand how the site is used. You can change your choice at any time.

10. Changes

If we make material changes to this policy, we will notify customers by email at least 14 days before they take effect.

11. Contact

Questions about privacy can be sent to hello@onfre.com.