Privacy Policy

Short version. We collect what we need to run Onnie. Customer Content is the customer’s; we do not read it for ads or sell it. We do not operate foundation models and we do not train models on Customer Content. Payments: Dodo Payments (merchant of record); we do not store full card numbers. Named partners: Sub-processors. Rights and deletion: legal@onnie.ai.

Effective date: October 7, 2026. Last updated: October 7, 2026.

1. Who we are

Heizen Tecnologia Ltda. operates Onnie at onnie.ai. CNPJ 47.624.793/0001-83. São Paulo, Brazil.

2. What this policy covers

This policy covers site visitors, account holders, and invited members. Third-party sites and connectors you enable have their own policies.

3. Two roles

We are the controller for account and billing data. We are a processor / service provider for Customer Content (chats, lists and rows, jobs, playbooks, files in Drive, automations, connector configuration, Data API data, custom agents, skills, and other workspace data).

4. What we collect

Given by you or your workspace. Name, email, auth identifiers, role, profile fields; email-based account authentication (we do not offer Sign in with Google for the Onnie account); Customer Content; support messages; billing contact. Card numbers stay with Dodo Payments.

Automatic. Feature usage (including AI usage and billing-relevant meters), IP address, browser, device, operating system, language, timestamps, logs and diagnostics.

Cookies. See the Cookies section.

Third parties. An inviter may supply your email. When a member connects a tool, we receive connector tokens and data under the granted scopes.

5. How we use it

We use this information to run Onnie (accounts, Chat, lists, jobs, playbooks, guest computer, automations, connectors, Data API); for security; for product improvement from aggregated and operational signals; for billing with Dodo Payments; for service communications; for optional product updates with opt-out; and for legal compliance.

For AI features we send needed context to model providers to produce Output. We do not train on Customer Content.

6. Legal bases

We process personal information under contract, legitimate interests, consent (for non-essential cookies or marketing when those exist), and legal obligation. We name LGPD and GDPR where they apply.

7. Who we share with

We do not sell personal data. We share with Dodo Payments; AI model providers; infrastructure providers; connectors the customer enables; when required for legal or safety reasons; and in a business transfer. Living names: Sub-processors.

8. AI features and content

Onnie, custom agents, jobs and playbooks (including a guest computer), and automations may process Customer Content to produce Output. Admins control what can flow in. Outputs may be stored in the workspace. Review Output before relying on it. Providers have their own terms.

9. Retention

We keep information while needed for the service, law, and disputes. An active workspace keeps Customer Content. After closure we delete or anonymize within a reasonable period, subject to legal hold.

10. Security

We use administrative, technical, and organizational measures. No method of transmission or storage is absolutely secure.

11. International transfers

Heizen is in Brazil. Processing may occur in other countries. We use contractual protections / Standard Contractual Clauses where applicable.

12. Rights

You may request access, correction, deletion, portability, objection or restriction, and withdrawal of consent. Email legal@onnie.ai. Requests about workspace Customer Content may need the workspace owner first.

13. Children

Onnie is not directed to children under 13. If we learn we collected personal information from a child under 13, we will delete it.

14. Cookies

Essential — authentication, session, load balancing, core function.

Preferences — theme and similar.

Analytics and marketing cookies are not in use on this cut. If we add them, we will update this policy (and add a banner or preference center if required). Browser controls remain available.

15. Changes

We may update this policy. We will post the update and, when required, give notice.

16. Contact

Heizen Tecnologia Ltda. CNPJ 47.624.793/0001-83 Av. Brig. Faria Lima 1811, Office 1119 São Paulo, SP, 01452001, Brazil

legal@onnie.ai

See also our Terms of Service.