Onsuite Technologies (“OnSuite”, “we”, “our”, or “us”) provides the OnSuite platform: a company app store, sign-in, and access controls for the apps your organisation runs on it, including their web and mobile versions (together, the “Services”), and this website. This policy explains how we handle personal information across the Services.
When your organisation uses OnSuite, it decides who has access and what information goes into its workspace. For that workspace content we process information on your organisation's behalf, and questions about it may be best directed to your workspace administrator.
1. Information we collect
Account and profile
Your name, email address, and profile picture, plus your phone number if you sign in with a one-time code sent over WhatsApp. If you sign in with Google, we receive your name, email address, and profile picture from Google.
Workspace and membership
The workspaces you belong to, your role, invitations you send or accept, the apps installed for your workspace, and your settings and preferences.
Content in apps
Records, files, and documents that you or your colleagues create or upload in apps running on OnSuite.
Location, only when an app needs it
Some apps, such as time-tracking apps, ask for your device's location to confirm where an action happened, for example clocking in on site. Location is read only at that moment and only while the app is open. We never track your location in the background, and you can deny the permission in your device settings.
Access tokens and connections
Personal access tokens you create, and connections your workspace sets up with other organisations, along with the permissions granted to them.
Early-access requests
If you use the early-access form on this website, we receive your name, email address, company, and what you tell us you are looking for.
Technical and usage data
IP address, device and browser type, pages and features used, and timestamps. We use this to run, secure, and troubleshoot the Services. This website does not use advertising trackers.
2. How we use information
- Provide and operate the Services, including sign-in across the apps your workspace uses
- Enforce the access rules your organisation sets for each app
- Send service messages such as invitations, sign-in codes, and account notices
- Reply to early-access requests and support questions
- Keep the Services secure, prevent abuse, and fix problems
- Improve the Services
- Meet legal obligations
We do not sell personal information, and we do not use it for third-party advertising.
3. How we share information
- Within your organisation: administrators and colleagues in your workspace can see your profile and the app content your role allows.
- Connected organisations: when your workspace connects with another organisation, only the information covered by the permissions your workspace grants is shared.
- Service providers: Supabase (database, sign-in, and file storage), Vercel (website and web app hosting), DigitalOcean (server infrastructure), Resend (email delivery), and Meta (WhatsApp sign-in codes). If an app uses AI features, the content you submit to them is sent to the AI model provider used by that app. Providers process information only to deliver their service to us.
- Legal reasons: when required by law, or to protect the rights, property, or safety of our users or others.
- Business transfers: as part of a merger, acquisition, or sale of assets, with this policy continuing to apply.
This website loads fonts from Google Fonts, which means your browser shares your IP address with Google when a page loads.
4. Retention and account deletion
We keep account information while your account is active. You can delete your account at any time from your profile in the app. Deleting it removes your personal profile information, signs you out everywhere, and ends your access to every workspace. Workspaces that only you belong to are deleted with it. If you own a workspace that still has other members, transfer ownership or remove them first.
Records you created inside a shared workspace belong to that organisation and may remain there, no longer linked to your identity. Early-access requests are kept only as long as we need them to follow up. You can also ask us to delete your information by writing to privacy@onsuite.in.
5. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct information that is inaccurate
- Delete your account and personal information
- Object to or restrict certain processing
- Receive a copy of your information in a portable format
To use these rights, contact us at privacy@onsuite.in. If your request concerns content your organisation controls, we may refer you to your workspace administrator.
6. Security
We protect information with encryption in transit, encrypted storage at our infrastructure providers, access controls, and permission checks on every request. No system is completely secure, so please use a strong password and keep your sign-in details private. More about how we approach this is on our Security page.
7. International transfers
Our service providers may process information in countries other than yours. When that happens, we rely on the safeguards those providers offer for international transfers.
8. Children
The Services are meant for work and are not directed to children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to this policy
We may update this policy. When we make material changes, we will post the new version here and update the date at the top.
10. Contact us
Questions about this policy or your information: privacy@onsuite.in.