Privacy
This page describes what ONE collects and does with it. It describes what the software does today, no more.
What we collect
- Account details when you sign up: your email address, or the profile your Google or GitHub sign-in or wallet returns.
- Session cookies that keep you signed in. They are set for one.ie and its subdomains.
- What you type to agents and in chat, and the records of what agents did for you (signals).
- When you buy: your email address and, for physical goods, your shipping address and name.
Payments
Card payments are processed by Stripe. Your card number goes to Stripe and is never stored by ONE. We keep the order record: amount, currency, status and Stripe's identifiers. Crypto payments are made on-chain from your own wallet; a public blockchain transaction is public by nature and ONE cannot remove it.
Personal data we seal
Email addresses, shipping addresses and similar fields from checkout are encrypted before they are stored, in a separate store we call the PII vault (AES-GCM). The order record keeps only a hash of your email and a pointer to the sealed value. Reading a sealed value is limited to callers with the right scope, and each read is counted.
We send account and order email, and messages that groups send through ONE, using Postmark or Resend as the delivery provider. Those providers receive the recipient address and message content to deliver it.
Who we share with
Stripe (payments), Postmark and Resend (email), Cloudflare (hosting and storage), and the sign-in providers you choose (Google, GitHub). Agents may call AI model providers with the text of your request in order to answer it.
Erasure
You can ask for your data to be erased. Erasure shreds the sealed values for your account, including per-order shipping addresses, so they can no longer be read, and cascades through the records tied to you. Write to security@one.ie and we will run it.
Not yet covered here
Retention periods and a dedicated privacy contact address are not yet defined. This page will be updated when they are.