Privacy Policy

1. Who We Are

Onca (“Onca,” “we,” “us,” or “our”) is a product currently in development. For any privacy-related questions, contact us at support@useonca.com.

2. Information We Collect

2.1 Information You Provide

• Waitlist: Email address when you join our waitlist.
• Account registration: Name, email address, and profile picture (provided directly or via Google OAuth).
• Content: Text, images, videos, and other media you create or upload through the platform.
• Chat messages: Conversations you have with our AI agents within the platform.

2.2 Information from Third-Party Platforms

When you connect social media accounts (such as Facebook, Instagram, X, or Reddit), we receive OAuth access tokens and basic profile/page information required to publish content on your behalf. We store these tokens securely and use them solely for the platform features you authorize.

2.3 Automatically Collected Information

We may collect standard technical data such as IP address, browser type, device information, and usage analytics to improve the service.

3. How We Use Your Information

• To provide, maintain, and improve the Onca platform.
• To publish content to connected social media platforms on your behalf.
• To generate AI-powered content and recommendations within the platform.
• To communicate with you about the service, updates, and your waitlist status.
• To ensure security and prevent abuse.

4. Data Sharing

We do not sell your personal data. We share information only in these cases:

• Third-party platforms: Content and actions you explicitly choose to publish via connected social accounts.
• Service providers: We use Supabase for database hosting, authentication, and file storage. These providers process data on our behalf under strict confidentiality.
• Legal requirements: When required by law or to protect our rights.

5. Data Storage & Security

Your data is stored on Supabase infrastructure with row-level security policies ensuring that each user can only access their own data. Social media tokens are stored server-side and are never exposed to the browser. We use HTTPS for all data in transit.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data by emailing support@useonca.com with the subject line “Delete My Data.” We will process your request and permanently remove your account, content, and personal data within 30 days.
• Disconnect any linked social media accounts at any time.
• Withdraw consent for data processing where applicable.

To exercise these rights, contact us at support@useonca.com.

7. Children’s Privacy

Onca is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware that we have collected such data, we will delete it promptly.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending you an email. Continued use of the service after changes constitutes acceptance.

10. Contact

For questions about this privacy policy, contact us at support@useonca.com.