Privacy Policy — Onsonara

We design our products to collect as little personal data as we can get away with — and to be honest about what we do collect, why, and for how long.

1. Who we are

Onsonara Software Sp. z o.o. (“Onsonara”, “we”, “us”) is a company registered in Poland, with its seat at ul. Mariacka 24/3, 40-014 Katowice. We are the data controller for the personal data described in this policy. You can reach us at hello@onsonara.com.

2. What we collect

2.1 When you buy a product

Your email address (required to deliver the license).
Your name and billing address, when required by tax law in your region.
A reference to the payment processor's transaction (we never see or store your full card number).

2.2 When you use our software

Anonymous usage metadata: app version, OS family, and whether features were used. No keystroke content is ever transmitted off your device.
If you opt into end-to-end encrypted sync, an encrypted blob containing your aggregated metrics. We cannot decrypt it.

2.3 When you contact us

The content of your message and any information you choose to include.

3. Why we collect it

To deliver the products you bought (contractual basis, GDPR Art. 6(1)(b)).
To comply with our legal obligations, including tax and accounting (legal obligation, GDPR Art. 6(1)(c)).
To improve the products in aggregate, using anonymous telemetry (legitimate interest, GDPR Art. 6(1)(f)). You can disable telemetry at any time.
To respond to your support requests (legitimate interest).

4. Who we share it with

We share the minimum necessary with a small number of vendors:

Payment processor — to process payments, calculate sales tax, issue refunds and invoices.
Email provider — to deliver licenses, receipts and account notifications.
Hosting provider — to operate our website and optional sync service (EU region).

We do not sell your personal data. We do not share it with advertisers. We do not use it to train machine learning models.

5. How long we keep it

Order records: 5 years after the transaction (Polish tax law).
License records: as long as the license is active, plus 12 months.
Support correspondence: 24 months from the last reply.
Anonymous telemetry: 13 months, then deleted.

6. Your rights

Under GDPR (if you are in the EEA/UK) and similar laws elsewhere, you can ask us to:

Confirm what data we hold about you.
Correct inaccurate data.
Delete your data, where we are not legally required to keep it.
Export your data in a portable format.
Object to processing based on legitimate interest.

Email hello@onsonara.com. We aim to respond within 14 days. You also have the right to lodge a complaint with your local data protection authority (in Poland, that is UODO).

7. International transfers

Our primary infrastructure is in the EU (Frankfurt). Some of our vendors are located in the US or UK. Where data leaves the EEA, we rely on Standard Contractual Clauses and equivalent safeguards.

8. Children

Our products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to this policy

If we change this policy in a meaningful way, we will email registered customers and post a notice on our website at least 30 days before the change takes effect.

10. Contact

Questions, complaints, or requests:
Onsonara Software Sp. z o.o.
ul. Mariacka 24/3, 40-014 Katowice, Poland
Email: hello@onsonara.com