Privacy Policy

Introduction

ChartDB, Inc., doing business as OneCLI, and its related entities (“OneCLI”, “we”, “our” or “us”) provide the website located at https://onecli.sh (the “Website”) and all of its subdomains, subpages and successor sites, as well as our software products, APIs, dashboards and applications through which our services are made available to you, whether via the Website or otherwise (collectively, the “Services”).

This Privacy Policy (“Policy”) is designed to help you understand how we collect, store, use and share your personal data. This Policy applies to both visitors of our Website and our Clients (entities or organizations that have purchased our Services, including their employees, contractors, and other individuals authorized to access or use the Services on their behalf) (each, a “Client”, and “you” refers to either, as applicable), whenever you visit our Website or otherwise access or use any of our Services. Please note that parts of this Policy may not be applicable to you, depending on the jurisdiction in which you reside and the applicable laws.

We strongly urge you to read this Policy and make sure that you fully understand and agree to it. If you do not agree to this Policy, please discontinue and avoid using our Services. Providing personal data to us is voluntary, you are not legally required to provide us with any personal data but without it we will not be able to provide you with the full range or with the best experience of using our Services. By using our Services, you acknowledge that you have reviewed this Policy and agree to be bound by its terms.

For any questions or concerns, please contact us via our email address: legal@onecli.sh.

This Policy describes the following:

• What types of personal data we collect
• Tracking technologies
• Why we process your personal data
• With whom we share your personal data
• Google API Services User Data Policy
• Marketing and advertising
• Your privacy rights
• Transfer of personal data
• How we protect your data
• Minors
• Retention
• Updates to this Policy
• Controlling version
• Contact us

1. What types of personal data do we collect?

We collect personal data about you, which refers to any information that could potentially identify you through reasonable means (such as email address). This section outlines how and when we collect and process personal data about you.

• Service and Account Information: if you decide to register an account with our Services, we may collect your email address, full name and the name of your company as well as any additional information you choose to share.
• Payment information: if you purchase our Services, we will collect the billing and payment information required to process your charges. This may include your postal address, email address, or payment information.
• Usage information: when you use our Services, we collect information about your interaction with our Services. Such information includes data pertaining to your activities on our Services, as well as information generated when you interact with our Website (for instance, pages visited, actions taken etc.).
• Identifiers and technical information: when you use our Services, we collect technical information such as IP address, device identifiers, information about your device and connection, including user agent, connection type, timestamp, network activity, network connection metadata, system language, device model, screen resolution and settings, battery level, available storage space, time zone, and operating system.
• Communication information: when you contact us via email or through the support channels available on our Website or through our Services, we collect your full name, email address, company, and any other information you choose to provide.

We do not knowingly collect, process or disclose any sensitive personal data, and we ask that you do not submit sensitive personal data to us through the Services.

2. Tracking technologies

When you visit or access our Services, we use cookies, pixels, beacons, local storage and similar technologies (“Tracking Technologies”). These Tracking Technologies allow us to automatically collect information about you, your device, and your online behavior, in order to enhance your navigation in our Services, improve our Services' performance, perform analytics, customize your experience and offer you, for example, tailored content that better corresponds with your interests.

2.1. What types of Tracking Technologies do we use?

When you use or access our Services, we use the following categories of Tracking Technologies:

• Strictly necessary Tracking Technologies: these Tracking Technologies are automatically placed on your computer or device when you access or take certain actions on our Services. These Tracking Technologies are essential to enable you to navigate around and use the features of our Services;
• Functionality Tracking Technologies: these Tracking Technologies allow our Services to remember choices you make (such as your language) and provide enhanced and personalized features. For example, these Tracking Technologies are used for authentication and support other features of our Services;
• Performance Tracking Technologies: these Tracking Technologies collect information about your online activity (for example, the duration of your visit on our Services), including referral source and IP-based geolocation. These Tracking Technologies are used for analytics, research and to perform statistics (based on aggregated information); and
• Tracking and Advertising Tracking Technologies: these Tracking Technologies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of an advertising campaign. The Tracking Technologies remember the websites you visit and that information is shared with other parties such as advertisers and publishers. Publishers, advertisers, and third-party ad networks may also utilize Tracking Technologies or similar technologies to deliver ads and monitor the performance of such ads.

2.2. How and by whom are Tracking Technologies stored on your device?

We store Tracking Technologies on your device when you visit or access our Services, these are called “First Party Tracking Technologies”. In addition, Tracking Technologies are stored by other third parties (for example, our analytics service providers, business partners and advertisers), who run content on our Services, these are called Third-party Tracking Technologies. Both types of Tracking Technologies may be stored either for the duration of your visit on our Services or for repeat visits. The collection of information through Tracking Technologies by such third parties will be governed by their own privacy and cookies policies and principles, which OneCLI does not control.

2.3. How to manage Tracking Technologies?

There are various ways in which you can manage and control your Tracking Technologies settings. You can change your preferences using our cookie settings tool (however, please note that this tool may only be available in certain jurisdictions). Other methods of managing your Tracking Technology preferences through your browser settings include changing your browser settings to send a “Do-Not-Track” signal. In such cases, your browser will send us a special signal to stop tracking your activity. However, please note that certain features of the Services may not work properly or effectively if you delete or disable cookies.

Below is a list of useful links that can provide you with more information on how to manage your cookies:

• Google Chrome
• Mozilla Firefox
• Safari (Desktop)
• Safari (Mobile)
• Android Browser
• Microsoft Edge

You can learn more and turn off certain third-party targeting and advertising cookies by visiting the following third-party webpages:

• The Interactive Advertising Bureau (US)
• The Interactive Advertising Bureau (EU)
• European Interactive Digital Advertising Alliance (EU)
• Digital Advertising Alliance
• Network Advertising Initiative

3. Why we process your personal data?

Any personal data we collect is being used in a way that is consistent with this Policy, and is used as follows (for the avoidance of doubt, there are jurisdictions in which the only legal basis is consent):

4. With whom do we share your personal data?

We may share and disclose your personal data as described below:

• Affiliated companies: we may share personal data internally within our affiliated companies and subsidiaries, for the purposes described in this Policy.
• Payment processors: we share your payment information with third party payment processors, for the purpose of facilitating your payments when using our Services. These third parties may have access to your personal data so that they may perform these tasks on our behalf.
• Service providers: service providers working on our behalf and who need access to certain personal data in order to provide their services to us. These companies include, but are not limited to, cloud storage providers, analytics services, customer support platforms, and third-party AI and large language model providers.
• Law enforcement agencies: we may disclose some data about you to government or law enforcement officials or private parties. The disclosure will be made in our sole discretion, as we believe it necessary or appropriate to respond to claims and legal procedures (including but not limited to subpoenas), to protect our or a third-party's property and rights, to protect the safety of the public or any person, or to prevent or stop any activity we consider to be, or to pose a risk of being, illegal, unethical, inappropriate or legally actionable. We also may be required to disclose an individual's personal data in response to a lawful request by public authorities, including meeting national security or law enforcement requirements.
• Auditors and advisers: we may share your data with our external auditors, advisors and professional service providers (e.g., lawyers, accountants, insurers) to ensure our compliance with regulatory requirements and industry standards, auditing, and managing disputes.
• Mergers and acquisitions: we may transfer or otherwise share your data in case of entering into a business transaction such as a merger, acquisition, reorganization, bankruptcy, or sale of some or all of our assets.

5. Google API Services User Data Policy - Limited Use

OneCLI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access to your Google user data at any time through your dashboard, which deletes the stored refresh token and disconnects the service.

6. Marketing and advertising

We use your personal data ourselves, or via third parties on our behalf, for the purpose of providing you with promotional materials, ads, products, services, websites and applications which relate to our Services, which we believe may interest you.

You can decline receiving further marketing offers from us at any time, by contacting us at legal@onecli.sh.

Please note that even if you unsubscribe from our marketing list, we can continue to send you updates and notifications related to the Services.

7. Your privacy rights

Depending on the jurisdiction in which you reside, you may have certain rights under relevant applicable laws regarding the collection and processing of your personal data. To the extent these rights apply and concern you, you can contact us via the contact details available below and ask to exercise the following rights:

• Rights of access to your personal data: you have the right to receive confirmation as to whether or not personal data concerning you is being processed, and access your stored personal data, together with supplementary information.
• Right of data portability: you have the right to request us to move, copy and transfer your personal data easily from one IT environment to another, in a safe and secure way, without affecting its usability.
• Right of rectification: you have the right to request rectification of your personal data in our control in the event that you believe the personal data held by us is inaccurate, incomplete or outdated.
• Right of deletion/erasure: you have the right to request that we erase or delete personal data held about you.
• Right to restriction or objection to processing: you have the right to request that we restrict or cease conducting certain personal data processes.
• Right to withdraw your consent: to the extent we process personal data on the basis of your consent, you may have the right to withdraw your given consent at any time.
• Right not to be subject to automated decision making: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
• Right to lodge a complaint: all requests, complaints or queries may be addressed to OneCLI at the following email address: legal@onecli.sh. We will consider any requests, complaints or queries and provide you with a reply in a timely manner. We take our obligations seriously and we ask that any concerns be brought to our attention first, so that we can try to resolve them. If you are unsatisfied with our response, you can lodge a complaint with the applicable data protection supervisory authority or court or appeal our denial of your request by contacting us.

Please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. You are welcome to contact us with any questions or requests through our contact details below.

You may be required to verify your identity in order to exercise your rights. We will only use personal data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Authorized agent

Depending on your jurisdiction, you may designate an authorized agent to make a request on your behalf. We will require authorized agents to confirm their identity and authorization to act on your behalf, in accordance with applicable laws.

8. Transfer of personal data

We operate globally, thus any information that we collect, disclose or share, including your personal data, can be stored and processed in various jurisdictions around the world, including (but not limited to) the European Economic Area, United Kingdom, Israel and United States, for the purposes detailed in this Policy. These countries' data protection rules may differ from those in your country and provide lower protection on your privacy than your country. We will take appropriate measures to ensure our transfers of personal data comply with applicable data protection laws.

To the extent that the General Data Protection Regulation (GDPR) or the United Kingdom General Data Protection Regulation (UK GDPR) are applicable, we will only transfer or share your personal data to data recipients:

• located in the EEA or in the UK;
• located in non-EEA countries or UK which have been approved as providing an adequate level of data protection; or
• who have entered into legal agreements ensuring an adequate level of data protection.

9. How do we protect your data?

We are strongly committed to the protection of your personal data and information, and we will take reasonable technical steps, which are customary in our industry, to keep your information secured and protect it from loss, misuse or alteration. However, if you notice a risk or any security violations, we advise you to report it to us at legal@onecli.sh.

10. Minors

We do not knowingly collect or solicit personal data from anyone under the age of 18 or under the local age of consent. By accessing, using or interacting with our Services, you certify to us that you are not under the age of 18, or under the local age of consent. In the event we learn that we have inadvertently gathered personal data from minors under the age of 18 (or under the local age of consent), we will take reasonable measures to promptly delete such information from our records in a secure manner. If you believe that we may have any information from or about minors under the age of 18, please let us know at legal@onecli.sh.

11. Retention

We will retain your personal data for as long as necessary to provide our Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined while taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time.

12. Updates to this Policy

We reserve the right to change this Policy at any time. The most current version will always be posted through our Services (as reflected in the “Last modified” heading). You are advised to check for updates regularly. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Policy. In case of material changes to this Policy, we will notify you of such changes as we deem appropriate before they enter into effect, unless the changes originate from any legal or regulatory requirement, in which case, the changes shall enter into force in accordance with such requirement.

If you do not agree to the modified Policy, your sole remedy will be to immediately cease accessing and using the Services.

13. Controlling version

This Policy has been drafted in English which shall be the controlling version, any translations of this Policy into other languages are provided for convenience only and shall not dictate the meaning or application of this Policy. In the event of any discrepancy between the meanings of any translated versions of the Policy and the English language version, the interpretation of the English language version shall prevail.

14. Contact us

If you have any questions about this Policy, please contact us at: legal@onecli.sh.