Privacy Policy

1. Introduction

One-to-Many Automations ("we", "our", or "us") operates the messaging automation platform at onetomany.app. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding that information when you use our Service.

2. Information We Collect

Account Information

When you register or sign in with Google, we collect your full name, email address, profile picture, company name and type, and phone number.

Google Account Access

When you connect your Gmail account to send emails through our platform, we request limited OAuth access to send emails on your behalf. We do not read, store, or share the contents of your Gmail inbox or any other Google data beyond what is necessary to send emails you initiate.

Usage Data

We collect campaign activity, message logs, lead and contact data you upload or import, message templates you create, and integration configuration data (e.g. Shopify store details, Google Sheets column mappings).

Technical Data

We may collect IP addresses, browser type, and device information for security and debugging purposes. We use HttpOnly session cookies for authentication and do not use advertising or tracking cookies.

3. How We Use Your Information

• To provide, operate, and improve the platform
• To send WhatsApp and email messages on your behalf as directed by you
• To authenticate your identity and maintain your session securely
• To process third-party integration data (Shopify webhooks, Google Sheets sync)
• To investigate security incidents and prevent abuse
• To respond to support requests and communicate platform updates

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Google API Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Gmail access to send emails you explicitly initiate
• We do not transfer Gmail data to third parties
• We do not use Gmail data for advertising
• We do not allow humans to read your Gmail data
• Google Sheets access is read-only and used solely to import lead data at your request

5. Data Storage and Security

Your data is stored securely on encrypted databases hosted by Railway. We use:

• HTTPS/TLS encryption for all data in transit
• AES-128 (Fernet) encryption for sensitive credentials (API tokens, access tokens) at rest
• bcrypt hashing for user passwords
• JWT-based authentication with an 8-hour expiry
• HttpOnly cookies to prevent client-side script access to session tokens

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data — including leads, campaigns, message logs, templates, and integration credentials — is permanently deleted from our systems within 30 days. You may also request earlier deletion by contacting support@onetomany.app.

7. Third-Party Services

The Service integrates with WhatsApp (Meta), Gmail (Google), Shopify, and other platforms. Data shared with those platforms is governed by their respective privacy policies. We only share the minimum data necessary to perform the actions you request.

8. Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and all associated data
• Revoke Google account access at any time via Google Account Permissions
• Object to processing of your data in certain circumstances
• Port your data (contact us for an export)

To exercise any of these rights, contact us at support@onetomany.app.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of the Service after changes constitutes your acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us at: support@onetomany.app