OnyxOne Privacy Policy

Last updated: April 15, 2026

1. Introduction

This Privacy Policy applies to the OnyxOne application and website located at https://www.onyxone.io (the "OnyxOne App"). OnyxOne ("we", "our", or "us") operates the OnyxOne App, a creator marketing and talent management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the OnyxOne App. By using OnyxOne, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information you provide directly, including: your name, email address, and account credentials; organization and team information; creator profile data such as social media usernames, follower counts, and engagement metrics; content and media uploaded to the platform; deal, deliverable, and task information; and payment and financial data. We also collect information automatically, including: device and browser information; IP address and approximate location; usage data and analytics; and cookies and similar tracking technologies.

3. Third-Party Platform Data

When you connect third-party social media accounts (such as TikTok, Instagram, or Facebook), we access and store information from those platforms in accordance with their terms and with your explicit authorization. This may include your public profile information, follower and engagement metrics, published content and media, and audience demographic insights. YouTube data is covered separately in Section 4 below. You can disconnect third-party accounts at any time through your account settings, which will stop further data collection from those platforms.

4. YouTube API Services

OnyxOne's YouTube integration uses YouTube API Services. By connecting your YouTube channel to OnyxOne, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Information collected from Google APIs, including YouTube, is used and transferred in accordance with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Use of Google's general services is also subject to the Google Privacy Policy (https://policies.google.com/privacy). When you connect your YouTube channel, we access: • Channel profile information (channel ID, handle, title, description, profile image) • Public channel statistics (subscriber count, total view count, video count) • Your uploaded videos and their public metadata (title, thumbnail, publish date, view/like/comment counts) • Private YouTube Analytics reports available only to the channel owner, including impressions, click-through rate, watch time, traffic sources, and audience demographics such as age group, gender, and geography This data is used solely to (a) display your channel's performance to you in your OnyxOne creator dashboard, (b) generate shareable media kits and rosters that your agency presents to brand partners with your consent, and (c) provide aggregated campaign reporting to your agency. We do not use YouTube data for advertising, do not sell it, and do not share it with third parties other than your agency and the brand partners you choose to present to. You can revoke OnyxOne's access to your YouTube data at any time by visiting Google's security settings (https://myaccount.google.com/permissions), or by disconnecting your YouTube account from the Linked Accounts screen in OnyxOne. Upon revocation or disconnection, we delete stored access and refresh tokens immediately and delete cached YouTube channel data and analytics within 30 days.

5. How We Use Your Information

We use collected information to: provide and maintain the OnyxOne platform; manage creator profiles and agency rosters; facilitate deal management and collaboration between agencies, creators, and brands; display creator information on shareable roster pages; generate reports and analytics; process payments; communicate with you about your account; and improve our services.

6. Data Sharing and Disclosure

We may share your information with: members of your organization on OnyxOne; brand partners when included in shareable roster links or media kits (with your agency's consent); third-party service providers that help us operate our platform (cloud hosting, payment processing, email delivery); and law enforcement or regulatory authorities when required by law. We do not sell your personal information to third parties.

7. Data Storage and Security

Your data is stored on secure cloud infrastructure. We use industry-standard encryption for data in transit and at rest. Access tokens for connected social accounts are encrypted before storage. We implement access controls, audit logging, and regular security reviews to protect your data.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Your Rights

Depending on your jurisdiction, you may have the right to: access and receive a copy of your personal data; correct inaccurate personal data; request deletion of your personal data; object to or restrict processing of your data; data portability; and withdraw consent at any time. To exercise these rights, contact us at support@onyxone.com.

10. Children's Privacy

OnyxOne is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Device Permissions

OnyxOne may request access to certain features on your device: Photo Library: We request access to your photo library to allow you to upload profile photos, creator media, and other content to the platform. Photos are only accessed when you explicitly choose to upload them and are transmitted securely to our servers. Push Notifications: We may send push notifications to inform you about deal updates, task assignments, team activity, and other relevant platform events. You can manage notification preferences in your device settings at any time.

12. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal data we collect and how it is used; request deletion of your personal data; opt out of the sale of your personal data (we do not sell personal data); and not be discriminated against for exercising your privacy rights. To exercise these rights, contact us at support@onyxone.com. We will respond to verifiable requests within 45 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of OnyxOne after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at: OnyxOne Email: support@onyxone.com