Onion Privacy Policy

1Scope

This Privacy Policy describes how Onion collects, uses and protects the personal data of those who use the Service, available at getonion.app and app.getonion.app. It applies together with Onion's Terms and Conditions.

2What data we collect

• Account data: name, email and, if Google is used to sign in, the basic data from the Google profile.
• Content: the boards, columns, cards and attributes the user creates or uploads to Onion.
• Usage data: interaction with the Service, pages visited, product events, collected through analytics.
• Technical data: IP address, browser and device type, automatically logged for security and functionality purposes.

3What we use the data for

• Provide and operate the Service, including authentication and storage of the Content.
• Send transactional communications necessary for the account to work.
• Send marketing communications, only if the user gave their consent separately.
• Analyze product usage in order to improve it.
• Prevent fraud, abuse and illegal activity.
• Comply with legal obligations.

4Legal basis for processing

The processing of data is based on the performance of the contract that the use of the Service entails, on the user's consent for marketing communications, and on Onion's legitimate interest in maintaining the security and functionality of the Service.

5Who we share data with

Onion does not sell personal data or hand it over to third parties for commercial purposes. Data is shared only with the providers necessary to operate the Service:

• Supabase: database and authentication.
• Vercel: hosting.
• PostHog: product analytics.

These providers process the data on Onion's behalf and under their own security policies, solely for the purposes described in this Policy.

6International transfers

The providers mentioned in section 5 may store or process data outside Chile. By using the Service, the user accepts this international transfer, which is necessary for Onion to function.

7Data retention

Data is retained while the account is active. When the account is deleted, the advance-notice periods described in the Terms and Conditions apply, after which the Content and associated data are deleted, except for temporary technical backups or information that must be retained by legal obligation.

8Data subject rights

In accordance with Law 21.719, the user has the right to access, rectify, cancel and object to the processing of their personal data, as well as to request the portability of their Content. These rights may be exercised at any time through the options available in the Service, or by writing to soporte@getonion.app.

9Security

Onion applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss or alteration. No system is completely secure, so absolute protection cannot be guaranteed.

10Minors

Onion is not directed at people under 16 years of age. Personal data of minors under that age is not intentionally collected.

11Changes to this Policy

This Policy may be updated when necessary. If the changes are relevant, notice will be given through a reasonable means. The date of the last update appears at the top of the document.

12Governing law

This Policy is governed by the laws of the Republic of Chile, in particular by Law 21.719 on the protection of personal data.

13Contact

For questions about this Policy or to exercise the rights described in section 8, write to soporte@getonion.app.