Skip to main content

Privacy Policy

Last updated: October 2026

We take the protection of your personal data very seriously. This Privacy Policy explains what personal data we collect through our website onaihq.com, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data Controller

The website onaihq.com is operated by:

Telesoft AG

Weisserlenweg 7
8966 Oberwil-Lieli
Switzerland

Email: info@onaihq.com

2. Data We Collect

When you use our website, we may collect the following personal data:

  • Contact Form: name, email address, company, and your message
  • Calendly (demo scheduling): when booking a demo, personal details (e.g., name, email, availability) are collected by Calendly
  • Technical data: such as IP address, browser type, requested page, and date/time of access (processed by our hosting provider bunny.net to deliver the website; IP addresses in the access logs are anonymized)
  • Spam protection (Cloudflare Turnstile): when the contact form is displayed, Cloudflare Turnstile checks whether it is being used by a human; this processes technical data such as your IP address and browser characteristics
  • Website analytics (Plausible): we count page views with Plausible Analytics, which uses no cookies and stores no personal data; your IP address is only used to compute a daily changing, anonymous identifier and is then discarded
  • Fonts (Google Fonts): our pages load the Gantari font from Google's servers (fonts.googleapis.com, fonts.gstatic.com), which transmits your IP address to Google

We do not collect payment data via our website.

3. Purpose of Processing

We process your personal data for the following purposes:

  • Responding to your inquiries submitted via the contact form
  • Scheduling and organizing demo appointments via Calendly
  • Ensuring the secure and reliable operation of our website (via bunny.net)
  • Protecting the contact form against spam and abuse (via Cloudflare Turnstile)
  • Delivering contact form messages to our inbox (via Resend)
  • Understanding how our website is used, in aggregated form only (via Plausible)

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your data on the following legal bases under the GDPR:

  • Article 6(1)(b) GDPR: to respond to your requests and provide our services
  • Article 6(1)(f) GDPR: our legitimate interest in ensuring the security and proper functioning of our website, protecting it against spam and abuse, measuring its reach anonymously, and displaying it consistently

5. Data Retention

  • Contact form inquiries: stored for up to 2 years
  • Technical logs (bunny.net): access logs with anonymized IP addresses, deleted automatically after 3 days
  • Contact form delivery (Resend): delivery records are kept by Resend for a limited period according to its retention policy
  • Calendly bookings: retained according to Calendly's privacy policy

Data will be deleted once it is no longer required for the purposes stated above.

6. Data Sharing and Third Parties

We share data only with trusted service providers necessary for operating our website:

  • Calendly, LLC (USA): for demo bookings. Data may be transferred outside the EU, with protection through Standard Contractual Clauses (SCCs).
  • BunnyWay d.o.o. (bunny.net), Slovenia (EU): hosting, content delivery, and processing of contact form and pricing estimator requests. Content is delivered from the bunny.net location closest to you; for visitors in Europe this is normally a European location.
  • Cloudflare, Inc. (USA): spam protection for the contact form (Turnstile). Data may be transferred to the USA.
  • Resend, Inc. (USA): delivery of contact form messages by email to us (name, email address, company, message). Data may be transferred to the USA.
  • Plausible Insights OÜ, Estonia (EU): cookie-free, anonymous website analytics.
  • Google Ireland Limited (Ireland/EU) and Google LLC (USA): delivery of web fonts (Google Fonts). Data may be transferred to the USA.

We do not sell or otherwise disclose your personal data to third parties for marketing purposes.

7. Data Security

Your data is transmitted using SSL encryption. We also rely on the security measures of our hosting provider (bunny.net) to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access – to receive a copy of your data
  • Rectification – to correct inaccurate data
  • Erasure – to request deletion of your data
  • Restriction – to limit processing under certain conditions
  • Portability – to receive your data in a structured, machine-readable format
  • Objection – to object to processing based on legitimate interests

To exercise your rights, please contact us at info@onaihq.com.

You also have the right to lodge a complaint with a supervisory authority if you believe your data is not being processed in compliance with GDPR.

9. International Data Transfers

Where data is transferred outside the EU/EEA and Switzerland (e.g., via Calendly, Cloudflare, Resend, or Google), we ensure adequate protection through EU Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU-U.S. Data Privacy Framework.

10. Cookies

Our website uses the following strictly necessary cookie:

  • Language preference cookie: stores your chosen language (English or German) to display the correct version of our site. This cookie is technically necessary for the multilingual functionality and expires after 3 months.

We do not use analytics, advertising, or tracking cookies.

11. Policy Updates

We may update this Privacy Policy from time to time, for example due to changes in our services or legal requirements. The updated version will always be published on this page.