Privacy Policy

1. Introduction

OnTeam ("we", "us", or "our") operates the OnTeam HR management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosted service at onteam.work. If you self-host OnTeam, your data stays entirely on your own infrastructure and this policy applies only to any interactions you have with our website or support channels.

2. Information We Collect

We may collect the following types of information:

• Account information: name, email address, company name, and password when you create an account.
• Employee data: information you enter about your employees, including names, contact details, job titles, departments, and other HR-related records.
• Usage data: pages visited, features used, browser type, IP address, and other technical information collected automatically.
• Payment information: billing details processed securely through our third-party payment provider. We do not store full payment card numbers.

3. How We Use Your Information

• To provide, maintain, and improve the OnTeam platform.
• To process transactions and send related billing information.
• To send service-related notices, including updates and security alerts.
• To respond to support requests and provide customer service.
• To monitor and analyze usage patterns to improve user experience.
• To comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share data with third-party service providers who assist in operating our platform (e.g., hosting, payment processing, email delivery), but only to the extent necessary for them to perform their services. We may also disclose information if required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time. Upon account termination, we will delete or anonymize your data within 30 days, unless retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time where processing is based on consent.

For self-hosted deployments, you have full control over your data at all times through direct database access.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. Analytics cookies, if used, are anonymized and can be disabled.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@onteam.work.