Privacy Policy

Last updated: September 27, 2026

This Privacy Policy explains how [OnlyManager legal entity name and address] (“OnlyManager”, “we”, “us”) handles personal information when you visit onlymanager.app or use our Service. It should be read with our Terms of Service.

1. Two roles we play

• Account data. For information about our own customers and website visitors (for example your name, email and billing details), we decide how it is used and are responsible for it.
• Customer Data. Agencies use OnlyManager to manage creators and their fans. Information about creators, fans and other people that an agency connects or uploads is processed on behalf of that agency. The agency is the controller (a “business” under California law) and we are its processor and service provider. We use Customer Data only to provide the Service to that agency. Creators and fans who want to exercise privacy rights should contact the agency; we will help the agency respond.

2. Information we collect

Information you give us

• Account and profile details: name, email, password (hashed), company name, team members and roles.
• Billing details: plan, credit purchases and billing address. Card data is handled by Stripe; we never see full card numbers.
• Credentials for connected accounts, stored in an encrypted vault.
• Messages and files you send to Jarvis, support or the Telegram bot.

Customer Data from connected accounts

• Creator profiles, earnings, statistics, posts, content metadata and account settings.
• Fan data made available by the platform, such as usernames, subscription status, spending history and chat messages.
• Advertising and social media metrics from accounts you connect.

Information collected automatically

• Log and device data: IP address, browser type, pages visited, timestamps and error reports.
• Essential cookies used to keep you signed in and secure the Service. We do not use advertising cookies.

3. How we use information

• To provide, maintain and secure the Service, including syncing data and running Jarvis.
• To process payments and manage subscriptions and credits.
• To send service, security and billing messages.
• To provide support and respond to requests.
• To detect and prevent fraud, abuse and violations of our policies.
• To comply with legal obligations and enforce our agreements.

We do not use Customer Data to train our own AI models. We send data to LLM providers only through their business APIs, and only as needed to answer the request you made.

4. We do not sell or share personal information

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act. We have not done so in the past 12 months.

5. When we disclose information

• To subprocessors that help us run the Service (listed below), under contracts that limit their use of the data.
• Within your organization, to team members you grant access.
• When required by law, or to protect the rights, safety or property of users, the public or OnlyManager.
• In a merger, acquisition or sale of assets, subject to this policy.

6. Subprocessors

We will update this list when we add or replace a subprocessor.

7. Retention

• Account data is kept while your account is active.
• Customer Data is kept for the life of the agency’s subscription. After an account is closed, we delete it within 30 days, and from backups within a further 90 days.
• Vault credentials are deleted immediately when you remove the connection or close the account.
• Billing records are kept as long as tax and accounting law requires (typically up to 10 years).
• Security logs are kept for up to 12 months.

8. Security

We use encryption in transit (TLS) and at rest, encrypt stored credentials with a separate application-level key, enforce row-level access controls so each agency only sees its own data, and limit staff access to what is needed to run the Service. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.

9. International transfers

Our primary database is hosted in the European Union. Some subprocessors, including our hosting, payment and AI providers, process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

10. Your choices and rights

You can access and update most account information in the app, export your data, and close your account at any time. Depending on where you live, you may also have rights to access, correct, delete or port your personal information, and to object to or restrict certain processing. EU and UK residents may also complain to their local data protection authority.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use and disclose, and receive a copy of it.
• Request deletion of your personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do neither).
• Limit the use of sensitive personal information (we only use it to provide the Service).
• Not be discriminated against for exercising these rights.

In the past 12 months we collected the categories described in section 2: identifiers, commercial information, internet and network activity, account login credentials (a type of sensitive personal information), and professional information. We collected them from you, from your devices and from accounts you connect, for the purposes in section 3, and disclosed them only to the categories of recipients in section 5.

To make a request, email legal@onlymanager.app. We will verify your identity before responding. You may use an authorized agent, who must provide proof of authorization. If your data is Customer Data held for an agency, we will forward your request to that agency.

12. Children

The Service is only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

13. Changes

We may update this policy. If a change is material, we will notify you by email or in the app before it takes effect. The date at the top shows when it was last updated.

14. Contact

Privacy questions or requests: legal@onlymanager.app.