OneFusion Privacy Policy

1. Introduction

Welcome to OneFusion. This Privacy Policy explains how AppForges ("we", "us", or "our") collects, uses, and protects your information when you use the OneFusion application. OneFusion is an AI-powered creation and collaboration platform for developers, content creators, and small businesses. We are committed to protecting your privacy and complying with applicable data protection regulations, including the GDPR and the CCPA.

By using OneFusion, you agree to the data practices described in this policy.

2. Information We Collect

2.1 Account Information When you sign in, we collect: - Email address - Display name - Unique account identifier - GitHub account information (if you connect GitHub for code integration)

2.2 Workspace and Project Data When you use OneFusion's features, we store: - Workspace settings, membership, and role assignments - Project content (articles, campaigns, and other created content) - Content versions and edit history - Asset metadata (file name, size, MIME type, tags)

2.3 Application Development Data If you use development features: - Source code (stored in our system or linked via GitHub) - Deployment configurations and environment variables (encrypted) - Build and deployment logs - Commit history

2.4 AI-Generated Content When you use AI features: - Prompts and instructions you provide - AI-generated text, images, and code - We do NOT permanently store the prompts after processing

2.5 Device and Usage Data We automatically collect: - Device type, browser, and operating system - App version - Anonymous usage statistics - Crash logs and performance data

3. How We Use Your Information

We use the information we collect to: - Provide, maintain, and improve OneFusion's features and services - Manage workspaces, projects, and collaborative resources - Process AI content generation requests - Deploy and host your applications - Verify your identity and manage your account - Send important service notifications - Analyze usage patterns to improve user experience - Ensure platform security and prevent abuse - Comply with legal obligations

4. AI Service and Data Processing

When you use AI content generation features: - Your prompts are sent to our server via encrypted connection (HTTPS) - Our server forwards requests to LLM services (such as OpenAI, Anthropic) for processing - AI-generated images use DALL-E or similar services - We do NOT permanently store your prompts after processing - Generated content belongs to you and is stored in your workspace

Our AI service providers' data handling is governed by their respective privacy policies. We have data processing agreements that prohibit them from using your data for model training.

5. Data Sharing and Third-Party Services

We do not sell your personal information to third parties.

OneFusion uses the following third-party services: - AppForges OAuth: User authentication - GitHub: Code repository integration (with your explicit authorization) - OpenAI / Anthropic: AI text generation (temporary prompt transmission) - DALL-E: AI image generation (temporary prompt transmission) - Cloud hosting providers: Application deployment and data storage

We may share your information when: - Required by law or legal process - Necessary to protect our rights, safety, or property - You have given explicit consent - Necessary to provide services you requested (e.g., deploying your application)

6. Data Storage and Security

We implement industry-standard security measures: - All network communications use HTTPS encryption - Environment variables and secrets are encrypted at rest - Workspace data is isolated using multi-tenant architecture - Role-based access control (RBAC) protects workspace resources - OAuth tokens are stored securely - Regular security audits and vulnerability assessments

Application deployment: - Deployed applications run in isolated environments - Build and deployment logs are retained for 7-30 days for debugging purposes - Your source code is stored in encrypted storage

7. Data Retention

- Account information: Retained until account deletion - Workspace and project data: Retained as long as the workspace is active - Deployment logs: 7-30 days depending on subscription tier - Usage analytics: Aggregated and anonymized after 90 days - Crash logs: Deleted after 90 days - AI prompts: Not retained; discarded after processing - AI-generated content: Retained in your workspace until you delete it

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Deployed applications will be taken offline upon workspace deletion.

8. Your Rights

Under GDPR (for EU/EEA residents), you have the right to: - Access your personal data - Rectify inaccurate data - Erase your data ("right to be forgotten") - Restrict processing of your data - Data portability - Object to processing - Withdraw consent at any time

Under CCPA (for California residents), you have the right to: - Know what personal information is collected - Know whether your data is sold or disclosed, and to whom - Opt out of the sale of personal information (we do not sell your data) - Access your personal information - Request deletion of your personal information - Non-discrimination for exercising your rights

To exercise any of these rights, please contact us at privacy@appforges.com. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence for the purpose of providing our services, including AI processing and application hosting. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

OneFusion is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@appforges.com, and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or on our website. The "Last Updated" date at the top indicates the most recent revision.