Privacy Policy
Effective date: January 1, 2026 · Last updated: September 12, 2026
Psycho Solutions LLC, doing business as OnePane ("OnePane," "we," "us," or "our") operates the OnePane unified management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. By accessing or using OnePane, you agree to the practices described in this policy.
Data Controller
For personal data processed about you when you use the Service, the data controller is Psycho Solutions LLC DBA OnePane. You can reach our privacy team at privacy@onepane.io.
Where we act as a processor of personal data on behalf of a customer (for example, the telemetry and account data inside a customer's tenant), that customer is the controller and we process it under their instructions and our Data Processing Addendum.
EEA / UK users: where required by Article 27 of the GDPR or the UK GDPR, we will designate a representative in the EEA and/or the United Kingdom and publish its contact details here. Until then, EEA and UK data subjects may exercise their rights directly with our privacy team above.
1 Information We Collect
We collect information in the following ways:
Information You Provide Directly
- Account registration details (name, work email, company name, phone number)
- Infrastructure and network configuration data you upload or connect
- Support requests, feedback, and contact form submissions
- Billing and payment information (processed by our PCI-compliant payment partner)
Information Collected Automatically
- Log data: IP addresses, browser type, pages visited, timestamps, and referring URLs
- Device telemetry transmitted by your connected hardware agents and collectors
- Usage analytics: feature interactions, session duration, and navigation patterns
- Cookies and similar tracking technologies (see Section 6)
Information from Third Parties
- Single sign-on providers (e.g., Google Workspace, Microsoft Entra ID) when you authenticate via OAuth
- Integration partners whose APIs you connect to the platform
2 How We Use Your Information
We use the information we collect to:
- Provision, operate, and improve the OnePane platform and its features
- Authenticate users and enforce access controls across your organization
- Process and display real-time telemetry from your connected infrastructure
- Generate alerts, reports, and automated notifications based on your configuration
- Respond to support inquiries and communicate service-related updates
- Detect, investigate, and prevent security incidents, fraud, and abuse
- Comply with applicable legal obligations and enforce our Terms of Service
- Conduct internal analytics to understand usage trends and inform product decisions (using aggregated, de-identified data)
We do not sell your personal information or your infrastructure data to third parties for advertising purposes.
Lawful bases (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we rely on the following lawful bases under Article 6 for each purpose:
| Purpose | Lawful basis |
|---|---|
| Providing the Service, authentication and access control, processing your telemetry | Performance of a contract (Art. 6(1)(b)) |
| Security monitoring, fraud and abuse prevention, product improvement using aggregated/de-identified data | Legitimate interests (Art. 6(1)(f)) |
| Billing records, tax, and responding to lawful requests | Legal obligation (Art. 6(1)(c)) |
| Optional communications or any processing we ask you to opt in to | Consent (Art. 6(1)(a)), withdrawable at any time |
Where we rely on legitimate interests, we balance those interests against your rights and freedoms; contact us to object or to learn more.
3 Sharing and Disclosure
We may share your information only in the following circumstances:
- Service Providers: Trusted vendors who help us operate the platform (cloud hosting, payment processing, email delivery) under strict data processing agreements. We do not use third-party advertising or analytics trackers.
- Your Organization: Administrators within your OnePane account may have access to usage data and connected device telemetry for all users in that account.
- Legal Requirements: When required by law, subpoena, or government authority, or to protect the rights, property, or safety of OnePane, our users, or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to equivalent privacy protections.
- With Your Consent: For any other purpose with your explicit consent.
Data Processing Addendum (DPA)
For personal data we process on your behalf as a processor, we make a Data Processing Addendum available to customers, covering the subject matter of processing, our security measures, our sub-processors, and international transfer safeguards. Business customers can review our Data Processing Addendum or request a signed copy at privacy@onepane.io.
★ California Privacy Rights (CCPA / CPRA)
If you are a California resident, the CCPA (as amended by the CPRA) gives you specific rights. In the past 12 months we have collected the following categories of personal information:
| Category | Collected | Sold / Shared | Disclosed for a business purpose |
|---|---|---|---|
| Identifiers (name, work email, company, phone) | Yes | No | Yes — to service providers (hosting, payments, email) |
| Commercial information (subscription, billing records) | Yes | No | Yes — to our payment processor |
| Internet / network activity (usage, device telemetry, logs) | Yes | No | Yes — to hosting/infrastructure providers |
| Geolocation (device coordinates you connect) | Yes | No | Yes — to hosting/infrastructure providers |
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not process it for cross-context behavioral advertising. California residents may exercise their rights to know, delete, correct, and limit, and we will not discriminate against you for doing so. To make a request, email privacy@onepane.io.
4 Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Account and profile data is retained for the duration of your subscription plus 90 days following termination.
- Device telemetry and metric history is retained for a rolling 13-month window by default; enterprise plans may configure longer retention periods.
- Audit logs are retained for a minimum of 12 months.
- After account deletion we purge personal data within 30 days, except where retention is required by law.
5 Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, role-based access controls, and regular security assessments. No transmission over the internet is completely secure, however, and we cannot guarantee absolute security. If you suspect unauthorized access to your account, contact us immediately at security@onepane.io.
6 Cookies and Tracking
We use strictly necessary and preference cookies — to maintain your session, protect against CSRF, and remember choices such as dark mode. We do not use third-party advertising or analytics trackers. With your consent (via the cookie banner), we additionally record first-party analytics — anonymous page views and sign-up events on our own marketing site, stored on our own servers and never shared with or sold to anyone — so we can see which pages help. Choose "Essential only" in the banner to decline; you can also configure your browser to refuse cookies, though some platform features may be degraded.
| Type | Purpose | Duration |
|---|---|---|
| Essential | Session authentication, CSRF protection | Session |
| Preference | Theme, language, UI layout settings | 1 year |
7 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your personal data (subject to legal retention requirements)
- Port your data to another service in a machine-readable format
- Restrict or object to certain processing activities
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@onepane.io. We will respond within 40 days.
8 International Data Transfers
OnePane is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries. We rely on appropriate safeguards and approved transfer mechanisms to ensure your data receives an adequate level of protection regardless of where it is processed.
9 Children's Privacy
The Service is intended for enterprise and business use and is not directed at children under the age of 16. We do not knowingly collect personal information from individuals under 16. If we become aware that we have inadvertently collected such information, we will delete it promptly.
10 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, sending an email notification to the address on file for your account. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
11 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Privacy Team: