Privacy Policy — oneg.ai

oneg.ai ("we", "us", "our") is an applied AI research lab operated from Portugal. This privacy policy explains how we collect, use, and protect information when you visit our website at oneg.ai (the "Site").

1. Data Controller

The data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the Portuguese Data Protection Act (Lei n.º 58/2019) is oneg.ai, based in Portugal. You can reach us at signal [at] oneg.ai.

2. Information We Collect

We aim to collect as little personal data as possible.

Automatically collected data: When you visit the Site, our hosting provider may collect minimal technical data necessary to deliver the service, including IP addresses (anonymized where possible), browser type, referring URL, and pages visited. This data is processed based on our legitimate interest in maintaining Site security and performance.

Analytics: We may use privacy-respecting analytics provided by our hosting platform to understand aggregate traffic patterns. This data is anonymized and does not track individual users across sites.

Contact: If you contact us by email, we process your email address and message content to respond to your inquiry. The legal basis is your consent (by initiating contact) and our legitimate interest in communication.

3. How We Use Your Data

We use collected data exclusively to:

Serve and maintain the Site
Understand aggregate usage patterns
Respond to inquiries
Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies

We use only essential cookies required for the Site to function correctly, including language preference storage. For full details, see our Cookie Policy.

5. Third-Party Services

The Site is hosted on a third-party platform that may process minimal server logs. We use Google Fonts, which may collect your IP address when loading font files. No other third-party tracking, advertising, or social media services are embedded on this Site.

6. Data Retention

Server logs are retained for a maximum of 30 days. Email correspondence is retained for as long as necessary to address your inquiry, after which it is deleted. Analytics data is aggregated and contains no personally identifiable information.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

Access any personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability
Withdraw consent at any time

To exercise these rights, contact us at signal [at] oneg.ai. You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD — Comissão Nacional de Proteção de Dados) or any other EU supervisory authority.

8. International Transfers

Our hosting infrastructure may process data in the European Economic Area (EEA) and/or in other jurisdictions. Where data is transferred outside the EEA, appropriate safeguards (such as Standard Contractual Clauses) are in place.

9. Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, security headers, and minimal data collection principles.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Jurisdiction-Specific Provisions

For users in Brazil (LGPD): This policy also satisfies requirements under Lei Geral de Proteção de Dados (Law 13.709/2018). You may exercise your rights under the LGPD by contacting us at the address above.

For users in California (CCPA): We do not sell personal information. California residents may request disclosure of data collected and exercise their rights under the California Consumer Privacy Act by contacting us.

For users in Canada (PIPEDA): We comply with the Personal Information Protection and Electronic Documents Act. Canadian users may contact us to access or correct their personal information.