Privacy Policy
Effective: December 2025
This Privacy Policy explains how Onnai ("we", "us", "our") collects, uses, and protects your information when you use our software and services ("Service").
1. Information We Collect
Account Information
When you sign up, we collect:
- Email address
- Payment information (processed by our payment provider)
Usage Data
When using Onnai-hosted inference, we collect:
- Request metadata (timestamps, token counts, Mimic used)
- Error logs for debugging
- IP address for security and abuse prevention
What We Do NOT Collect
- Your third-party API keys (BYOK)
- Content of requests routed through BYOK providers
- Content of local inference requests (MLX, Ollama)
- Files on your computer
- Shell history or system information
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide the Service | Account info, request content (Onnai-hosted only) |
| Billing | Email, usage metadata, payment info |
| Abuse prevention | IP address, usage patterns |
| Service improvement | Aggregated, anonymized usage statistics |
| Support | Email, error logs |
3. Data Retention
- Request content: Not stored beyond processing (Onnai-hosted inference)
- Usage metadata: Retained for billing cycle + 90 days
- Account information: Retained until account deletion
- Error logs: 30 days
4. BYOK & Local Inference
When you use Bring Your Own Key (BYOK) or local inference:
- Your requests go directly to the provider (or stay on your machine)
- We never see your API keys or request content
- Third-party providers have their own privacy policies
The onnaid daemon runs locally on your machine. It connects to providers directly using your credentials.
5. Data Security
We implement appropriate security measures:
- TLS encryption for all network traffic
- Unix socket permissions (mode 0600) for local daemon communication
- Credentials stored only on your machine
- No plaintext storage of sensitive data on our servers
6. Third-Party Services
We use the following third-party services:
- Payment processing: Stripe
- AI inference: Various providers (Cerebras, X.AI, OpenAI, Anthropic, and others).
These providers have their own privacy policies governing their handling of your data.
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update your account information
- Deletion: Delete your account and associated data
- Export: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact privacy@onnai.ai
8. International Users
Our servers are located in the United States. By using the Service, you consent to the transfer of your information to the US. For EU/EEA users, we process data under legitimate interest for service provision.
9. Children's Privacy
The Service is not intended for users under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Effective" date at the top indicates the latest revision.
11. Contact
Questions or concerns about privacy?
Email: privacy@onnai.ai