1. INTRODUCTION
This Privacy Policy explains how OneBlink Inc ("OneBlink," "we," "us," or "our") collects, uses, and protects information when you use our sandbox and workshop infrastructure services (the "Services").
OneBlink provides ephemeral sandbox environments and hands-on workshop infrastructure for businesses to validate integrations, run demos, deliver technical enablement, and conduct technical testing. We are committed to protecting your privacy and being transparent about our data practices.
2. INFORMATION WE COLLECT
2.1 Information You Provide
Business Contact Information:
- Name (for workshop registration and credential provisioning)
- Email address (for account registration, workshop access, and communication)
- Company or organization name, where provided as part of a workshop or partner engagement
We deliberately collect the minimum information required to deliver the Services. We do not collect phone numbers, payment card information, government identifiers, or any sensitive categories of personal information.
2.2 Automatically Collected Information
Basic Analytics:
- We use basic web analytics to understand how visitors interact with our website (oneblink.ai)
- This may include page views, referral sources, and general usage patterns
- We do NOT use cookies for advertising or cross-site tracking
Infrastructure Usage Logs:
- Our cloud infrastructure providers log technical usage data (API calls, resource utilization, error logs)
- These logs are used solely for service operation, security monitoring, and troubleshooting
2.3 Sandbox Data
Ephemeral and Isolated:
- Customer data within sandboxes is ephemeral - it exists only during the sandbox session
- All sandbox data is automatically deleted when the sandbox terminates
- Sandbox environments are isolated in dedicated cloud accounts
- We do NOT use sandbox data for any purpose, including AI training, analytics, or service improvement
3. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
Account and Workshop Management:
- To create and manage accounts and workshop registrations
- To authenticate users and provision access credentials to sandbox environments
Service Delivery:
- To provide, maintain, and improve our sandbox and workshop infrastructure
- To monitor system performance and ensure service reliability
Communication:
- To send service-related notifications (workshop credentials, system updates, maintenance, security alerts)
- To respond to your inquiries and provide customer support
Legal Compliance:
- To comply with legal obligations and respond to lawful requests
- To protect our rights, property, and safety, and that of our users
4. DATA SHARING AND DISCLOSURE
4.1 Workshop Hosts
When you register for a workshop delivered by OneBlink on behalf of a software vendor or partner (the "Workshop Host"), we may share your registration information (name, email address, company) with that Workshop Host for purposes of event administration and follow-up. Workshop Hosts are identified at the time of registration.
4.2 Service Providers (Subprocessors)
We use a small number of third-party service providers to deliver our Services. These providers process data on our behalf under contractual confidentiality and security obligations. Categories include:
- Cloud infrastructure: providers that host our sandbox environments and platform (e.g., Amazon Web Services, Google Cloud, Microsoft Azure)
- Database and authentication: managed backend services used by our portals
- Email delivery: transactional email services used to send workshop credentials and notifications
A current list of our subprocessors is maintained at https://oneblink.ai/oneblink_subprocessors.html.
4.3 We Do NOT Share Data For:
- Marketing or advertising purposes by third parties
- Sale or rental to third parties
- AI training or model development
- Analytics beyond basic operational metrics
4.4 Legal Requirements
We may disclose information if required by law, including:
- In response to valid legal processes (subpoenas, court orders)
- To protect our rights, property, or safety
- To prevent fraud or security threats
- In connection with business transactions (mergers, acquisitions)
5. DATA RETENTION
Active Accounts:
- Business contact information is retained while your account or workshop engagement is active
After Account Cancellation or Workshop Completion:
- Business contact information is deleted within 12 months after account cancellation or workshop completion, unless a longer period is required for an active business relationship
- You may request immediate deletion by contacting support@oneblink.ai
Sandbox Data:
- All sandbox data is ephemeral and automatically deleted upon sandbox termination
- No sandbox data persists beyond the session
Legal Retention:
- We may retain certain information longer if required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements)
6. DATA SECURITY
We implement appropriate technical and organizational security measures to protect your information:
Security Measures:
- Encryption in transit (TLS 1.2+)
- Encryption at rest
- Access controls, least-privilege IAM, and multi-factor authentication for administrative access
- Centralized audit logging (AWS CloudTrail) across our cloud organization
- Isolated, single-tenant sandbox environments in dedicated cloud accounts
- Regular security scanning against industry benchmarks
For more detail on our security practices, see https://oneblink.ai/oneblink_security.html.
Limitations:
- No method of transmission or storage is 100% secure and we cannot guarantee absolute security
- You are responsible for maintaining the confidentiality of your account credentials
7. INTERNATIONAL DATA TRANSFERS
Global Services:
- Our Services are available worldwide
- Data may be processed in multiple jurisdictions, including the United States
- We use cloud providers with global infrastructure
Data Protection:
- We ensure appropriate safeguards are in place when data is transferred internationally
- For EU/EEA/UK users, we comply with GDPR requirements through standard contractual clauses and other approved mechanisms
8. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights:
8.1 Rights Under GDPR (EU/EEA/UK/Switzerland)
- Access: Request access to your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request restriction of processing
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain types of processing
- Withdraw Consent: Withdraw consent at any time (does not affect prior processing)
How to Exercise Rights:
Response Time: We will respond within 30 days
Complaints: You may lodge a complaint with your local data protection authority
8.2 Rights Under US State Privacy Laws
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights including:
- Know: Whether we are processing your personal data
- Access: Access your personal data
- Correct: Correct inaccuracies in your personal data
- Delete: Request deletion of your personal data
- Portability: Obtain a copy of your data
- Opt-out: Opt out of targeted advertising, sale of data, or profiling. OneBlink does not engage in targeted advertising, sale of personal data, or profiling
- Non-discrimination: Not be discriminated against for exercising your rights
Authorized Agents: You may designate an authorized agent to submit requests on your behalf
Appeals: If we deny your request, you may appeal by emailing support@oneblink.ai
9. DO-NOT-TRACK SIGNALS
We do not currently respond to Do-Not-Track (DNT) browser signals because no uniform standard has been finalized. If a standard is adopted, we will update this policy accordingly.
10. CHILDREN'S PRIVACY
Our Services are intended for business use only. We do not knowingly collect information from individuals under 18 years of age. If you believe we have collected information from a minor, please contact us immediately at support@oneblink.ai.
11. BUSINESS TRANSFERS
In the event of a merger, acquisition, sale, or other business transaction, your information may be transferred to the successor entity. You will be notified of any such change via email or prominent notice on our website.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Changes will be indicated by updating the "Last updated" date at the top of this policy.
Material Changes:
- We will notify you of material changes via email or prominent notice on our website
- Your continued use of Services after changes take effect constitutes acceptance
Review Regularly: We encourage you to review this policy periodically
13. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices: