Privacy Policy
Last updated: April 5, 2025
We respect your privacy and are committed to protecting your data. This policy explains what information we collect, how we use it, and the choices you have.
Onikey Widget is a simple AI tool for your website. We use third‑party AI models (like OpenAI, Gemini, or Anthropic) — we do not train or fine‑tune them. We only use your provided content to help the AI answer questions accurately.
Information We Collect
Account Information
When you sign up, we collect:
- Your name
- Your email address
- Your company name (optional)
- Your website URL (to install the widget)
Knowledge Base Content
You may upload or paste:
- FAQs
- Product pages
- Documentation
- Blog posts
We store this in a secure vector database to retrieve relevant snippets when answering visitor questions. This is not used to train AI models — only to provide context.
Conversation Data (Optional)
We may store:
- Visitor questions
- AI replies
- Form submissions (name, email)
Only if you enable "Store conversations" in settings. You can turn this off anytime.
Technical Logs
We collect:
- IP addresses (for security and abuse prevention)
- Browser/device info (to fix bugs)
- Error logs (to keep the service running)
How We Use Your Information
To Run the Service
- Deliver the AI widget to your website
- Retrieve relevant content from your knowledge base to answer questions
- Show you conversation history and leads in your dashboard
To Improve Accuracy (RAG, not training)
- We use your knowledge base content to retrieve context for the AI — not to train models
- If you enable conversation storage, we may use anonymized snippets to improve retrieval quality — never to train LLMs
To Support You
- Respond to your emails
- Fix bugs or errors
- Send essential service updates (e.g., downtime, new features)
To Keep Things Secure
- Prevent spam, abuse, or attacks
- Monitor for suspicious activity
AI & Your Data — What We Don't Do
- We do NOT fine-tune or train OpenAI, Gemini, or Anthropic models on your data.
- We do NOT use your chat logs to train AI models — unless you explicitly opt in, and even then, only for improving context retrieval (RAG), not model training.
- Your knowledge base is stored securely and used only to answer questions on your site.
- You can delete your vector database or conversation logs anytime.
Your Data Rights & Choices
Access & Delete
- Log in → go to "Settings" → download your data (leads, conversations, knowledge base)
- Email us to delete everything → we'll wipe your account + data within 7 days
Opt Out of Conversation Storage
- In dashboard → "Privacy Settings" → toggle "Store conversations" OFF
- We stop saving chats immediately
Communication Preferences
- Unsubscribe from marketing emails with one click
- Service emails (billing, security) can't be turned off — but we keep them rare
Data Portability
- Export your knowledge base, leads, and conversations as CSV or JSON anytime
Data Security
We take security seriously:
What we use:
- Encryption in transit (HTTPS) and at rest (AES-256)
- Password hashing (bcrypt)
- Regular backups
- Access controls (only essential team members can access data)
What we DON'T claim (unless true):
- SOC 2 compliance
- GDPR/CCPA enterprise DPAs
- "Enterprise-grade" infrastructure
We're a lean team — but we follow security best practices.
International Data Transfers
Your data is stored in secure cloud servers (US-based). By using Onikey, you consent to this storage. We do not sell or transfer your data outside our systems.
Questions About Privacy?
Email us anytime:
We respond within 48 hours — often faster.