Privacy Policy

1. Who we are

OnePlace is a mobile app operated by Fortwall Digital ("Fortwall Digital", "we", "us"). This Privacy Policy explains what information OnePlace handles when you use the app and the website oneplace.work, how we use it, and the choices you have.

Fortwall Digital, 8 The Green, Dover, DE 19901. See our Contact page for phone and email.

2. Information we handle

Your OnePlace account

• A passkey credential that lets you sign in. The private part of the passkey stays on your device; we store only the public key.
• Basic account details needed to operate the service, such as an account identifier and the date the account was created.

Connected accounts

• When you connect Slack, Microsoft, Google or Meta, the service grants OnePlace an access authorization (OAuth tokens). We store these tokens encrypted on our servers. They are never stored on your phone.
• The identifier of each connected account (for example, the email address or workspace you connected), used to show you which account a message belongs to.

Message content

• Our servers do not store the content of your messages. Messages are fetched from each service when your phone syncs and passed to your device.
• WhatsApp Business exception: Meta delivers each message only once, so we hold incoming WhatsApp Business messages on our servers until your phone collects them, and delete them within a few hours after that.
• When a service notifies OnePlace of new activity, we keep only the event identifier, briefly, so the same event is not processed twice.

On your device

• Messages are kept in an encrypted database on your phone for speed, search and offline reading. By default this covers the last 30 days of each account; you can change the window per account or wipe it from the app at any time.

Technical information

• Operational logs needed to run and secure the service. Our logs never contain message content, account names or credentials.

3. How we use information

We use the information above only to provide the features you ask for:

• Show your messages from connected services in one inbox.
• Let you search your messages on your device.
• Send the replies you write and confirm, through the original service, if you have turned on sending.
• Keep the service secure, prevent abuse and fix problems.

We do not use your message content for advertising, and we do not use it to train machine-learning models.

4. Google user data

OnePlace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We access Gmail data only to display your mail in your OnePlace inbox and, if you turn on sending, to send replies you confirm.
• We do not transfer Gmail data to others except as needed to provide this feature, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Gmail data for advertising, and no person reads it unless you give explicit consent for a specific message, it is needed for security purposes, or it is required by law.

5. Sharing

We do not sell your personal information. We share information only:

• With the service you are connected to, when OnePlace fetches your messages or sends a reply you confirmed.
• With infrastructure providers that host and operate OnePlace on our behalf, under contracts that limit their use of the data.
• When required by law, or to protect the rights, safety and security of our users and the service.

6. Security

• OAuth tokens are encrypted at rest on our servers.
• All traffic between your phone, OnePlace and each service uses encrypted HTTPS connections.
• On your phone, messages are stored in an encrypted database.
• You sign in with a passkey, so there is no OnePlace password to leak.

No system is perfectly secure, but we design OnePlace to hold as little of your data as possible.

7. Retention and deletion

• Disconnecting an account: from Connected accounts in the app. We delete the tokens we held and remove that account's messages from your phone. For Slack and Google we also revoke our access at the service. Microsoft and WhatsApp Business do not let an app revoke its own access, so the permission stays listed in your account settings there until you remove it; we no longer hold anything that could use it.
• Deleting your data: tap Delete my data in your profile. Your OnePlace account, connected-account tokens and local messages are removed immediately.
• Your messages always remain in the services they belong to.

8. Your choices and rights

You can review and remove connected accounts, change the sync window, turn sending on or off, and wipe local data from within the app. Depending on where you live, you may have rights to access, correct, delete or export your personal information. To make a request, contact us.

9. Children

OnePlace is not directed to children under 13, and we do not knowingly collect information from them.

10. Changes

We may update this policy. If we make material changes, we will notify you in the app or on this page before they take effect.

11. Contact

Fortwall Digital, 8 The Green, Dover, DE 19901. See our Contact page for phone and email.