Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Invisible Pipeline Ltd ("we", "us", "our"), operating as OneForU, collects, uses, stores, and protects your personal data when you use our AI content generation platform. We are committed to handling your information responsibly and transparently.

1. What Data We Collect

1.1 Account Information

• Name and email address (provided at signup)
• Password (hashed, never stored in plain text)
• Billing details (processed and stored by Stripe, not on our servers)
• Profile preferences and settings

1.2 Voice DNA Data

• Voice recordings uploaded for voice profile training
• Transcriptions derived from your recordings
• Voice profile analysis (tone, vocabulary patterns, sentence structure, communication style markers)
• Voice presets and custom configurations you create

1.3 Content and Usage Data

• Content you generate using the platform (drafts, published outputs, templates)
• Prompts and instructions you provide to the AI
• Feature usage patterns (which tools you use, how often, for how long)
• Session data (login times, device type, browser, IP address)

1.4 Automatically Collected Data

• Browser type and version
• Device information (operating system, screen resolution)
• IP address and approximate location (country/region level)
• Referring URLs and pages viewed
• Cookie identifiers (see Section 8)

2. How We Use Your Data

• Service delivery. Processing your inputs, generating content, training your voice profile, and providing platform features.
• Voice profile training. Analysing your voice recordings and text samples to build an AI model that matches your communication style. This model is unique to your account and not shared with other users.
• Account management. Authentication, billing, subscription management, and customer support.
• Analytics and improvement. Understanding how the platform is used so we can improve features, fix bugs, and optimise performance. Analytics data is aggregated and anonymised wherever possible.
• Communication. Sending transactional emails (receipts, password resets, important service updates). We may also send product updates and tips, which you can unsubscribe from at any time.
• Legal compliance. Meeting our obligations under applicable law, including responding to legal requests and preventing fraud.

3. Third-Party Services

We use trusted third-party providers to operate OneForU. These services process your data only as necessary to provide their function:

AI providers process your prompts and text to generate content. They do not use your data to train their models when accessed through our API. We have data processing agreements in place with each provider.

4. Data Retention

• Account data. Retained for the lifetime of your account plus 30 days after deletion.
• Generated content. Stored until you delete it or close your account.
• Voice profiles. Stored until you delete them or close your account.
• Usage analytics. Aggregated and anonymised data may be retained indefinitely for product improvement. Individual session data is deleted after 90 days.
• Billing records. Retained for 7 years as required by UK tax law.

5. Your Rights

You have the right to:

1. Access. Request a copy of all personal data we hold about you.
2. Export. Download your content and voice profile data in a portable format.
3. Correct. Update or correct inaccurate personal information.
4. Delete. Request deletion of your account and all associated data.
5. Restrict processing. Ask us to limit how we use your data in certain circumstances.
6. Object. Object to processing based on legitimate interests.
7. Portability. Receive your data in a structured, machine-readable format.

To exercise any of these rights, email support@oneforu.ai. We will respond within 30 days.

6. GDPR Compliance

If you are located in the European Economic Area (EEA) or the United Kingdom, the following applies:

• Legal basis. We process your data based on: (a) your consent (voice recordings), (b) contractual necessity (delivering the service you pay for), (c) legitimate interests (analytics, security, fraud prevention), and (d) legal obligations (tax records, law enforcement requests).
• Data controller. Invisible Pipeline Ltd is the data controller for personal data processed through OneForU.
• International transfers. Some data is processed by providers in the United States (Supabase, Stripe, Vercel, AI providers). These transfers are protected by Standard Contractual Clauses approved by the European Commission.
• Supervisory authority. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

7. Data Security

• All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Database access is restricted by row-level security policies.
• Authentication uses industry-standard protocols (PKCE, secure session tokens).
• We conduct regular security reviews and maintain access controls limiting employee access to personal data on a need-to-know basis.
• In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by GDPR.

8. Cookies

OneForU uses the following types of cookies:

• Essential cookies. Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies. Help us understand how you use the platform. These are anonymised and can be disabled in your browser settings.
• Preference cookies. Remember your settings (theme, language, layout choices).

We do not use advertising or tracking cookies. We do not sell your data to advertisers or data brokers. Ever.

9. Children's Privacy

OneForU is not intended for users under 18. We do not knowingly collect data from minors. If we learn that a user is under 18, we will promptly delete their account and data.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. The "Last updated" date at the top of this page indicates when the latest revision was published.

11. Contact

For privacy-related questions, data requests, or concerns:

• Email: support@oneforu.ai
• Post: Invisible Pipeline Ltd, 67 Poynter House, 1 Queensdale Crescent, London, W11 4TB, United Kingdom