Privacy Policy
Effective March 2026
Information We Collect
We collect information you provide directly when you create an account, request access, or contact us. This includes your name, email address, company name, and any messages you send.
When you use the Onicis platform, we automatically collect usage data such as feature interactions, agent execution logs, and performance metrics. We also collect technical data including your browser type, IP address, and device information through standard web technologies.
Our on-premise agents collect infrastructure telemetry (system metrics, service status, log patterns) from your machines. This data is processed to detect and remediate incidents. We do not access the content of your files or personal data stored on monitored machines.
How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Onicis platform
- Detect, classify, and auto-remediate IT incidents on your infrastructure
- Send transactional emails (account confirmations, incident alerts, billing)
- Analyze usage patterns to improve product features and performance
- Respond to support requests and communicate about your account
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your infrastructure data to train machine learning models for other customers.
Data Storage
Account and platform data is stored on servers hosted by Vercel and associated cloud providers in the United States. Database services are provided through managed PostgreSQL instances with encryption at rest (AES-256) and in transit (TLS 1.3).
Infrastructure telemetry collected by Onicis agents is transmitted over encrypted channels and stored with strict access controls. Incident data is retained for 90 days on standard plans and up to 1 year on Enterprise plans.
Backups are performed daily and stored in geographically redundant locations. You may request deletion of your data at any time by contacting us.
Third-Party Services
We use the following third-party services to operate the platform:
- **Clerk** β Authentication and user management. Clerk processes your login credentials, session tokens, and profile information. See Clerk's privacy policy at clerk.com/legal/privacy.
- **PostHog** β Product analytics. PostHog collects anonymized usage events to help us understand how features are used. We do not track personally identifiable information through PostHog. See posthog.com/privacy.
- **Vercel** β Hosting and deployment. Vercel processes web requests and may collect IP addresses and access logs. See vercel.com/legal/privacy-policy.
- **Resend** β Transactional email delivery. Resend processes email addresses and message content for notifications we send. See resend.com/legal/privacy-policy.
We require all third-party providers to handle data in accordance with applicable privacy laws.
Your Rights
You have the right to:
- **Access** β Request a copy of the personal data we hold about you.
- **Correction** β Request correction of inaccurate or incomplete data.
- **Deletion** β Request deletion of your personal data from our systems.
- **Portability** β Receive your data in a structured, machine-readable format.
- **Objection** β Object to processing of your data for specific purposes.
- **Withdraw consent** β Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at guilherme@onicis.com. We will respond within 15 business days.
LGPD Compliance
For users in Brazil, we comply with the Lei Geral de Protecao de Dados (LGPD, Law No. 13,709/2018). We process personal data based on legitimate interest, contractual necessity, or explicit consent, depending on the context.
We appoint a Data Protection Officer (DPO) reachable at guilherme@onicis.com. We maintain records of processing activities and conduct impact assessments when required.
In the event of a data breach that may pose risk to data subjects, we will notify the Autoridade Nacional de Protecao de Dados (ANPD) and affected users within the timeframe required by law.
Contact
If you have questions about this Privacy Policy or how we handle your data, contact us:
- **Email:** guilherme@onicis.com
- **GitHub:** github.com/ssssantiago/onicis
This policy is effective as of March 2026 and may be updated periodically. We will notify registered users of material changes via email.