Privacy Policy

Last Updated: 12/3/2025

Introduction

Onboardly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our client onboarding platform and services (the "Service"). Please read this Privacy Policy carefully to understand our practices regarding your personal data.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Information You Provide to Us

Account Information

  • Name (first and last)
  • Email address
  • Password (encrypted)
  • Phone number (optional)
  • Company name
  • Website URL
  • Profile picture (optional)

Client Information

When you use our Service to onboard clients, we collect client names, email addresses, company information, phone numbers, timezone preferences, and WhatsApp numbers (if provided).

Onboarding Data

We collect onboarding workflow configurations, step submissions and responses, form data, document uploads, contract signing information, payment information, meeting scheduling data, and access credentials.

1.2 Information Automatically Collected

We automatically collect usage data including IP address, browser type, device information, operating system, pages visited, click patterns, feature usage statistics, and error logs.

1.3 Information from Third-Party Services

We receive information from payment processors (Stripe, PayPal, Wise), authentication services (Google OAuth) and scheduling services (Calendly).

2. How We Use Your Information

  • To provide, maintain, and improve our Service
  • To process and complete onboarding workflows
  • To facilitate client communications
  • To process payments and manage subscriptions
  • To send automated reminders and notifications
  • To analyze usage patterns and improve functionality
  • To comply with legal obligations and ensure security

3. Data Sharing and Disclosure

We share information with third-party service providers who perform services on our behalf, including payment processors, cloud infrastructure providers, communication services, analytics services, and authentication services.

We may also disclose your information if required by law, in response to legal processes, or to protect our rights and property.

4. Data Storage and Security

We implement industry-standard security measures including encryption in transit and at rest, secure password hashing, regular security audits, access controls, and secure API endpoints.

Data is stored on secure servers, and files are stored using AWS. We retain account data while your account is active and for a reasonable period after closure.

5. Your Rights and Choices

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your data
  • Download your data in a machine-readable format
  • Opt-out of marketing communications
  • Manage cookie preferences

If you are located in the European Economic Area (EEA), you have additional rights under GDPR, including the right to erasure, right to restrict processing, and right to data portability.

6. Cookies and Tracking Technologies

We use essential cookies for Service functionality, analytics cookies (Microsoft Clarity), and preference cookies. You can control cookies through browser settings.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and adequate data protection measures.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending email notifications for material changes.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at admin@onboardly.agency.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of sale of personal information (we do not sell personal information).