Privacy notice

This notice applies to people who create an Onden account at onden.ai and to the information they enter into the product. It will change as Onden develops.

• Account information: your email address, display name, sign-in credentials handled by our authentication provider, and your plan.
• Pursuit information you enter: opportunities, customer and stakeholder details, notes, evidence, value cases, readiness answers and win plan content.
• Research and AI output generated for your opportunities, including the pages retrieved from the customer's own public website.
• Support content you send us: bug reports, feature requests, support messages and access requests.
• Outreach email addresses and unsubscribe status: if we email you directly about Onden, we store your address and whether you have opted out, solely so we can honor that opt-out. We keep the suppression record for that purpose even after you unsubscribe.
• Basic product-usage events, which do not contain customer, stakeholder, pricing or pursuit content.

Opportunity and pursuit records are stored against your user account and protected by row-level access rules in our database, so other Onden users cannot read them. Onden staff can access underlying data where necessary to operate, support and debug the service.

Customer research retrieves pages from the customer website you have saved on the opportunity — that is, first-party public web pages. Competitor research works the same way and only retrieves pages from a competitor website you name yourself. Broad internet and news research is not connected. We do not buy or ingest third-party personal data profiles, other than an optional stakeholder lookup that you trigger explicitly.

To provide the service, the content of an opportunity may be sent from our servers to a third-party AI model provider to generate analysis, questions, hypotheses and documents. This happens on our servers, not in your browser, and only when you trigger an AI action. Do not enter information you are not authorized to share with a cloud AI service.

• We do not sell your information.
• We do not use your customer or deal content to advertise to you.
• If you start the new-opportunity form before signing in, your in-progress answers are held in that browser tab's session storage so you do not lose them while creating an account; they are cleared when the opportunity saves successfully or when the tab closes. An opportunity's web address and its “last visited” key can also contain a short slug derived from the customer name you typed, so the page can be linked and bookmarked. Nothing else about a deal is kept in your browser or in a web address. See the security and data handling page for detail.

A visitor who has not created an account can run a small number of free guest deal analyses at /try/deal. Against the rate-limiting record we keep only that a run happened, its outcome and how long it took, keyed to a non-reversible caller identifier — never the content submitted.

So the analysis is not lost when a visitor decides to create an account, the text submitted and the result are also held on our servers behind an unguessable single-use token that can be claimed for 24 hours. Only that token is kept in the browser tab, for the length of the session; it never appears in a web address or in usage analytics. Once the analysis has been moved into the new account the held text and result are cleared and only the record of which opportunity it became is kept, so a retry cannot create a duplicate. An automatic cleanup runs every hour: it removes copies nobody claimed once they expire, and claimed records after 30 days. Anything already moved into an account is covered by the deletion options below.

You can edit or delete individual opportunities at any time from the workspace. You can delete all of your Onden data, or close your account entirely, using “Delete my data” in the workspace sidebar; that action is permanent. Password reset is available from the sign-in screen.

Self-service data export is not available yet. If you need a copy of your data, contact us through our contact page or Help & feedback → Contact support.

We keep your account and pursuit information while your account exists. When you delete your data or close your account, the associated records are deleted from the live database. Copies may persist for a period in infrastructure-level backups operated by our cloud provider, which we do not control and cannot selectively edit.

Questions about this notice can be sent through our contact page or Help & feedback → Contact support inside the product. See also our security and data handling page and terms.