Privacy Policy

Onyx is a customer-relationship and operations platform for epoxy flooring contractors, providing quoting, scheduling, invoicing, payments, and lead management. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Onyx web application and related services (the “Service”), operated by Onyx (“Onyx”, “we”, “us”).

We collect the following categories of information:

• Account & business information. Details you provide when you create and configure an account — such as your name, email address, business name, team members, pricing, and settings.
• Customer & lead information. Information about your customers and prospects that you enter or that is captured through the Service — including names, phone numbers, email addresses, job addresses, quotes, appointments, payments, photos, and messages.
• Lead information from connected advertising platforms. If you connect a Meta (Facebook or Instagram) Page, we receive the lead form submissions generated by your Lead Ads — typically the customer’s name, phone number, email address, and any other fields your lead form requests — together with related ad attribution (for example the campaign, ad set, ad, and form the lead came from). We access this data using access tokens you authorize, in order to deliver those leads into your Onyx account.
• Call recordings & transcripts. When call recording is enabled on your account, phone calls made and received through Onyx are recorded and converted to text. An announcement is played to both parties at the start of every such call, and transcription is never performed without it. You can turn recording off entirely in Settings, and you can choose to keep only the transcript so no audio is retained.
• Photos and camera. Photos you take or upload — of job sites, floors, and completed work — together with any images your customers send you. Location data is removed from photos when they are uploaded. Photos you add to a portfolio entry are published on a public page that anyone with the link can view.
• Email from a connected mailbox. If you connect your own email account, we retrieve the messages in it so your email conversations appear alongside the rest of a customer’s history. You can disconnect at any time.
• Usage & device information. Standard technical data such as log records, IP address, browser type, and interactions with the Service, used to operate, secure, and improve it.

• To provide, operate, and maintain the Service and its features.
• To deliver leads captured from connected platforms into your account and notify you of them.
• To send quotes, invoices, receipts, reminders, and other communications you initiate to your customers.
• To process payments and keep accurate financial records.
• To secure the Service, prevent abuse, and comply with legal obligations.
• To improve and develop new features.

We do not sell your information, and we do not use lead data for advertising to your customers.

Data we receive from Meta (Facebook and Instagram) is used solely to deliver and manage the leads generated by your own Lead Ads within your Onyx account. Our access and use of this data complies with the Meta Platform Terms and Developer Policies. Access tokens are stored encrypted, are used only for the connected Page’s lead retrieval, and are removed when you disconnect the integration. You can revoke Onyx’s access at any time from your Facebook settings or by disconnecting the integration in Onyx.

We share information only with service providers who help us run the Service, under agreements that require them to protect it. These include cloud hosting and database providers, and providers for email, SMS, and payment processing. We may also disclose information if required by law or to protect the rights, safety, and security of Onyx, our users, or the public. We never sell personal information.

Because they handle the most sensitive material, we name these specifically:

• Twilio carries phone calls and SMS, and stores call audio where recording is enabled.
• Groq converts call audio to text. Audio is sent to Groq for transcription only, and is not used to train their models.
• Stripe processes card payments. Card numbers are handled by Stripe and never reach Onyx.
• Google, where you have connected a mailbox, Google Ads, or a Business Profile.

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer needed, we delete or de-identify it.

Call recordings. Where an account is set to keep only transcripts, the audio is deleted as soon as it has been transcribed and only the text is retained. Where audio is kept, it is retained with the rest of the account’s history until deleted.

Published portfolio pages remain publicly accessible until the entry is deleted from the account.

You may access, correct, export, or delete information held in your account. You can also request that we delete data associated with you or your customers.

• Disconnect Meta: In Onyx, open Settings → Integrations and disconnect the Meta integration. This removes the stored access tokens and stops further lead retrieval.
• Request deletion: Email us at admin@onyx-tech.ai with the subject “Data Deletion Request”, and we will delete the associated data within 30 days, except where we are required to retain it by law.

We use technical and organisational measures to protect information, including encryption of sensitive credentials, access controls, and secure hosting. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect their information.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service.

Questions about this policy or your data? Contact us at admin@onyx-tech.ai.