Privacy
Last updated September 2026. This is a plain-language draft written to describe what the software actually does. It has not been reviewed by a lawyer and will be before any paid plan launches.
Two kinds of data, and the difference matters
Yours. Your account, what you tell ONE about yourself, and everything your business records. ONE decides how this is handled, and this policy governs it.
Your customers’. If you publish a shop, ONE also holds data about people who have never heard of ONE — their name, email, shipping address, what they ordered. That data is yours to answer for, not ours: you decide what happens to it and ONE only does what your use of the product instructs. If one of your customers asks to be deleted, they ask you, and you can do it from inside ONE. We will help, but we will not act on your customers’ data without you.
What ONE collects about you
Your Google account’s name and email when you sign in. What you tell ONE during discovery — hours, budget, skills, location, what you are trying to get away from. Everything your business records: products, stock, orders, customers, invoices, staff records including pay rates, expenses and the event ledger. Tokens for services you connect (Stripe, Shopify, Meta, shipping), stored encrypted. Images you upload, such as a logo or product photos.
Who else sees it
Anthropic. ONE is built on Claude. When it writes a plan, a brand, a website, a supplier shortlist or a campaign, the relevant parts of your business description are sent to Anthropic to generate it. Anthropic does not train models on this.
Infrastructure. Supabase stores the database and uploaded files; Vercel runs and serves the application; Resend delivers email. Each sees data in the course of providing that service.
Services you connect. Stripe, Shopify, Meta, shipping carriers. ONE acts on those accounts only when you tell it to, and their own terms govern what they do.
People you invite. If you add someone to your business, they see it according to their role. Owners and managers see everything including money and pay; staff see orders, stock and customers, and cannot see finances, margins, supplier terms or anyone’s pay but their own.
Anyone, if you publish. A published shop, its product pages, its photos and its prices are public on purpose. Uploaded images are served from a public address, so treat anything you upload as publishable.
Two shared directories, and what goes into them
ONE keeps two pooled records so that every founder is not paying for the same research twice, and you should know they exist because your use of the product contributes to them.
The business directory. When ONE researches a kind of business — “candle brand”, “mobile dog grooming” — it keeps what it learned about that category, so the next person asking gets an answer without another round of research. What is stored is scrubbed first: it holds general phrases about the trade, never your name, your business name, your location, your numbers or anything that identifies you.
The supplier directory. When ONE finds a supplier, it keeps the supplier’s own business details — who they are, what they make, where they are — so other founders can find them too. Suppliers are companies, not private individuals, and this is their trade information. Your commercial terms with a supplier are not shared: what you were quoted, what you negotiated and what you ordered stay in your workspace. Where ONE shows aggregate pricing it is a count and a range across many founders, never a figure traceable to one.
Because these hold no personal data of yours, they survive if you delete your account. If you would rather a specific contribution were removed, ask and we will remove it.
ONE emails you about your own account and the alerts you switch on. Separately, if you switch on abandoned-cart recovery, ONE sends email to your customers under your shop’s name — only to those who ticked the consent box at checkout, once per person, with your postal address and an unsubscribe link that works immediately. Those are your marketing messages and you are responsible for them; ONE builds them to meet US law and will not send them without the address that law requires.
What ONE never does
No selling data. No advertising. No sharing your business information with anyone beyond what is written above. No using your customers’ addresses for anything other than your own shop’s messages — a customer of one shop on ONE is never contacted by another.
Getting your data out, and getting rid of it
You can export everything your account holds as a single file, and you can delete your account, both from Account settings and without asking anyone. Deleting removes your profile, your businesses and everything under them — products, orders, customers, invoices, staff, the ledger, published shops, uploaded images. Where a business has other members, you will be asked to hand it over or delete it outright rather than leaving people locked out of their own work. Backups roll off within 30 days.
Some records survive deletion because we are required to keep them or because they are not yours alone: payment records held by Stripe under their own obligations, and the de-personalised directory entries described above.
Children
ONE is for adults running businesses and is not directed at anyone under 18.
Contact
Privacy questions, or a request about data: reply to any email from ONE or use the feedback link in the product.