Privacy Policy

OneLess helps you create, schedule and publish social media content, and see how it performs. This policy explains what we collect — including what we access from the social accounts you connect — why we access it, how it is stored, and how to have it deleted.

Overview

At oneless.ai, accessible from https://oneless.ai, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by oneless.ai and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in oneless.ai. This policy is not applicable to any information collected offline or via channels other than this website.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

Social platform data we access

OneLess is a social media management tool. When you choose to connect a social media account, you are taken through that platform's own official authorisation screen (OAuth), where you see and approve the exact permissions being granted. We access only the data covered by the permissions you approve, and only for the accounts you connect.

Depending on which platforms you connect, we may access and store the following:

Facebook Pages — your name and Facebook user ID, the list of Pages you manage and your role on them, each Page's name, ID and profile picture, content published to those Pages through OneLess, previously published Page posts, comments on your Pages, and Page and post insights such as reach, impressions, engagement and follower counts.

Instagram (Professional and Business accounts) — your Instagram account username, account ID, profile picture, follower and media counts, media published through OneLess, previously published media, comments on your media, and media and account insights such as reach, impressions, likes, saves and profile views.

LinkedIn — your name, profile picture and LinkedIn member ID, the Company Pages you administer along with their names, IDs and logos, posts published through OneLess, and post and Page analytics such as impressions, clicks, reactions, comments and follower counts.

X (formerly Twitter) — your handle, user ID, display name and profile picture, posts published through OneLess, and post metrics such as impressions, likes, reposts and replies.

YouTube — your channel name, channel ID and channel thumbnail, videos uploaded or scheduled through OneLess along with their titles, descriptions, tags and thumbnails, your existing video list, and channel and video analytics such as views, watch time, subscribers, likes and comments, retrieved through the YouTube Data API and the YouTube Analytics API.

TikTok — your account username, open ID and avatar, videos published through OneLess, and video metrics such as views, likes, comments and shares.

Access tokens — for each connected account we store the OAuth access token, the refresh token where the platform issues one, the token's expiry time, and the list of permission scopes you granted. These tokens are what allow OneLess to publish and read performance data on your behalf without asking you to log in again for every action. How we protect them is described under Storage, security and AI providers.

Content you create in OneLess — the captions, copy, images, videos, hashtags, campaign briefs, schedules and drafts that you create, upload or generate inside the product.

Why we access platform data

We access the data described above for two purposes, and only those two:

  • To publish on your behalf. So that content you create or schedule in OneLess can be posted to the accounts and Pages you have connected, at the time you chose, and so that we can show you which accounts, Pages and channels are available to post to.
  • To show you performance. So that we can display analytics and reporting for content published to your connected accounts — reach, impressions, engagement, follower growth and similar metrics — and help you understand what is working.

Supporting these two purposes also means we keep your connection alive (refreshing tokens so your scheduled posts do not fail), notify you when a connection breaks or a post fails, and provide customer support when you ask for it. We do not use platform data for any purpose beyond this.

What we never do with your data

To state this without ambiguity:

  • We do not use your data for advertising. Data obtained from your connected social accounts is never used for advertising or ad targeting — not ours, and not anyone else's. We do not build advertising audiences, custom audiences or ad profiles from it, and we do not pass it to any advertising network, ad server or data broker. oneless.ai does not display third-party advertising.
  • We do not sell your data. We do not sell, rent, license, trade or otherwise make your personal information or your platform data available to third parties for their own commercial purposes.
  • We do not use your data to train AI models. Your platform data and your content are not used to train, fine-tune or otherwise develop artificial intelligence or machine learning models — neither ours, nor those of the AI providers we work with. Where we use third-party AI providers to generate copy or images for you, we do so under terms and settings that exclude your inputs and outputs from being used for model training.
  • We do not share your data beyond what is needed to run the service. Aside from the service providers described below, we share personal information only where you have asked us to, or where we are legally required to do so.

How we use your information

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website and the OneLess service
  • Improve, personalize, and expand our website and the OneLess service
  • Understand and analyze how you use our website and the OneLess service
  • Develop new products, services, features, and functionality
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the service, and for our own marketing and promotional purposes (we never use data obtained from your connected social accounts for this)
  • Send you emails
  • Find and prevent fraud

Storage, security and AI providers

Where your data is stored. Your account information, the content you create and the platform data we retrieve are stored on managed cloud infrastructure operated by reputable hosting and database providers on our behalf. Data may be processed and stored on servers located in India and in other countries where our infrastructure providers operate. All data is transmitted over encrypted connections (TLS/HTTPS) and is encrypted at rest.

Access tokens are encrypted. The OAuth access tokens and refresh tokens for your connected social accounts are encrypted at rest using strong industry-standard encryption (AES-256), with keys held separately from the stored data. Tokens are decrypted only at the moment they are needed to carry out an action you have requested — publishing a post, or fetching your analytics. Tokens are never exposed in our user interface, never written to application logs, and never shared with any third party, including our AI providers.

Who can access your data. Access to production systems is restricted to the small number of authorised personnel who need it to operate and support the service, is protected by individual credentials and multi-factor authentication, and is logged.

Third-party AI providers. OneLess uses third-party artificial intelligence services — large language model and image generation APIs — to help generate captions, copy, creative concepts and images for you. When you use a feature that generates content, the relevant inputs are sent to that provider's API so the output can be produced. This may include your brief or prompt, brand details you have entered, and any text or images you supply for the request. We do not send your access tokens, your login credentials, or your audience members' personal information to AI providers. We use these providers under API terms that do not permit your inputs or outputs to be used to train their models.

Other service providers. We also rely on providers for cloud hosting, databases and storage, transactional email, error monitoring and product analytics, and payment processing. Each processes data only on our instructions, and only to the extent needed to provide their service to us.

Security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do maintain safeguards appropriate to the sensitivity of the data we hold, and if a breach affects your personal information we will notify you and any relevant authority as required by applicable law.

Data retention and deletion

Disconnecting an account. You can disconnect any connected social media account at any time from within OneLess, under your account settings. Disconnecting immediately revokes OneLess's access to that account: we revoke the credentials with the platform so they can no longer be used, we stop making any calls to that platform on your behalf, and any scheduled posts queued for that account are cancelled. The stored credentials are removed from our systems when you request full deletion, as described below. You can also revoke OneLess's access directly from the platform itself — through your Facebook or Instagram settings, LinkedIn's permitted services page, your X connected apps, your Google account permissions for YouTube, or TikTok's app management settings.

Deleting your data entirely. To request deletion of your OneLess account and all associated data, email us at devops@oneless.ai from the email address registered to your account, with the subject line “Data Deletion Request”. We will verify the request and complete the deletion within 30 days. This covers your profile and account information, all connected-account tokens, all platform data we retrieved and cached (including insights and published-post records), and the content, drafts and schedules you created in OneLess — including copies held in routine backups, which are purged on a rolling cycle within the same period.

What we may keep. We may retain a minimal set of records where we are legally required to, such as invoices and tax records, and anonymised or aggregated statistics that cannot be linked back to you or to any individual. Deleting your OneLess data does not delete the posts that were published to your own social media accounts — those live on the platform, and you control them there.

Retention while your account is active. While your account is open we keep your data for as long as it is needed to provide the service. Cached platform insights are refreshed and retained only for as long as they remain useful for your reporting.

Google API Services — Limited Use

OneLess uses Google APIs, including the YouTube Data API Service and the YouTube Analytics API, to let you publish videos to and view analytics for the YouTube channels you connect. By connecting a YouTube channel, you are also agreeing to the YouTube Terms of Service.

Information we receive from Google APIs is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements:

OneLess's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice this means we use Google user data only to provide and improve the user-facing features you connected your channel for; we do not transfer that data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition; we do not use it for advertising purposes; we do not allow humans to read it except with your explicit consent, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymised; and we do not use it to develop, improve or train generalised or non-personalised AI or machine learning models.

Google's own handling of your information is described in the Google Privacy Policy. You can review and revoke OneLess's access to your Google account at any time at https://myaccount.google.com/permissions.

Log Files

oneless.ai follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, oneless.ai uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

Third Party Services

This Privacy Policy applies to oneless.ai only. It does not apply to the social media platforms you connect to OneLess, or to any other third-party website or service. Each of those parties has its own privacy policy, and we encourage you to read them:

You can choose to disable cookies through your individual browser options. To find more detailed information about cookie management with specific web browsers, please refer to the browsers' respective websites.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

  1. RIGHT TO ACCESS - You have the right to request copies of your personal data. We may charge you a small fee for this service.
  2. RIGHT TO RECTIFICATION - You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
  3. RIGHT TO ERASURE - You have the right to request that we erase your personal data, under certain conditions.
  4. RIGHT TO RESTRICT PROCESSING - You have the right to request that we restrict the processing of your personal data, under certain conditions.
  5. RIGHT TO OBJECT - You have the right to object to our processing of your personal data, under certain conditions.
  6. RIGHT TO DATA PORTABILITY - You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

oneless.ai does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Contact us

If you have any questions about this Privacy Policy, want to exercise any of your data protection rights, or want to request deletion of your data, contact us at:

Email: devops@oneless.ai

OneLess is a product of Tpglobal Creations Private Limited. We aim to respond to every privacy enquiry within 30 days.

Registered office: 18th Floor, 1807, Lodha Supremus, Saki Vihar Road, Mumbai, Maharashtra 400072, India

CIN: U74999MH2018PTC310428

Terms of Service

Please read our Terms of Service.