1. Data we collect
Your account and sign-in. Name and email address, organization, role and approval status; sign-in records and tokens issued by our authentication service; for the Connector, the OAuth grant you approve (the connecting client, the scopes email and offline_access, and access and refresh tokens).
Through the Connector (tool inputs and outputs). When your AI assistant calls a Connector tool, we receive the tool's inputs and pass them to your Ongage account, and we return Ongage's answer to the assistant. Depending on the tool, this is:
- account summary: default list ID and contact, user and list counts;
- contact lists, contact field definitions and system field definitions (names, IDs, types and counts);
- segments: names, descriptions and filter criteria, which can include values such as an email domain or a first name;
- email messages: name, subject, pre-header, HTML content, sender name, sender and reply-to address, and tags;
- campaigns and Events (recurring campaigns): name, description, schedule, targeted and excluded segments, message, sending connection and status;
- sending connections: IDs, titles and ESP names;
- automation workflows: name, status, triggers, conditions and nodes;
- analytics: the plain-language question you ask and aggregate results (sends, opens, clicks, bounces, complaints, unsubscribes, click-through rates) for campaigns, workflows and Events;
- reference lists of browsers, operating systems and countries used in filters;
- in Claude on an Airis plan only: transactional email (the recipient addresses, sender and message you give), and Contacts Activity reports (report definitions and, when you ask for them, contact-level rows with email address and activity, up to 500 per request).
In ChatGPT, and on any plan other than an Airis plan, the Connector has no tool that returns individual contact records. It can create new drafts (campaigns, segments, email messages, tags and workflows); it cannot send email, schedule or publish anything, or change or delete existing content.
In Claude on an Airis plan, the Connector can also send transactional email, schedule campaigns, publish, pause and end workflows, change or delete existing email messages, segments, workflows and Contacts Activity reports, and return Contacts Activity rows. By default Claude asks for your approval before each of these actions; you control this per tool in Claude's connector settings.
On WhatsApp. When you link WhatsApp, we store the link: your user and organization, your WhatsApp profile name, the identifier WhatsApp gives us for you, and your phone number when WhatsApp shares it. We keep the messages you send to Airis there, Airis's replies, and the inputs and outputs of each tool Airis uses to answer, which are the same kinds of data as the Connector's above. On WhatsApp, Airis can read your account and create drafts (campaigns, segments, email messages, tags and workflows) after you reply YES; it cannot send email, schedule or publish anything, or change or delete existing items. Voice notes, images and other media are not read.
When you use the App. Your chats with Airis and the files you attach to them; content you create or generate (emails, newsletters, images, brand book, products, competitors and brand voice); your registration answers and business profile; your website address and the public pages we scan when you ask us to; and data the App reads from your Ongage account to show it to you.
Billing. Plan, subscription status and billing events. Card and wallet details are collected by our payment provider, not by us.
Usage, device and marketing data. Usage counters and product events; technical data such as IP address, browser and device type and country; and, on our marketing and signup pages, cookies and click identifiers from Google and Meta ads and session recordings.
2. How we use it
- To provide the App and the Connector: sign you in, check that your organization is approved and connected to Ongage, and carry out the requests you or your AI assistant make.
- To generate content and analysis you ask for, using AI models.
- To bill you and manage your subscription.
- To keep the service secure and reliable: detect abuse, investigate errors and measure load.
- To send service emails such as sign-up confirmation, team invitations and the Airis digest you enable.
- To understand how the product is used and improve it, and to measure our own advertising.
We do not sell personal data, and we do not use the data in your Ongage account or the Connector's tool inputs and outputs for advertising.
3. Who receives it
We share personal data only with the following, and only as needed for the purposes above:
- The AI assistant you connect (for example OpenAI's ChatGPT or Anthropic's Claude): receives the Connector's tool outputs to answer you, under that provider's own privacy policy and your workspace settings. You choose and control this connection.
- Ongage platform (Ongage Ltd): stores and processes your email marketing data and executes the Connector's requests with your account's API key.
- Supabase: database, authentication, file storage and server functions.
- Vercel and Cloudflare: website hosting and delivery.
- Anthropic: AI model provider for Airis chat, content generation and analysis in the App, and for Airis's replies on WhatsApp.
- Meta (WhatsApp Business Platform): carries the messages between you and Airis on WhatsApp, under WhatsApp's own terms and privacy policy.
- Replicate, fal.ai, HeyGen, ElevenLabs, AssemblyAI, Deepgram and Jina AI: only when you use image, video, audio, transcription or website-scan features, for the inputs of that feature.
- SendGrid (Twilio): delivery of service emails.
- Polar, with Stripe for card and wallet payments: checkout, billing and the customer portal.
- Google: Tag Manager and Analytics, Ads conversion measurement (hashed email or click ID), Gmail Postmaster data if you connect it, and Cloud Storage for backups.
- Meta: ads conversion measurement (hashed email, browser identifiers, IP address and user agent). Server-side conversion events are not sent for visitors from the EU, EEA or UK.
- Microsoft Clarity: session recordings on some marketing and signup pages.
- Slack: internal operational alerts to our team, which can include your email address.
- Authorities or others where required by law, or in connection with a merger or acquisition.
4. How long we keep it
- Connector tool inputs and outputs: not stored by us. They pass through to Ongage and back to your assistant. Errors are written to our server logs with the tool name and error message, and kept for up to 30 days.
- WhatsApp messages (your messages, Airis's replies and the tool inputs and outputs of each answer): 90 days, then deleted. The WhatsApp link stays until you disconnect it; a disconnected link is kept as a record of the connection. A link code is stored only as a one-way hash and expires after 15 minutes.
- Connector access tokens: expire after 1 hour. Refresh tokens are rotated on use and expire after 90 days without use, or earlier when you disconnect or we revoke them.
- Account snapshots (the summary of your account that Airis reads): 30 days.
- Website visit events and inactive anonymous visitor sessions: 90 days.
- Funnel trace events: about 4 to 5 months.
- Email validation results: 7 days after they expire.
- Backups: rotated, up to 30 days.
- Advertising click data (click IDs and the identifiers captured at signup): 13 months.
- Your account, Airis chats and attachments, generated content, brand book, business profile and usage events: kept while your account is active, and deleted within 30 days after you close your account or ask us to delete it (see section 5).
- Billing records: 7 years, because tax and accounting law requires it. Everything else about your account is deleted as above.
Data in your Ongage account is retained as described in the Ongage privacy policy and your Ongage agreement.
5. Your controls and rights
- Disconnect the Connector at any time in your AI assistant's connector or app settings. To also have us revoke the grant and its tokens on our side, email privacy@ongage.com.
- Disconnect WhatsApp at any time: reply STOP to Airis on WhatsApp, or use Settings › Profile › WhatsApp in the App. Airis then stops replying on that number.
- Limit what the Connector can reach: it acts with your organization's Ongage account and only through the tools listed in the assistant. In ChatGPT, and on any plan other than an Airis plan, everything it creates is a draft you review in Ongage. In Claude, you choose per tool whether it needs your approval, in Claude's connector settings.
- Access, correction, export and deletion: email privacy@ongage.com from your account's email address. We will verify the request and complete it within 30 days. Your contact data can also be exported from Ongage directly.
- Cookies: you can block or delete cookies in your browser.
- Depending on where you live, you may have further rights, such as to object to or restrict processing, and to complain to your data protection authority.