Privacy Policy

Deduxer S.R.L., tax id RO50140604, registered office at București, România, makes and operates Onist. For everything in this policy where we decide why and how data is processed, we are the controller. Write to legal@onist.ro for anything about your data.

This policy covers the Onist website, the demo line and callback requests, the chats on Onist's own WhatsApp number, the accounts of the businesses that use Onist, the calls, messages and bookings the receptionist handles for them, and the booking page. It applies from 31 October 2026.

We act in two roles, and your rights depend on which one applies.

• We are the controller for the website, the demo line, the callback form, the guide on Onist's own WhatsApp number, the accounts and billing of our customers, our own marketing and support. Sections 3 to 12 apply in full.
• We are a processor when the receptionist answers a call to a business that uses Onist, books an appointment, sends an SMS or a WhatsApp message, or when someone books through that business's booking page. The business is the controller and decides what happens to the data. We process it on the business's instructions under the data processing agreement in our Terms of Service.

If you called a business that uses Onist, here is what happened to your call. The receptionist told you at the start of the call that it is an AI. The call was not recorded. A transcript and a short summary went to the business, together with your phone number and what you asked for, so that the business can call you back, book you in or answer your question. The business can delete the call at any time. We do not keep your voice, we do not build a voice profile, and we do not contact you on our own behalf.

To exercise your rights over such a call, contact the business. If you cannot reach it or it does not answer, write to us and we will help.

If you write to Onist's own WhatsApp number and have no Onist account, you are talking to Onist's AI guide, and we are the controller. The guide tells you in its first answer that it is an AI. It answers your questions about Onist and, if you ask, opens an account for your business on that WhatsApp number, right in the chat, but only after you tap the button under the message that links to the Terms and this policy. We keep your WhatsApp number, the chat and what you tell the guide about your business, such as its name, trade, city and website and your first name, plus what the map search found about it. Send STOP and we never write to you again; START opens the chat again. If you stop replying in the middle of a conversation, the guide sends you at most one reminder, between 45 minutes and 3 hours later, and none after you tap "Not now", unless you ask for the account again. Section 8 says how long the chat is kept.

Customer account data includes contact and business information, services, staff, availability and configuration. The enabled phone, booking and messaging features process customer contact details, service or vehicle details, appointments, messages, consent evidence, and call transcripts and summaries. Call audio is processed while the call lasts and is not stored. Paddle handles payment credentials; Onist receives billing status and transaction references. Temporary authentication messages contain a verification link and expire from the delivery queue.

The receptionist says it is an AI at the start of every call. The caller's audio goes to the speech provider only while the call lasts, so the AI can understand the request and answer. On lines with Andrei's voice that provider is OpenAI. On lines set to another voice, Soniox turns the caller's speech into text, Anthropic's Claude writes the reply and Cartesia or ElevenLabs speaks it, depending on the voice; TypeSafe may check whether words picked up in the background were said to the receptionist. Onist does not record calls and does not store the audio. It keeps the transcript and a short summary.

On Onist's own WhatsApp number the replies are written by Claude, Anthropic's AI: the owner's assistant for an owner who linked their number, and the guide described in section 2 for anyone else. If we switch the owner's assistant on WhatsApp back to OpenAI, which runs the assistant in the app, OpenAI writes those replies instead; section 6 says what it then receives. The guide says it is an AI in its first answer and never claims to be a person. A photo or a PDF sent there is read by Claude, which writes a short description of it; Onist keeps the description, not the file. A voice note is transcribed by Kapso or, when Kapso sends no transcript, by OpenAI.

Someone who taps Call on Onist's own WhatsApp number talks to the same AI receptionist as on a phone call, and it says it is an AI the same way. Meta connects the call and LiveKit carries its audio while it lasts; Onist does not record it and keeps the transcript and a short summary, as for a phone call.

On WhatsApp the owner's assistant can remember what the owner tells it about themselves and the shop, such as a day off or who the mechanic is, so that later chats know it. Each memory is one short line in the owner's account, visible only to that owner and their assistant. The owner can ask the assistant to forget any of them; section 8 says how long they stay.

Onist does not use customer content to train AI models, and our providers may not use it to train theirs.

The receptionist is not an emergency service. A caller who describes an emergency in which a life is in danger is told to hang up and call 112.

Each provider below receives only the data its job needs, under a contract that binds it to our instructions. Paddle is the exception: as merchant of record it sells the service in its own name and is a separate controller for payment data.

When you choose to sign in with Google or Apple, or to connect a Google or Apple calendar, that company receives what the connection needs, under its own terms, as a service you picked. The same goes for the apps a business connects through Composio, such as Gmail, Outlook, Google Sheets, Google Drive, Instagram, Facebook pages and Calendly: each receives what the assistant asks of it and what the owner approves sending through it, and nothing is sent or saved there until the owner approves a confirmation card that shows it in full. We give data to authorities only when the law requires it.

The database, the files, the phone agent, error reports and optional analytics are in the European Union: Supabase in Frankfurt, Railway in Amsterdam, LiveKit's EU region, and Sentry and PostHog in Frankfurt.

Some data leaves the European Economic Area. The AI on calls runs on OpenAI's global service in the United States, and ElevenLabs, Cartesia, Anthropic, Soniox, TypeSafe, Telnyx, Google, Kapso, Composio, Meta, Resend and Vercel's edge network also process data there. Each of these transfers relies on the Standard Contractual Clauses adopted by the European Commission, in the provider's data processing terms. Paddle processes payment data in the United Kingdom, which the European Commission recognises as giving adequate protection.

Write to legal@onist.ro for a copy of the safeguards that apply to a provider.

• Call audio is not stored. It exists only while the call lasts.
• Transcripts, summaries, bookings, contacts and messages stay while the business's account exists, unless the business deletes them sooner. The owner can delete the whole account from the app, which removes this data at once. When a business stops using the service, the data stays available for export for at least 30 days.
• The owner's conversation with the assistant, in the app and on WhatsApp, is kept as the assistant's chat history: each message is deleted 90 days after it was written, and so is each confirmation card. The messages an owner sends to Onist's WhatsApp number also wait in a queue until the assistant answers; that copy is deleted 14 days after the message arrived. Both are deleted at once with the account.
• What the owner's WhatsApp assistant remembers stays until the owner asks it to forget or deletes the account. Each owner keeps at most 200 memories; past that, the one saved longest ago is deleted.
• Chats with the guide on Onist's WhatsApp number from people without an account are deleted after 90 days without a new message. After a STOP, the chat and what the guide noted are deleted 90 days later and only the number is kept, marked as opted out, so that we never write to it again. If the person opens an account in the chat, the chat and what the guide noted are deleted together with the account. If that number sent STOP, the opt-out mark stays, without the chat or anything the guide noted, so that STOP still holds. Otherwise, a later message from that number starts a new chat with the guide, under the same rules.
• Technical records of how a call was connected are deleted after 30 days.
• Sign-in emails: the contents expire within one hour, the delivery record after 30 days.
• Invoices and accounting records stay as long as tax law requires.
• A deleted account leaves an audit entry that it existed and the record of which legal terms were accepted. Both hold identifiers only.
• Database backups roll off on a fixed schedule. If one is ever restored, the deletions made since then are applied again before access reopens.

Database policies keep each business's data apart. Files are private and open only through links that expire. Changes are audited and application logs leave out caller content. Data is encrypted in transit and at rest. No call audio is stored. Keeping data in the EU does not remove international transfers, which section 7 describes.

Under the GDPR you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct it;
• delete it;
• restrict how we use it, or object to a use based on legitimate interest;
• give it to you, or to another provider, in a machine-readable form;
• withdraw a consent you gave; that does not affect what was done before.

Write to legal@onist.ro. We may ask you to confirm who you are. We answer within one month; if a request is complex we may take up to two more months and we tell you. Exercising your rights is free.

If you called a business that uses Onist, send your request to that business, which is the controller. If you cannot reach it, write to us and we pass the request on and help.

You can complain to a supervisory authority. In Romania that is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, dataprotection.ro. In Italy it is the Garante per la protezione dei dati personali, garanteprivacy.it. You can also complain to the authority of the country where you live.

Essential cookies keep you signed in, remember your language and display choices, and remember for 30 days an offer link you arrived through. Vercel Web Analytics counts page views and a few button clicks without cookies. On the public pages and the signup page, PostHog hosted in the EU records without cookies how you move through the page (scrolls, clicks), with every form field and your own words in the demo masked, so we can see where visitors stop; the app behind sign-in is not recorded. Optional product analytics in the app stays off until you allow it and never captures form contents, call audio, messages or booking receipt tokens. If you decline analytics on this page, your visits are not recorded either. If you arrived from a Meta ad, our server sends Meta the click id, your IP address and browser when you spend 30 seconds on the site, press a start button, start a demo or open an account, so we know which ads bring customers.

The website, the demo and the app are for adults acting for a business. We do not knowingly collect data from anyone under 18. A minor may still call a business that uses Onist; in that case the business is the controller and the call is handled like any other. If you think we hold data about a child without a valid basis, tell us and we delete it.

We update this policy when the service or the law changes. The date at the top tells you which version you are reading. For changes that matter, we email our customers before they take effect.

Deduxer S.R.L., București, România. Tax id RO50140604, trade register J2024003862236. Email legal@onist.ro. Phone +40 745 077 209.