Privacy Policy

1. Introduction

OneLess ("we," "our," or "us") operates an SMS-based assistant. This Privacy Policy describes what data we collect, why we collect it, how we use and store it, and your rights. By using OneLess, you agree to this policy.

2. Data We Collect

We collect:

• Phone number — to deliver SMS and identify your account
• Email address — if you use the email-sending feature or sign in with Google
• Location data — city or zip you provide for weather and timezone
• Google Calendar data — events and metadata when you connect your Google account
• SMS content — messages you send to and receive from OneLess
• Usage metrics — request counts, token usage, and feature usage for billing and product improvement

3. Why We Collect It

We use this data to provide the service: routing your messages, sending reminders, syncing your calendar, delivering digests, and improving reliability and features.

4. How Data Is Stored

Data is stored in PostgreSQL on our servers. Sensitive values (API keys, tokens) are encrypted at rest and managed via Rails credentials and environment configuration.

5. Third-Party Data Sharing

We share data only as needed to operate the service:

• Twilio — SMS delivery (phone number and message content)
• Anthropic / Claude — message content is sent to their API for intent classification and responses
• Google — calendar sync when you connect your Google account
• Stripe — billing (payment method, email, subscription data)

Each provider has its own privacy policy governing their use of data.

6. Data Retention

We retain:

• SMS content and message history according to our internal retention policy (e.g., for a limited period to support the service and troubleshooting)
• Usage events and notes for as long as your account is active and as needed for billing and support

You may request deletion of your data (see Your Rights below).

7. Your Rights

You may:

• Request a copy of your data (data export)
• Request deletion of your account and associated data
• Opt out of marketing or non-essential SMS (e.g., reply STOP for digests)

To request export or deletion, contact us at the address below.

8. Cookies and Sessions

We use a Rails session cookie to keep you logged in when you visit our website. We do not use third-party tracking or advertising cookies.

9. Contact

For privacy inquiries, data requests, or questions about this policy, contact us at:

support@one-less.io

10. Children (COPPA)

OneLess is not intended for users under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.