Privacy Policy

1. Introduction

Onyx AI Labs ("Company," "we," "us," or "our") operates the Onyx Legion application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using Onyx Legion, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Profile picture (optional)
• Timezone
• Use case preferences
• Referral source

2.2 Usage Data

We automatically collect:

• Query history and conversations
• Query mode preferences (Single, Parallel, Legion)
• Token usage and purchase history
• App settings and preferences
• Device information (operating system, app version)
• IP address and general location

2.3 Payment Information

When you purchase tokens, payment processing is handled by Stripe. We do not store your credit card details. We receive:

• Transaction confirmation
• Purchase amount and token pack selected
• Billing name and address (for receipts)

2.4 API Keys (BYOK)

If you choose to use your own API keys (Bring Your Own Keys), these are stored locally on your device and are never transmitted to our servers.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the App
• Process your queries through third-party AI services
• Manage your account and token balance
• Process transactions and send purchase confirmations
• Send product updates and communications (with your consent)
• Improve and personalize the App experience
• Monitor usage patterns and prevent abuse
• Comply with legal obligations

4. Third-Party Services

4.1 AI Model Providers

Your queries are sent to one or more of the following services:

• Anthropic (Claude) - anthropic.com/privacy
• OpenAI (GPT) - openai.com/privacy
• Google (Gemini) - policies.google.com/privacy
• xAI (Grok) - x.ai/privacy
• DeepSeek - deepseek.com/privacy

4.2 Infrastructure Services

• Firebase (Google Cloud) - Authentication and data storage (US servers)
• Stripe - Payment processing

5. Data Storage and Security

5.1 Storage Location

Your data is stored on Firebase servers located in the United States. By using the App, you consent to the transfer of your data to the United States.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Access controls and authentication
• Regular security assessments

5.3 Data Retention

• Account data: Retained until you delete your account
• Conversation history: Retained until you delete individual conversations or your account
• Payment records: Retained for 7 years for tax and legal purposes

6. Your Rights

6.1 Access and Portability

You can request a copy of your personal data at any time.

6.2 Correction

You can update your account information through the App settings.

6.3 Deletion

You can delete your account and all associated data through the App settings. Some data may be retained for legal compliance.

6.4 Opt-Out

You can opt out of marketing communications at any time through your account settings or by clicking "unsubscribe" in any email.

6.5 GDPR Rights (European Users)

If you are in the European Economic Area, you have additional rights including the right to lodge a complaint with a supervisory authority.

6.6 CCPA Rights (California Users)

California residents have the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information.

7. Children's Privacy

Onyx Legion is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

8. Cookies and Local Storage

The App uses local storage on your device to:

• Store your preferences and settings
• Cache conversation history
• Store API keys (if using BYOK)

We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new policy in the App
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

11. Jurisdiction

This Privacy Policy is governed by the laws of the Province of Ontario, Canada, without regard to conflict of law principles.