Privacy Policy

1. Who we are

This Privacy Policy explains how Seven Mice Ltd, a company registered in England and Wales under company number 16407976, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("Seven Mice Ltd", "we", "us", "our"), collects and uses personal data when you visit onevia.app or use the OneVia service (the "Service"). Seven Mice Ltd is the data controller for the personal data described in this policy.

This policy should be read alongside our Terms of Use and our Community Guidelines.

2. What personal data we collect

• Contact data — your email address, for example when you register an account.
• Account and profile data — once accounts are available, information such as your username, password (stored in hashed form), and anything you choose to add to your profile.
• Content data — posts, comments, polls, and other content you publish on the Service, along with associated metadata such as timestamps.
• /ask questions — if you use our optional AI research feature, the question you type and, where you use it as a reply, the text of the post you're replying to. See section 6.
• Usage and device data — IP address, browser and device type, and standard web server log data collected automatically when you use the Service.
• Communications — anything you send us directly, such as a support request or a report about another user's content.
• Advertiser data — if you create an advertiser account to buy advertising on the platform, we collect your advertiser account details; payment is handled by our payment processor, Revolut, as described in section 7 below.
• Cookie data — see section 4 below.

3. How we use your data

We use personal data for the following purposes, on the following legal bases under UK GDPR:

• To provide, maintain, and secure the Service, and to manage your account — performance of a contract with you.
• To screen posts for attacks on a person before publication, using our AI provider, OpenAI, and to review reports of content that may breach our Community Guidelines — our legitimate interest in keeping the Service safe and enforceable, as described in our Terms of Use.
• To generate an answer when you choose to use the optional /ask research feature, using our AI provider, OpenAI, which may perform a web search and/or search OneVia's own posts on your behalf — performance of a contract with you, only when you deliberately trigger the feature.
• To detect, investigate, and prevent fraud, abuse, and security incidents — our legitimate interest in protecting the Service and its users.
• To comply with legal obligations, such as responding to lawful requests from courts or regulators — legal obligation.
• To show advertising through Google AdSense on our marketing website, where you have accepted advertising cookies — your consent.
• To sell and serve first-party advertising within the OneVia platform, and to process advertiser payments through Revolut — performance of a contract with the advertiser, and our legitimate interest in funding the Service. This does not involve your personal data if you are a platform user rather than an advertiser — platform adverts are not targeted using your data.

4. Cookies & similar technologies

We use two categories of cookie, and only on our marketing website (onevia.app):

• Necessary cookies — used to remember your light/dark theme preference and your cookie choice. These are essential to the Service and do not require consent.
• Advertising cookies — set by Google AdSense on our marketing website to select and measure adverts. These are only set if you click "Accept all" in our cookie banner, and never before.

You can change your choice at any time using the "Cookie preferences" link in the footer of any page. The OneVia platform itself does not set any advertising or tracking cookies — adverts shown within the platform are not personalised and do not rely on cookie data (see section 5 below).

5. Advertising, Google AdSense & platform advertisers

OneVia is partly funded by advertising, in two distinct ways:

• Our marketing website is funded by Google AdSense. If you consent to advertising cookies, Google acts as an independent data controller for the data it collects to select and measure adverts, including via cookies and similar technologies. Google's use of this data is governed by Google's own Privacy Policy, and you can review or change your ad personalisation settings at adssettings.google.com.
• The OneVia platform sells and serves its own advertising directly to independent advertiser accounts. Adverts are selected by advertising purchased, not by any data about you, and no cookie or tracking technology is used to place them. If you are an advertiser, your payment is processed by Revolut, an independent data controller for that payment data — see Revolut's Privacy Policy. Our Terms of Use sets out the commercial terms that apply to advertiser accounts.

6. AI features: /ask and content screening

OneVia uses a third-party AI provider, OpenAI, to power two features:

• Content screening. Before a post is published, its text is sent to OpenAI to check for one thing only — whether it attacks a specific person. This happens automatically, in real time, for every post; there's no human review at this stage unless the post is later reported.
• /ask research answers. If you choose to use the optional /ask feature, the question you type — and, if you're replying to another post, the text of that post — is sent to OpenAI, which may perform a web search and/or search OneVia's own posts to research an answer. The resulting answer is published on your post for anyone to see. We only send what's needed to answer your question; we don't send your account details, email, or phone number to OpenAI as part of this process.

We rely on OpenAI's own data protection commitments as our processor for these features, and we do not permit either feature's input to be used to train OpenAI's models. See our Terms of Use for what content screening and /ask do and don't do — in particular, neither feature makes Seven Mice Ltd the author of, or a guarantor of the accuracy of, any post or AI-generated answer.

7. How we share your data

We do not sell your personal data. We share it only with:

• Service providers who host our infrastructure or otherwise process data on our behalf, under contracts that require them to protect it;
• OpenAI, to screen posts for personal attacks before publication and to generate answers when you use the /ask feature (see section 6);
• Google, for advertising purposes on our marketing website, where you have consented to advertising cookies;
• Revolut, to process payments from advertisers who buy advertising on the OneVia platform;
• Law enforcement, courts, or regulators, where we are legally required to disclose data, or to enforce our Terms of Use;
• A buyer or successor, in the event of a merger, acquisition, or sale of some or all of our business, subject to the same protections described in this policy.

8. International data transfers

Some of the providers we use, including Google and OpenAI, are based outside the UK, including in the United States. Where personal data is transferred internationally, we rely on legally recognised safeguards such as the UK's International Data Transfer Addendum, Standard Contractual Clauses, or an equivalent adequacy mechanism.

9. How long we keep your data

• Account and content data are kept for as long as your account is active, and for a limited period afterwards to allow for account recovery, backups, and legal compliance.
• /ask questions are kept for as long as the post they're attached to exists on the Service, and are not retained by us separately once that post is deleted.
• Server log data is kept only for as long as needed for security and troubleshooting purposes.

In each case, we keep personal data only for as long as necessary for the purposes described in this policy, or as required by law.

10. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Have your data deleted, in certain circumstances;
• Restrict or object to certain processing, including processing based on legitimate interests;
• Receive your data in a portable format, where processing is based on consent or contract;
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected].

11. Children

The Service is intended for users aged 18 and over, as set out in our Terms of Use. We do not knowingly collect personal data from children.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to notify users. The date at the top of this page shows when it was last updated.

14. How to complain

If you have concerns about how we handle your personal data, please contact us first at [email protected] so we can try to resolve it. You also have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk · 0303 123 1113

15. Contact us

Seven Mice Ltd
Company number: 16407976
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: [email protected]