Last updated 11 October 2026. Onsa is operated by Empatika Labs, Inc. This policy explains what personal data we hold, why, and what you can ask us to do about it. If anything here is unclear, write to bayram@onsa.ai.
When you create an Onsa account we hold your email address, your name where you give it, your workspace and its settings, your billing status, and a record of how you use the product — the searches you run, the campaigns you create, and the messages you approve.
We use it to run the service, to bill you, to support you, and to understand which parts of the product work. Payment card details are handled by Stripe and never reach our servers.
Emails we send you. We email you about your own account: when a search finds new leads, a reminder when leads you looked at are still waiting for your review, when a prospect replies to outreach sent through Onsa, a daily outreach summary, short tips for getting started (for example, how to run your first search in ChatGPT), and occasional product news. We decide which of these to send from your activity in Onsa — for example, whether you have run a search or connected LinkedIn — never from your conversations with an AI assistant. Every one of these emails has an unsubscribe link. There are three lists — account activity, getting-started tips and product news — and unsubscribing from one does not stop the others. Sign-in codes are always sent.
We keep your account information while your account is open, and delete it within 90 days after you close it, except billing records we must keep for longer by law. Records of how Onsa's agent handled your requests — which include your search briefs and the prospect records returned — are kept for about 90 days and then deleted.
Onsa is a sales tool, so it necessarily holds information about people who are not Onsa users — the prospects our customers are trying to reach. We treat that as a distinct category of personal data.
What we hold. Name, LinkedIn profile URL, current job title and employer, location, industry, and where available a business email address and company website. We also hold a written assessment of why that person matches a customer's stated ideal-customer profile, and — where our customer has sent LinkedIn outreach through Onsa — the messages exchanged.
Where it comes from. Professional profile information published by the individual on public professional networks, retrieved through licensed data providers, together with information our customers supply about who they want to reach.
Why we hold it. To let our customer identify and contact potential business contacts. The lawful basis is legitimate interest in business-to-business commercial communication, and our customer is the controller of the prospect data in their workspace.
Who can see it. Only the workspace that ran the search. Prospect records are scoped to a workspace and are not shared between customers, sold, or used to train models.
When a workspace is reached through an AI assistant such as Claude or ChatGPT, the assistant acts for the customer under a token bound to that one workspace, which cannot reach another. Prospect records are returned into the customer's own assistant conversation and are handled under that assistant provider's terms from that point. Onsa does not read, store or otherwise collect the surrounding conversation. If you ask the assistant to use another tool you have connected to it, such as your CRM, Onsa never connects to that tool: the assistant reads it on your behalf, and Onsa receives only what you approve sending — for example the names or web domains of your existing customers, so a search leaves them out. Those are stored with that search in your workspace, like any other search brief.
How long. Prospect records are kept while the customer's workspace is active. Customers can delete individual records at any time.
Our website uses Google Analytics (property G-BEYWD5MXNC) and HubSpot, which set cookies to measure traffic and to handle enquiry forms. The Onsa application uses Google Analytics (property G-CR8WYQWF8W) and Microsoft Clarity, which records how people move through the interface so we can find and fix usability problems. You can block these with your browser's cookie controls.
We use a small number of processors to run the service, each only for the purpose named:
We do not sell personal data.
Onsa runs on Google Cloud infrastructure. Data may be processed in the United States and in the European Union.
You can ask us to confirm what we hold about you, to correct it, or to delete it. If you are a prospect who has been contacted through Onsa, you can ask us to remove your information and we will delete it and tell our customer that you have asked not to be contacted.
Write to bayram@onsa.ai. We answer within 30 days. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
If we change this policy we will update the date at the top of this page.