Last updated 8 September 2026. Onsa is operated by Empatika Labs, Inc. This policy explains what personal data we hold, why, and what you can ask us to do about it. If anything here is unclear, write to bayram@onsa.ai.
When you create an Onsa account we hold your email address, your name where you give it, your workspace and its settings, your billing status, and a record of how you use the product — the searches you run, the campaigns you create, and the messages you approve.
We use it to run the service, to bill you, to support you, and to understand which parts of the product work. Payment card details are handled by Stripe and never reach our servers.
Onsa is a sales tool, so it necessarily holds information about people who are not Onsa users — the prospects our customers are trying to reach. We treat that as a distinct category of personal data.
What we hold. Name, LinkedIn profile URL, current job title and employer, location, industry, and where available a business email address and company website. We also hold a written assessment of why that person matches a customer's stated ideal-customer profile, and — where our customer has sent LinkedIn outreach through Onsa — the messages exchanged.
Where it comes from. Professional profile information published by the individual on public professional networks, retrieved through licensed data providers, together with information our customers supply about who they want to reach.
Why we hold it. To let our customer identify and contact potential business contacts. The lawful basis is legitimate interest in business-to-business commercial communication, and our customer is the controller of the prospect data in their workspace.
Who can see it. Only the workspace that ran the search. Prospect records are scoped to a workspace and are not shared between customers, sold, or used to train models.
When a workspace is reached through an AI assistant such as Claude or ChatGPT, the assistant acts for the customer under a token bound to that one workspace, which cannot reach another. Prospect records are returned into the customer's own assistant conversation and are handled under that assistant provider's terms from that point. Onsa does not read, store or otherwise collect the surrounding conversation.
How long. Prospect records are kept while the customer's workspace is active. Customers can delete individual records at any time.
Our website uses Google Analytics (property G-BEYWD5MXNC) and HubSpot, which set cookies to measure traffic and to handle enquiry forms. The Onsa application uses Google Analytics (property G-CR8WYQWF8W) and Microsoft Clarity, which records how people move through the interface so we can find and fix usability problems. You can block these with your browser's cookie controls.
We use a small number of processors to run the service: Google Cloud for hosting, Stripe for payments, SendGrid for transactional email, Unipile for connecting a customer's own LinkedIn account, and the analytics providers named above. We do not sell personal data.
Onsa runs on Google Cloud infrastructure. Data may be processed in the United States and in the European Union.
You can ask us to confirm what we hold about you, to correct it, or to delete it. If you are a prospect who has been contacted through Onsa, you can ask us to remove your information and we will delete it and tell our customer that you have asked not to be contacted.
Write to bayram@onsa.ai. We answer within 30 days. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
If we change this policy we will update the date at the top of this page.