1. Company Information
OneChannelAdmin LLC
8 W Darlington Ave, Kissimmee, FL 34746, Florida, USA
Privacy
OneChannelAdmin Privacy Policy
This Privacy Policy explains how OneChannelAdmin LLC collects, uses, stores, shares, protects, and processes information when customers, users, website visitors, administrators, and business partners access our Services.
The Services include our websites, applications, APIs, artificial intelligence services, integrations, marketplace services, fulfillment services, and related offerings.
By accessing or using the Services, you acknowledge this Privacy Policy.
2. Scope
This Privacy Policy applies to:
- websites
- portals
- applications
- APIs
- integrations
- AI services
- marketplace connections
- operational platforms
- mobile applications
- customer support interactions
This Privacy Policy does not apply to third-party websites or services.
3. Information We Collect
Account Information
- full name
- company name
- email address
- phone number
- billing details
- account identifiers
- user role
- login information
Customer Operational Data
- product catalogs
- inventory
- pricing
- purchase orders
- shipments
- warehouse information
- customer records
- transactions
- analytics
- marketplace data
- fulfillment data
Transaction Information
- invoices
- payment metadata
- subscription records
- billing history
- usage charges
- payment status
We do not intentionally store full payment card information except where required by authorized payment workflows.
Technical Information
- IP address
- browser information
- operating system
- device identifiers
- session logs
- diagnostic records
- API requests
- security events
- authentication activity
Location Information (1CA Partner mobile app)
- precise device location (GPS) of drivers, collected only while the driver has switched on their shift, including in the background when the app is closed or the screen is off
- location is used to show the driver on the dispatcher's live map, to show the kitchen and the customer how far away an order is, and to estimate arrival times
- the app shows an in-app disclosure and asks for the driver's consent before the operating-system location permission prompt; a notification is shown while location is being shared
- switching off the shift or signing out stops location collection completely; location can also be turned off in the phone's settings at any time
- location is visible to the driver's own company (dispatch and kitchen staff with tracking access); customers only see the driver's first name and position while their order is on its way
- location is not sold, not used for advertising, and not shared with third parties for their own purposes
- driver location points are deleted automatically after 7 days
Mobile App Device Permissions
- camera: scanning barcodes and taking photos of products, received goods, or proof of delivery, only when you choose to
- photos: attaching images you select
- Bluetooth and approximate location (1CA RFID app): connecting to Zebra RFID readers; Android requires the location permission to scan for Bluetooth devices, and the app does not store your location
- notifications: a device push token so we can send order and task alerts
- approximate or precise location (customer ordering apps): filling in a delivery address and finding the nearest restaurant, only while the app is open
AI Service Data
- prompts
- uploaded files
- generated outputs
- workflow requests
- automation actions
- interaction logs
- AI configuration settings
AI-generated content may be stored for operational, security, troubleshooting, and audit purposes according to applicable retention rules.
Support Data
- support tickets
- chat records
- support attachments
- troubleshooting information
- customer communications
4. Information We Do Not Intentionally Collect
The Services are not intended for children or child-directed activity.
We do not knowingly collect personal information from children.
5. How We Use Information
We process information to:
- provide Services
- authenticate users
- process subscriptions
- synchronize inventory
- execute workflows
- provide support
- improve platform reliability
- maintain security
- monitor performance
- generate analytics
- operate AI features
- detect fraud
- troubleshoot issues
- communicate service updates
- comply with legal obligations
6. Legal Bases for Processing
Where applicable, we process information under:
- contract performance
- legitimate interests
- legal obligations
- consent
- protection of rights
- customer instructions
7. Data Ownership
Customer retains ownership of Customer Data.
OneChannelAdmin receives limited rights necessary to:
- host
- process
- secure
- transmit
- synchronize
- operate Services
- provide support
- maintain platform reliability
Customer remains responsible for permissions, notices, consent, and lawful collection of Customer Data.
8. AI Processing
AI services may process:
- prompts
- uploaded information
- outputs
- operational requests
- workflow instructions
- automation requests
Customers remain responsible for validating AI outputs before relying on them for business, pricing, inventory, publishing, compliance, or operational decisions.
AI capabilities may use third-party AI providers and infrastructure providers. AI-related processing is further described in the AI Policy and Subprocessors List.
9. AI Training and Service Improvement
Customer Data is not automatically used to train shared AI foundation models by default.
By default, Customer Data processed through AI features is used to:
- provide the requested AI functionality
- generate outputs
- operate workflows
- monitor reliability
- improve security
- troubleshoot service issues
- maintain auditability
OneChannelAdmin may use limited operational, aggregated, anonymized, or diagnostic information to improve platform performance, reliability, security, and user experience.
Where supported and permitted by applicable law, Customers may enable optional settings or provide written authorization allowing selected information to be used for:
- AI feature improvement
- workflow optimization
- quality enhancement
- model evaluation
- service improvement
Enterprise Customers may request additional controls where available, including training restrictions, data isolation, custom retention, and AI usage limitations.
10. Data Sharing
We may share information only where necessary to provide, secure, support, bill, and improve the Services.
Service Providers
- cloud infrastructure
- database providers
- payment providers
- analytics services
- email delivery providers
- monitoring providers
- AI processing providers
- storage providers
- search providers
Optional Ecosystem Services
- OneDirectBuy
- OneFulfillCenter
Customer Data is not shared with ecosystem services unless enabled by Customer or required under a separate agreement.
Legal Requests
- to comply with law
- to protect rights
- to investigate misuse
- to enforce agreements
- to prevent fraud or security threats
11. Google User Data
Customers can choose to connect Google services to the Services. We request access only when a Customer clicks Connect for a feature, and only the access that feature needs. The Customer can disconnect at any time from the Services or from their Google Account settings, which stops our access.
What we access and why
- Google Merchant Center (content): to list, update and remove the Customer's own products in their Merchant Center account from their catalog in the Services.
- Google Ads (adwords): to show the Customer's own campaign and performance reports and to manage campaigns the Customer creates in the Services.
- Google Analytics (analytics.readonly): to show the Customer's own website traffic and sales reports in their dashboard.
- YouTube (youtube.upload, youtube.readonly): to publish videos the Customer creates in the Services to their own YouTube channel, and to show the connected channel name and upload status.
- Google Calendar (calendar.app.created, calendar.calendarlist.readonly): to add the Customer's scheduled posts and tasks to a calendar created by the Services.
- Basic profile (email, openid): to identify which Google account is connected.
How we protect and limit Google user data
- OAuth tokens are stored encrypted on our servers and are never sent to the browser or shared with other customers.
- Google user data is used only to provide the features above to the Customer who connected it. We do not sell it, use it for advertising, or transfer it to third parties except as needed to provide the Services, for security, or to comply with law.
- We do not use Google user data to develop, improve or train generalized or shared AI or machine-learning models.
- Humans at OneChannelAdmin do not read Google user data unless the Customer asks us to for support, it is needed for security or to comply with law, or it is aggregated and anonymized for internal operations.
- When a Customer disconnects a Google service or closes their account, we delete the related tokens and stop accessing that data; data already imported into the Customer's account follows the retention section of this policy.
OneChannelAdmin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Use of YouTube features is also subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).
12. International Data Transfers
Services may operate across:
- United States
- Europe
- Canada
- Mexico
Data transfers may rely on:
- contractual safeguards
- operational protections
- applicable legal mechanisms
13. Data Retention
Retention periods may vary by Service, feature, agreement, legal requirement, and operational need.
Default Targets
- Orders: Up to 2 years or applicable legal requirements
- Driver location points (1CA Partner app): 7 days
- Logs: Up to 6 months
- AI Data: Up to 6 months
- Backups: Up to 6 months
- Support records: Reasonable operational period
Retention may extend where required for legal obligations, dispute resolution, fraud prevention, security, billing, audits, or compliance.
14. Security
Security controls may include:
- encryption at rest
- encryption in transit
- role-based access control
- MFA
- audit logging
- monitoring
- backups
- penetration testing
- access restrictions
Security practices are designed to support alignment with recognized frameworks.
Unless separately stated, Company does not represent formal certification.
15. Your Rights
Depending on jurisdiction, users may request:
- access
- correction
- deletion
- export
- restriction
- objection
- withdrawal of consent
We may require verification before completing requests.
16. GDPR Rights
Where applicable, individuals may have rights to:
- access
- portability
- rectification
- deletion
- restriction
- objection
- lodge a complaint with a supervisory authority
17. California Privacy Rights
Where applicable, California residents may have rights to:
- know what personal information is collected
- request deletion
- request correction
- limit use of sensitive personal information
- opt out where applicable
OneChannelAdmin does not sell Customer Data as part of normal platform operations.
18. Cookies
Cookie handling appears in the Cookie Policy.
Users may be able to:
- accept cookies
- reject non-essential cookies
- modify preferences
19. Third-Party Services
Third-party services remain governed by their own terms and privacy policies.
Customers are responsible for reviewing third-party terms when enabling integrations.
20. Incident Response
Security incidents may be handled under internal response procedures.
Notifications may occur where required by law, contract, or applicable policy.
21. Changes
We may revise this Privacy Policy.
Updated versions become effective when published unless otherwise stated.
22. Contact
OneChannelAdmin LLC
8 W Darlington Ave
Kissimmee, FL 34746
Florida, USA