Privacy at Onix

Who we are and scope

Onix is operated by Guardião D’Ónix Unipessoal LDA, NIPC 519 441 630, Praceta João de Deus, n.º 13, rés-do-chão esquerdo, 2745-798 Massamá, Sintra, Lisboa, Portugal. Contact privacy@transferguardians.com.

This notice covers the Onix app and web service. It is intended for professionals aged 18 or older. App stores, the corporate website and external services have their own notices.

Responsibility for data

The operator determines the processing needed for account administration, security, support and its own obligations. When your organization decides which contracts, people and documents to use and for what purpose, it is responsible for that processing; Onix provides the service under its instructions and applicable terms. You may contact us even if you do not know which organization is responsible.

Data and sources

We receive your account email, identifier, profile name when provided, preferences, organization memberships and roles. Authentication uses credentials and sessions; do not send passwords to support.

Authorized users and integrations configured by the organization may supply contracts, amounts, deadlines, professional contacts, obligations, documents, external references and action history. Records may contain data about other people. The organization should supply only necessary, lawfully obtained data.

Hosting and security services process technical request data, such as IP address and device/browser context. Onix history links actions to a user and organization. We do not configure advertising, advertising tracking or optional analytics in the application.

Purposes and legal grounds

Accounts and support: providing the contracted service where the individual is a party to the contract; for other professional access, managing the relationship and providing the service to the organization based on relevant legitimate interests. Security: preventing abuse and protecting access and integrity, balancing individual rights. Legal obligations: responding to specific duties and valid requests. Consent: only where requested for a purpose that requires it, with withdrawal available.

The organization determines the legal grounds for data it enters into contracts and processes. Making an integration available does not authorize importing data without a legal ground. Authentication and authorization data are required to sign in and operate; other data depends on the functions used.

Service providers and integrations

Supabase provides authentication, database and storage; the verified primary Onix database region is Paris. Cloudflare hosts the web service and API and provides network and security functions. Resend delivers authentication emails; general product email delivery remains disabled in this version.

An integration sends or receives only data needed for the action and access configured by the organization. External providers, such as Salesforce, SAP, Microsoft and M-Files, also apply their own terms. We do not sell personal data or use it for behavioral advertising.

International transfers

EU hosting does not mean all processing stays in the EU. Providers may process data in other countries; Supabase identifies transfers to Singapore and the United States, and Resend identifies primary processing in the United States. Their protections include contractual clauses and other applicable mechanisms. You may request information about relevant providers and safeguards through the privacy contact.

Retention and account closure

Account and preferences: kept while needed for access and service. Accepted closure revokes memberships and removes the specified personal profile fields and preferences; authentication identity removal is processed afterwards. Referential identifiers may remain to preserve relationships between records; this does not make them anonymous.

Contracts, documents and audit records are not deleted together when an account closes. Retention considers the organization’s purposes and instructions, the duration and end of its contractual relationship, specific documentary duties and the defense of rights. We do not apply ten years, or any single period, to all data. A request may lead to deletion, correction, restriction or justified retention of specific records.

Technical data and copies held by providers follow each service’s applicable configuration and terms. A deletion request does not guarantee instant removal of all historical records. Closing an account cannot recall copies already downloaded or sent to others. Request assessment of your case; we will explain reasons and criteria for additional retention.

Device storage and security

The web service keeps the authentication session and temporary sign-in proofs, plus minimal markers to recover operations whose result is unconfirmed. The app uses operating-system secure storage for sessions and recovery information. Signing out may preserve markers to avoid repeating an operation. Removing local storage does not delete server records.

We use HTTPS, organization and role access controls, private storage and access controls for integration credentials. These measures do not guarantee absolute security or mean documents have end-to-end encryption. Do not share passwords, tokens, recovery links or confidential documents in support requests.

Your rights

You may request access, correction, erasure, restriction, portability or objection where applicable. Withdrawing consent does not affect previous valid processing. Identity checks are proportionate. GDPR requests receive a response within one calendar month; permitted extensions are explained within that period. You may complain to the CNPD or competent authority.

Use privacy@transferguardians.com or the account-deletion request page without signing in. If you are the last administrator, the transfer of administration required for in-app closure does not prevent an email privacy request. We also assess personal data in organizational records, considering other people’s rights and applicable obligations.

Decisions and changes

Onix organizes workflows, permissions and approvals. We do not configure solely automated decisions producing legal or similarly significant effects on people in this service. Organization representatives define and perform their processes.

We will update this notice when processing changes. Its date identifies the version; relevant changes will be communicated through appropriate means before new incompatible purposes.