Privacy & Cookies Policy

This Privacy & Cookies Policy explains how personal data is processed when you visit getonboardos.com, use the OnboardOS website, or submit an Early Access request.

OnboardOS is currently operated by Alexander Blinov, Georgia, who acts as the data controller for the processing described in this Policy.

For privacy-related questions or requests, contact:

contact@getonboardos.com

1. Information we collect

Information you provide through the Early Access form

When you submit an Early Access request, we may collect:

• your full name;
• work email address;
• company name;
• role, if provided;
• any information you choose to include in the optional message field.

We also receive limited technical context associated with the submission, including the page from which the request was sent, browser/user-agent information and the submission timestamp.

Your IP address may be used temporarily in memory for rate limiting and abuse prevention. The application does not store the IP address as part of your Early Access submission.

Website analytics

If you choose Accept analytics in the cookie banner, we use Google Analytics 4 to understand how visitors use the website.

Analytics may include information such as:

• pages viewed;
• page paths and titles;
• referral source;
• interactions with Early Access calls to action;
• successful lead submissions;
• scrolling, outbound link clicks and file downloads;
• browser/device information and Google Analytics identifiers.

We do not send names, email addresses, company information, messages or other form contents to Google Analytics.

Google requires websites using Google Analytics to disclose its use and explain that Google collects and processes analytics data.

2. Why we process your information

We use Early Access information to:

• review and respond to your request;
• communicate with you about OnboardOS;
• understand whether OnboardOS may be relevant to your business;
• manage the Early Access process;
• protect the website from spam and abuse.

Under Georgian data-protection law, personal data may be processed where necessary to review an application submitted by the data subject and where necessary to pursue important legitimate interests, subject to protection of the individual’s rights.

We use Google Analytics only with your analytics consent. You can refuse analytics without affecting the essential operation of the website.

3. Cookies and local storage

OnboardOS uses a small first-party local-storage item:

onboardos_cookie_consent

It records whether you accepted or rejected optional analytics so that we can remember your choice. It does not contain your name, email address or other form information.

If you accept analytics, Google Analytics may set cookies including:

• _ga;
• _ga_BZLR5D50JW.

Google Analytics uses the _ga cookie to store a client identifier used to distinguish visitors and sessions. When analytics storage is disabled through Consent Mode, Google does not store that identifier.

Analytics cookies are not loaded before you give analytics consent.

You can change your choice at any time through Cookie settings in the website footer. If you withdraw analytics consent, future analytics tracking stops and applicable first-party Google Analytics cookies are removed.

Georgian law gives data subjects the right to withdraw consent, and withdrawal must be possible without unnecessary barriers.

4. Google Analytics data retention

Our Google Analytics property is configured to retain user-level and event-level data for 14 months.

Aggregated reports may continue to contain statistical information that no longer identifies an individual visitor.

5. Early Access data retention

Early Access enquiries are retained for up to 12 months after the last interaction if they do not develop into an ongoing business relationship.

Information may be retained for longer where reasonably necessary to:

• continue an active business relationship;
• establish, exercise or defend legal claims;
• comply with an applicable legal obligation.

Georgian law requires personal data to be kept only for as long as necessary for the legitimate purpose for which it is processed.

6. Service providers

We use a limited number of service providers to operate the website.

Resend

Early Access submissions are delivered by email using Resend through the Lovable connector infrastructure. Form information is transmitted to the OnboardOS contact mailbox; the website does not maintain a separate database of Early Access submissions.

Resend publishes a Data Processing Addendum describing its role and data-protection obligations when processing customer data.

Lovable and Cloudflare

The website is hosted and delivered using Lovable infrastructure and Cloudflare services. These providers may process technical request information required to host, secure and deliver the website.

Lovable publishes a Data Processing Agreement addressing processing under GDPR and other data-protection laws, and Cloudflare publishes information about its privacy and data-protection practices.

Google Analytics

Google receives analytics information only after analytics consent has been granted.

Google Analytics is not used to receive the personal information entered into the Early Access form.

7. International data processing

Some service providers used to operate OnboardOS may process information in countries other than Georgia or the country from which you access the website.

Where applicable data-protection law requires safeguards for international transfers, we rely on the transfer mechanisms and contractual safeguards provided by the relevant service providers.

8. Your privacy rights

Depending on the law applicable to you, you may have the right to:

• ask whether we process personal data about you;
• request access to that data;
• request correction of inaccurate or incomplete information;
• request deletion or termination of processing;
• request restriction or blocking of certain processing;
• withdraw consent where processing is based on consent;
• object to certain processing;
• receive or request transfer of certain data where applicable;
• make a complaint to an appropriate data-protection authority.

Georgia’s Personal Data Protection Law provides rights including information, access, correction, deletion/termination, blocking, portability in applicable cases, withdrawal of consent and appeal.

To exercise a privacy right, contact:

contact@getonboardos.com

We may request reasonable information to confirm that the request relates to you before disclosing or deleting personal data.

9. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure.

No internet-based service can guarantee absolute security.

10. Third-party links

The website and Resources articles may contain links to websites operated by third parties.

Their privacy practices are governed by their own policies, and this Privacy & Cookies Policy does not apply to those external websites.

11. Changes to this Policy

We may update this Policy when our website, analytics setup, service providers or data-processing practices change.

The latest version will be published on this page with an updated Last updated date.