Legal

Privacy Policy

Last updated: June 2026

Introduction and scope

This Privacy Policy explains how OneCo ("OneCo," "we," "us," or "our") collects, uses, shares, and protects information when you use our website, applications, and the financial and operational services we provide to small businesses, including banking, payroll, accounting, and compliance tools (together, the "Services").

This policy applies to information we process about business owners, authorized users, employees of our customers, and visitors to our website. By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

Information we collect

We collect information in the following categories.

Account information. Details you provide when you register, such as your name, business name, email address, phone number, mailing address, and login credentials.
Financial and transaction data. Information needed to deliver our financial features, including bank account details, payment instructions, payroll records, invoices, tax identifiers, and transaction history processed through the Services.
Usage data. Information about how you interact with the Services, including pages viewed, features used, actions taken, and timestamps.
Device and cookie data. Technical information such as your IP address, browser type, operating system, device identifiers, and information collected through cookies and similar technologies.

How we use information

We use the information we collect for the following purposes.

To provide, operate, maintain, and improve the Services.
To process transactions, payroll runs, and other financial operations you request.
To verify identity, prevent fraud, and keep accounts secure.
To communicate with you about your account, updates, and support requests.
To personalize your experience and develop new features.
To comply with legal, regulatory, and contractual obligations.

How we share information

We do not sell your personal information. We share information only as described below.

Financial partners. With banking, payments, payroll, and other financial providers that help us deliver the Services you request.
Service providers. With vendors that perform functions on our behalf, such as hosting, analytics, customer support, and communications, under contracts that limit how they may use your information.
Legal and safety. When required by law, legal process, or government request, or when necessary to protect the rights, property, or safety of OneCo, our customers, or others.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

Third party financial partners

OneCo works with third party banking, payroll, and financial partners who process certain data to enable our features. These partners include chartered financial institutions, payment processors, and payroll providers. When you use a feature that relies on a partner, relevant information is shared with that partner so the feature can function. These partners process information under their own agreements and privacy practices, and we encourage you to review their policies where applicable.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, measure usage, and improve performance. You can control cookies through your browser settings, though disabling certain cookies may limit the functionality of the Services. Where required by law, we request your consent before placing non essential cookies.

Data retention

We retain personal information for as long as your account is active and as needed to provide the Services. We also retain information when required to meet legal, tax, accounting, and regulatory obligations, to resolve disputes, and to enforce our agreements. When information is no longer needed, we delete or de identify it in accordance with our retention practices.

Data security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and ongoing monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and notify us promptly if you believe your account has been compromised.

Your rights and choices

Depending on your location, you may have rights regarding your personal information. These can include the following.

Access. Request a copy of the personal information we hold about you.
Correction. Ask us to correct information that is inaccurate or incomplete.
Deletion. Request that we delete your personal information, subject to legal and operational limits.
Opt out. Opt out of certain communications or processing where applicable.

To exercise these rights, contact us using the details in the Contact section. We may need to verify your identity before fulfilling your request.

Children's privacy

The Services are intended for businesses and individuals who are at least 18 years old. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it.

California and other state privacy rights

Residents of California and certain other states may have additional rights under applicable privacy laws, including the right to know what categories of personal information we collect, the right to request access or deletion, and the right not to receive discriminatory treatment for exercising these rights. We do not sell personal information as that term is commonly defined. To make a request, contact us using the details below, and we will respond as required by applicable law.

International users

OneCo is based in the United States, and we process and store information in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

Contact

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@oneco.com.