Privacy Notice

Controller. One Head Office is operated by The Business Philosopher Ltd., a limited company at 661 Uxbridge Road, Pinner, Middlesex, England, HA5 3LW. Privacy enquiries: [email protected].

1. Information we use

Depending on how you use the service, we may process account and contact information, company and workspace content, task instructions, approval records, billing identifiers, integration metadata, support messages, security events and product-usage information. Payment-card details are handled by Stripe rather than stored by One Head Office.

2. Why we use it

We use information to create and secure accounts, provide requested workflows, maintain One Brain and workspace records, process subscriptions, deliver service messages, prevent abuse, support customers, improve reliability and meet legal obligations.

3. Legal bases

Where UK data-protection law applies, processing is based on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. Consent may be withdrawn without affecting earlier lawful processing.

4. Service providers and transfers

Approved infrastructure, authentication, AI, payment and email providers process information only for defined service purposes. Current core providers include Cloudflare, Supabase, OpenAI, Stripe, Resend and Google Workspace. Where information is transferred internationally, appropriate safeguards are used where required.

5. Retention

Information is retained only for as long as needed for the service, security, dispute, tax and legal purposes. Operational retention periods are reviewed by data category, and deletion or anonymisation is applied when the relevant purpose ends, subject to legal holds and backup cycles.

6. Security and human control

Access is restricted by tenant, role and purpose. Important external actions are designed to remain subject to authorisation, and audit evidence is retained for governed decisions. No internet service can promise absolute security.

7. Your rights

You may request access, correction, deletion, restriction, objection or portability where applicable by emailing [email protected]. You may also complain to the UK Information Commissioner’s Office.

8. Changes

Material updates will be dated here and communicated where law requires.