Privacy Policy

Last updated: September 2026

This Privacy Policy explains how OnePoint CTO ("we," "us," "our") collects, uses, stores, and protects information when you use onepointcto.com, our client admin console, or our billing and communication systems. By using our services, you agree to the practices described below.

Information We Collect

Contact information you provide through our contact form, consultation requests, or invoicing process: name, email address, phone number, company name, website, and mailing address.
Billing and payment information processed through Stripe, our third-party payment processor. We do not store full credit card numbers on our own servers — Stripe handles and stores payment card data in accordance with PCI-DSS standards.
Client relationship records stored in our internal database (PostgreSQL), including invoice history, project notes, and communication logs, used to manage our working relationship with you.
Email communications, including invoices, receipts, and payment reminders sent via our transactional email system, which are logged for recordkeeping and support purposes.
Usage data collected through analytics tools (such as Vercel Analytics), including pages visited, general geographic region, device/browser type, and referral source. This data is aggregated and does not directly identify you.
Cookies and similar technologies used to support core site functionality and to gather anonymized analytics, as described below.

How We Use Your Information

To create and send invoices, process payments, and send payment confirmations or overdue-payment reminders.
To communicate with you about projects, consultations, and support requests.
To maintain accurate client relationship records for our own operations.
To understand how visitors use our site so we can improve content and site performance.
To meet legal, tax, and accounting obligations related to invoicing and payment records.

Payment Processing

All payments are processed by Stripe, Inc. When you pay an invoice through our site, your payment details are transmitted directly to Stripe using their secure, PCI-compliant infrastructure — they never pass through or get stored on our own servers. We retain only the transaction status, amount, and Stripe-issued reference identifiers needed to reconcile your invoice. Stripe's own privacy practices are described at stripe.com/privacy.

Data Storage and Security

Client and invoice data is stored in an access-controlled PostgreSQL database on infrastructure we directly manage. Administrative access to this data is restricted to authorized OnePoint CTO personnel and protected by authenticated, session-based login. We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, or loss, but no system can be guaranteed 100% secure.

Cookies and Analytics

We use cookies to support essential site functionality (such as keeping an admin session logged in) and lightweight, privacy-respecting analytics to understand aggregate site traffic. We do not sell your personal data to third parties or use it for cross-site advertising. You can control or disable cookies through your browser settings, though some site functionality may not work correctly without them. See our Cookie Policy for details.

Data Sharing

We do not sell your personal information. We share information only with service providers who help us operate our business — currently Stripe (payment processing), our email delivery provider (transactional invoice and reminder emails), and our hosting/database provider — each bound to use your data only to provide services to us. We may also disclose information if required by law.

Data Retention

We retain client and invoice records for as long as necessary to fulfill the purposes described in this policy, including ongoing business relationships and applicable tax/accounting recordkeeping requirements.

Your Rights

You may request access to, correction of, or deletion of the personal information we hold about you by contacting us at billing@onepointcto.com. We will respond to reasonable requests, subject to our legal recordkeeping obligations for billing and tax records.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

Contact Us

Questions about this Privacy Policy can be directed to billing@onepointcto.com.

Last updated: September 2026

Information We Collect

Contact information you provide through our contact form, consultation requests, or invoicing process: name, email address, phone number, company name, website, and mailing address.

Billing and payment information processed through Stripe, our third-party payment processor. We do not store full credit card numbers on our own servers — Stripe handles and stores payment card data in accordance with PCI-DSS standards.

Client relationship records stored in our internal database (PostgreSQL), including invoice history, project notes, and communication logs, used to manage our working relationship with you.

Email communications, including invoices, receipts, and payment reminders sent via our transactional email system, which are logged for recordkeeping and support purposes.

Usage data collected through analytics tools (such as Vercel Analytics), including pages visited, general geographic region, device/browser type, and referral source. This data is aggregated and does not directly identify you.

Cookies and similar technologies used to support core site functionality and to gather anonymized analytics, as described below.

How We Use Your Information

To create and send invoices, process payments, and send payment confirmations or overdue-payment reminders.

To communicate with you about projects, consultations, and support requests.

To maintain accurate client relationship records for our own operations.

To understand how visitors use our site so we can improve content and site performance.

To meet legal, tax, and accounting obligations related to invoicing and payment records.

Payment Processing

Data Storage and Security

Cookies and Analytics

Data Sharing