Legal

Privacy Policy

Last updated: June 2, 2026

This policy explains how OneBenefits handles information across our website and platform.

OneBenefits ("OneBenefits," "we," "us," or "our") provides an AI-powered platform that helps organizations communicate employee benefits. This Privacy Policy describes the information we collect, how we use it, and the choices available to website visitors, customers, and the employees of our customers.

1. Information we collect

Information you provide

When you contact us, request a demo, or start a trial, we collect details you submit such as your name, work email, company, company size, and any message content. When a customer onboards, we collect account and configuration information.

Customer benefits content

Customers upload benefits documents, policies, vendor materials, intranet pages, and similar content so the platform can answer employee questions and generate communications. This content is used to operate the service for that customer.

Employee interactions

When a customer's employees interact with the platform (for example, asking a benefits question), we process those interactions to provide responses and to give the customer's HR team engagement reporting.

Usage and device data

Like most websites, we automatically collect limited technical data such as IP address, browser type, pages viewed, and referring pages, primarily through analytics.

2. How we use information

  • To provide, operate, and improve the OneBenefits platform and website.
  • To respond to inquiries, provide support, and send service-related communications.
  • To generate benefits communications and answer employee questions on behalf of our customers.
  • To produce engagement and ROI reporting for customers.
  • To maintain security, prevent fraud, and meet legal obligations.

3. AI and employee data

We take care with how AI is used in the platform:

  • Employee personal data is not shared with public AI models.
  • Customer data is processed in a secure, dedicated environment.
  • AI-generated outputs remain reviewable by the customer's HR team, which stays in control of what is sent.

4. Cookies and analytics

We use cookies and similar technologies to keep the site working, remember preferences, and understand usage. We use analytics tools, including Google Analytics, for aggregated, non-identifying reporting of site activity. You can control cookies through your browser settings, and you may opt out of Google Analytics using Google's opt-out tool.

5. How we share information

We do not sell your personal information. We share information only as needed to run the service: with service providers acting on our behalf (such as hosting and analytics) under appropriate confidentiality obligations, with a customer's authorized administrators in relation to their own account, or when required by law. For data processed on behalf of a customer, the customer is the controller and OneBenefits acts as a processor under their instructions.

6. Data retention

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Customers can request export or deletion of account data as described in their agreement, subject to limited records we are required to keep.

7. Security

We use industry-standard safeguards, including encryption in transit (SSL/HTTPS) and a secure, dedicated processing environment. SOC 2 Type II certification is actively in progress. No method of transmission or storage is completely secure, but we work to protect your information and to notify affected parties of incidents as required by law.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing (for example, under the GDPR or CCPA/CPRA). To exercise these rights, contact us at sales@onebenefits.ai. If your data is processed on behalf of an employer using OneBenefits, please direct requests to that employer; we will support them as a processor.

9. Third-party links

Our website and communications may link to third-party sites and services that have their own privacy practices. We are not responsible for those practices and encourage you to review their policies.

10. Children's privacy

OneBenefits is a workplace product intended for businesses and their employees. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. We will post the revised version here and update the "Last updated" date above. Material changes will be communicated where appropriate.

12. Contact us

Questions about this policy or your data? Email sales@onebenefits.ai.