This Privacy Policy explains how Onebillet Ltd. ("Onebillet", "we", "us", "our") collects, uses,
discloses, and protects information when you visit our website and use our application Hashtag Provider.
By using our services, you agree to this Policy.
Important Summary About Photos and Images
Images you select inside the app are processed locally on your device. We do not upload your images to our servers
or to our AI provider. Unless and until we release a future app update that explicitly changes this behavior and
updates this Policy, images remain processed locally.
1) What this app does (at a glance)
- Generate, edit, copy, and save hashtag sets locally on your device.
- Optionally let you pick an image to auto-suggest prompt words; classification runs on-device; images are not uploaded by the app logic.
- Send your text prompt and settings (quantity and chosen language) to our model endpoint hosted on DigitalOcean Agents (Llama 3.2) to generate hashtags. Images are not sent to the model.
2) Information we collect
a) You provide directly
- Text you type into the generator prompt and language preferences for hashtag generation.
- Titles for saved sets you create.
b) Collected on your device (not transmitted by us unless stated)
- Photos you pick: available only after you grant Photos permission. Selected images are used locally for on-device classification and are not uploaded to our servers or to DigitalOcean.
- Saved sets and preferences: stored locally using our internal database.
c) Sent to our AI endpoint (DigitalOcean Agents)
- We transmit your prompt text and generator options (quantity and language) over HTTPS to our DigitalOcean Agents endpoint (Llama 3.2) solely to obtain hashtag suggestions. We do not send images.
d) Collected by third parties (independent controllers)
- Stripe (for Payments): Stripe may process identifiers, purchase history, and related data under Stripe's privacy materials.
3) How we use information
- Provide core features such as generating hashtags, saving and reloading sets, copying to clipboard, and remembering preferences.
- Send prompts to our DigitalOcean Agents model to generate hashtags.
- Enable and validate purchases via Stripe.
- Maintain the app, prevent abuse, and comply with legal obligations.
4) Legal bases (EEA/UK)
Where GDPR applies, we process data based on: Contract (to provide requested features),
Consent (for example, Photos access), and Legitimate Interests
(for example, essential security), balanced against your rights.
5) Sharing and disclosure
- Processors: DigitalOcean Agents (hosting and model execution) to run Llama 3.2 on your prompts.
- Independent controllers: Stripe (for payments).
- Legal reasons: To comply with law, enforce terms, or protect rights, safety, and security.
- Business transfers: In connection with a merger, acquisition, or asset sale. Your information remains protected under this Policy.
We do not sell your personal information.
6) Data retention
- On-device saved sets and preferences: kept until you delete them.
- Clipboard copies: when you tap Copy, text is placed into the system clipboard, which manages its own lifecycle.
- AI requests: prompt text and options are sent to DigitalOcean Agents to produce results; retention is governed by their policies and our configuration to minimize retention where possible.
- Payments: Stripe may retain purchase records for legally required periods.
7) Your choices and controls
- Photos access: Your OS prompts for permission. You can revoke this in your device settings.
- Prompts: Please avoid including sensitive personal information in prompts.
8) Children's privacy
Hashtag Provider is not directed to children under the age of digital consent (13 to 16, depending on region).
We do not knowingly collect personal information from children. If you believe a child provided personal
information, contact us and we will delete it.
9) Security
We use reasonable technical and organizational measures (for example, HTTPS/TLS for transmissions).
Saved sets and preferences are stored in your account's secure database. No method of transmission or storage is 100 percent secure.
10) International data transfers
We are based in Canada. Our processors and partners (for example, DigitalOcean, Stripe) may process data in multiple countries.
Where required, we rely on appropriate safeguards as described in those providers' policies.
11) Your rights
Canada (PIPEDA)
You may request access to, correction of, or deletion of personal information in our custody, subject to legal exceptions.
EEA and UK (GDPR)
You may have rights to access, rectification, deletion, restriction, portability, and objection. Where processing is based on consent,
you may withdraw consent at any time. You also have a right to lodge a complaint with your data protection authority.
To exercise rights for purchase data, please use the tools and contacts provided by Stripe in their policies.
12) Data retention summary (quick view)
- Saved sets: in your account until you delete them.
- Preferences: in your account until you change them.
- Prompt text sent to AI: transmitted to DigitalOcean Agents; retention per their policy and our configuration.
- Payments: retention per Stripe legal obligations.
13) Changes to this Policy
We may update this Policy to reflect changes to our practices, technologies, or legal requirements.
If we make material changes, we will update the Effective date and, where appropriate, provide additional notice in the app or on our website.
14) Contact us
Email: privacy@onebillet.com
Postal address: 348 Queen St E, Toronto, ON M5A 1T1, Canada
© 2025 Onebillet Ltd. All rights reserved.