Privacy Policy

Account Information: When you register, we collect your business name, email address, and account login parameters to create and securely manage your workspace.

Financial and Transaction Data via Plaid: To provide your financial insights, dashboard metrics, and expense tracking, Onyx uses Plaid Inc. ("Plaid") to link your bank accounts. By connecting your bank credentials, you grant Onyx and Plaid the authority to act on your behalf to securely access and transmit your financial data from your financial institution. This includes transaction histories, merchant names, amount totals, descriptions, dates, and account balances. You acknowledge that your data will be handled by Plaid in accordance with the Plaid End User Privacy Policy (plaid.com/legal). Onyx never views or stores your raw bank login credentials.

Subscription Analytics Data: We isolate recurring payments in your imported history to map out and flag ongoing software and subscription costs.

Payment Data via Stripe: When you purchase an Onyx plan, our payment processor, Stripe LLC, securely collects your billing details, address, and credit card credentials. This payment processing is PCI-DSS compliant. Onyx never touches, views, or stores your raw credit card data.

We process your personal and business financial data under the legal basis of executing our service agreement with you. We use it to:

• Display real-time revenue, spending habits, profit margins, and deduction tracking in your custom dashboard. • Send you financial health alerts and cost-saving insights. • Identify recurring platform overhead you could safely reduce. • Manage your system account, handle password updates, and deliver billing receipts.

We do not use your financial data for advertising, and we never sell, lease, or monetize your data to third parties under any circumstances.

Onyx is operated out of Ontario, Canada. Your encrypted data is housed on securely managed infrastructure provided by Supabase. Because we serve a global customer base and use services based in both Canada and the United States (including Stripe and Plaid), your personal and business data may be transferred across international borders and stored or processed on servers outside your home province or country.

We implement rigorous, industry-standard cryptographic standards (AES-256 at-rest and TLS/SSL in-transit encryption) to protect your financial workspace from unauthorized access.

We only share information with third-party service infrastructure strictly to the extent required to host and run Onyx for you:

• Plaid Inc. — financial data ingestion • Supabase — encrypted database management • Stripe LLC — payment settlement and invoice compliance

We may disclose records if explicitly mandated to do so by local or federal law enforcement or court order within Ontario or the United States, provided we are legally permitted to notify you of the request beforehand.

Regardless of whether you reside in Canada or the United States, Onyx provides you with complete data autonomy.

The Right to Delete: You can disconnect your bank integration at any time from your dashboard. You can permanently delete your entire account and all associated data by emailing team@mail.savewithonyx.com. All associated data will be fully purged from our primary production environments within seven (7) business days.

The Right to Portability: You can request a structured file export of your account ledger data by reaching out to our support team.

For data inquiries, privacy concerns, or compliance requests, please reach out to our team at team@mail.savewithonyx.com.