One Crown AI Reply Agent
One Crown Holdings PTY LTD operates One Crown AI Reply Agent on onecrownagents.ai and is the responsible party (data controller) for the personal information described here. We process personal information under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA), and, where they apply to a user or client, the EU/UK GDPR and the California Consumer Privacy Act (CCPA/CPRA). For any privacy question or request, contact us at info@onecrownagents.ai.
1. Information we collect
Account details (email, hashed password, business name); marketing intake you provide (offer, audience, brand voice, source packet); optional media or reference links you upload or paste; payment-status signals from our payment provider; and support and operational records. We collect only what you provide through the product and onboarding forms — we do not crawl your website or social accounts.
2. Lawful basis and how we use it
We process your information to perform our contract with you (set up the service, prepare approval-ready drafts and replies, support your account), for our legitimate interest in operating and improving the product, and — for any direct marketing to you — only with your explicit consent. We do not use your business's client data to train third-party models.
3. Sub-processors and AI providers
To operate the service we share the minimum necessary information with infrastructure and payment providers, and — when you request AI-generated drafts — with our AI provider (currently OpenAI) to generate that content. Draft generation using a paid AI provider only occurs when explicitly enabled; otherwise generation is templated and no client content is sent to an external model. We do not sell personal information.
4. Payment handling
Payments are processed by the listed payment provider. We do not ask customers to enter raw card details into this site and we do not store card numbers.
5. Storage, security, and retention
Passwords are stored only as salted hashes, never in plain text. Uploaded media is stored privately and referenced by metadata; its contents and stored file paths are not exposed in generated drafts. We apply reasonable technical and operational measures, but no system can promise absolute security. We retain account and service data for as long as your account is active and as needed for legal, tax, and operational records, after which it is deleted or anonymised.
6. Your rights (POPIA / GDPR / CCPA)
You have the right to access the personal information we hold about you; to correct or update it; to delete your account and associated personal information; to object to or withdraw consent for direct marketing at any time; and, under POPIA, to lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za). To exercise any right, email info@onecrownagents.ai. If GDPR or CCPA applies to you, you also have the corresponding data-subject/consumer rights, including data portability and (CCPA) the right to know and to opt out of any "sale" or "sharing" — which we do not do.
7. Children
This service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information about children. Do not submit personal information about children through the product.
8. Your responsibility as a client
If you use the product to handle your own customers' conversations or data, you are the responsible party for that data and remain responsible for the accuracy, lawfulness, consent, and appropriateness of what is sent to your customers.
9. Changes
One Crown Holdings PTY LTD may update this privacy policy over time. Material changes will be reflected here; continued use after changes means you accept the updated version.