GDPR

We host OnePush infrastructure in the EU / EEA where we can, sign DPAs with our processors, and build product controls that help you handle subscriber and contact data carefully.

GDPR still puts duties on you as the controller for your end users' data. We help; we do not replace your own compliance work.

If you handle personal data of people in the EU / EEA (or UK GDPR in the UK), it probably does — even if your company sits elsewhere.

As a OnePush customer you usually decide why contacts are stored and how long they stay. That makes you the controller. We process that data on your instructions as processor.

Need a signed DPA? Email privacy@onepush.app with your company name and plan. Business customers can get a countersigned copy. See also the dedicated DPA page.

Typical data in your project: email addresses, names, tags, event history, form answers, delivery logs, and social content you create.

Only upload data you are allowed to process. Do not dump special-category data into OnePush unless you have a clear lawful basis and we have agreed in writing.

Tools that make day-to-day GDPR work easier:

• Double opt-in options for list signup flows
• Tracking off by default where the product allows it
• Short retention for personal tracking data (about 30 days)
• Auto-handling of hard bounces and spam complaints where configured
• Export contacts and related data
• Delete contacts and associated records when you need to fulfil an erasure request
• A DPA on request for eligible plans

We use a short list of sub-processors, for example:

• Stripe — payments
• EU / EEA hosting providers — servers and storage
• Social networks you connect — only for the publishing you choose

Each one sits under a DPA (or equivalent). Ask privacy@onepush.app if you need the current list in writing.

Your subscribers' access, correction, and deletion requests are primarily your job. In the dashboard you can:

• Export contact data
• Update contact fields
• Delete contacts
• Export CSV / JSON where the product supports it

If you need help with something only we can do on the backend, email privacy@onepush.app.