Privacy Policy
What OneMRR collects, why, who else handles it, and how you control it. Written in plain English.
Architect Spot LLC ("OneMRR", "we", "us") runs the OneMRR website at onemrr.dev and the OneMRR app at app.onemrr.dev. This policy explains how we handle personal information in both.
Two kinds of data
When you sign up, we're responsible for your account details. When you connect billing platforms or send us activity data, much of what we receive is about your customers. For that data we act on your behalf and only as you instruct: you decide what to connect, and you can disconnect or delete it. If you're one of our customers' customers and have a question about your data, please contact the business you have a subscription with first. We'll help them respond.
The website
onemrr.dev sets no cookies and runs no analytics or advertising trackers. Pages are served through Amazon CloudFront, and we don't keep access logs for the website.
What we collect in the app
Your account
- Your name, email address and password (stored as a secure hash), or your Google account details if you sign in with Google.
- Your workspaces, your role in each (owner, admin or member), and invitations you send or receive.
- Session records, including the IP address and browser details used to sign in. Sessions end 3 days after you last used the app.
Data from billing platforms you connect
- Credentials for Stripe, Shopify, Wix, Paddle, Lemon Squeezy or your own API source. These are encrypted before they're stored and never shown again.
- Billing records read from those platforms: customers (including names and email addresses where the platform provides them), subscriptions, plans, invoices, payments, refunds and payouts, and the metadata attached to them.
- Files you upload, such as Wix payout exports.
- Anything you enter yourself, such as tags, plan names and marketing spend.
Product activity (Churn Signals)
- If you use Churn Signals, your server sends us your own account IDs, event names and times. We store daily counts per account, plus each event's ID so a retry isn't counted twice. We don't store event properties, page URLs or IP addresses.
- You may link an account to a customer email address so follow-up emails can reach them.
- If you send activity from a browser, any user identifier you include is hashed before it's stored.
Emails and surveys
- Emails OneMRR sends for you (retention check-ins and cancellation surveys), with their delivery status: delivered, opened, clicked, bounced, marked as spam, or unsubscribed.
- Replies your customers send to those emails, stored as plain text and forwarded to the reply-to address you set.
- Survey answers: the reason chosen and any comment written.
- Unsubscribes and bounces, which we keep so we don't email those addresses again.
How we use it
- To provide OneMRR: calculating revenue metrics, detecting churn signals, and sending the emails you configure.
- To send you service emails, such as invitations, password resets, source alerts and summaries you've turned on.
- To keep the service secure, prevent abuse, and fix problems.
We don't sell personal information, don't use it for advertising, and don't use your data or your customers' data to train AI models.
Who else handles it
We use a small number of providers to run OneMRR:
- Amazon Web Services (United States): hosting, database, file storage and email sending.
- Postmark: email delivery, delivery tracking and receiving replies.
- Google: sign-in, if you choose to sign in with Google.
The billing platforms you connect are your own accounts. We read from them on your instruction, and their own privacy policies apply. We'll disclose information if the law requires it, and we'll tell you first where we're allowed to.
Where it's stored
OneMRR runs on AWS in the United States (us-west-2). If you're outside the United States, your information is transferred there. The database is encrypted at rest.
How long we keep it
- Account and billing data: for as long as your workspace exists.
- Activity data: 400 days by default, or the shorter period you set. Older data is deleted nightly, and you can delete tracked activity at any time.
- Server logs: 30 days. Database backups: 7 days.
- When you ask us to delete your workspace, we delete its data within 30 days, apart from what remains in backups until they expire.
Your choices and rights
You can update your account details, remove members, disconnect billing sources, delete tracked activity, and export your revenue and customer data as CSV. To get a copy of your personal data, correct it or have it deleted, or to delete your workspace, email hello@onemrr.dev. Depending on where you live, you may have further rights, such as objecting to processing or complaining to a data protection authority.
Security
Our security page describes how we protect your data, including read-only billing access, encrypted credentials and isolated workspaces.
Children
OneMRR is a business tool and isn't meant for anyone under 16.
Changes
If we change this policy in a way that matters, we'll update this page and tell workspace owners by email before the change takes effect.
Contact
Architect Spot LLC, 1150 Garden View Rd, Unit 230056, Encinitas, CA 92024, USA. Email: hello@onemrr.dev.