Privacy Policy

1. Who we are

OneAI is operated by One AI Limited, a company incorporated under the laws of the People’s Republic of Bangladesh (“OneAI”, “we”, “our”, “us”).

OneAI is an access platform, not an AI developer. Through one account at oneaibd.com you can use AI models that are built, trained, hosted and operated by other companies. We do not create these models and we do not generate their answers.

This Privacy Policy explains what information we collect when you use our website, applications, APIs and related services, how we use it, who we share it with, and what rights you have. It applies alongside our Terms & Conditions.

By creating an account or using OneAI, you confirm that you have read this Policy. If you do not agree with it, please do not use the platform.

2. Our role: OneAI is an intermediary

OneAI passes your prompt to the AI model you choose and returns that model’s answer to you. It is the provider of that model that generates the answer.

What this means in practice

• We do not build, train, fine-tune or own the AI models offered on the platform. We do not choose what data they were trained on and we have no access to their training datasets.
• We do not write, review, edit or approve AI output before you see it. Output is produced automatically by the selected provider’s model in response to your input.
• We do not monitor prompts or outputs as a matter of course, and we are under no obligation to pre-screen them.

Where responsibility sits

• The model provider is responsible for how its model was built and trained, for the lawfulness of its training data, for the behaviour of the model, and for the content the model generates. Any claim concerning a model’s training data, its outputs, bias in its outputs, or its own retention and use of submitted data is a matter between you and that provider, under that provider’s terms and privacy policy.
• You are responsible for the content you submit, for having the right to submit it, and for how you use, publish, distribute or rely on the output you receive. If you upload someone else’s personal data, confidential information or copyrighted material, you are the party who decided to do so.
• OneAI is responsible for the account, billing and technical information described in this Policy that we collect and hold ourselves, for the security of our own systems, and for selecting providers and other service providers that offer appropriate safeguards.

Claims about content

To the fullest extent permitted by applicable law, One AI Limited accepts no liability for the content of AI-generated output, for its accuracy, or for any alleged infringement, defamation, privacy breach or other violation arising from output produced by a third-party model, or from content you submitted. Complaints of this kind should be directed to the provider of the model concerned. If you send us a report under section 6, we will review it, act on it within the platform where appropriate, and pass it to the relevant provider.

This section describes how OneAI operates and allocates responsibility between you, us and the providers as far as the law allows. It does not remove any responsibility that applicable law places on us as the operator of the platform and the holder of your personal information, and it does not limit the rights given to you in section 11.

3. Information we collect

We collect four kinds of information, depending on how you use OneAI.

Payment details. Payments are processed by authorised providers, which currently include bKash, Nagad, card networks and acquiring banks, mobile carrier billing and other supported partners. We do not receive or store your full debit or credit card number, PIN, CVV or mobile wallet PIN.

Sensitive information. Please do not submit government identity numbers, health records, financial account credentials, or other people’s sensitive personal data in prompts or uploads. The platform is not designed for that, and once a prompt is sent to a model provider we cannot recall it.

4. How we use your information

We use your information only for the purposes below.

1. To operate the platform, authenticate your account and keep you signed in.
2. To route your prompts, files and requests to the AI model you select and return the output.
3. To process subscriptions, payments, refunds and invoices.
4. To provide customer support and respond to your requests.
5. To send service notifications, such as security alerts, billing notices and changes to our terms. Marketing messages are sent only where you have consented, and you can opt out at any time.
6. To maintain security, detect and prevent fraud, abuse, automated scraping and misuse of the platform.
7. To measure and improve platform performance, reliability and usability, using aggregated or de-identified data wherever that is sufficient.
8. To personalise your experience, for example remembering your preferred model and settings.
9. To enforce our Terms & Conditions and to establish, exercise or defend legal claims.
10. To comply with applicable law, including tax, accounting and lawful requests from authorities.

We do not use your prompts or uploaded files to train our own AI models. We do not sell your personal information and we do not share it with advertisers for profiling.

5. AI processing and third-party model providers

When you submit a prompt, the content of that prompt and any attached files are transmitted over an encrypted connection to the provider of the model you selected, so that the model can generate a response. Only what is needed to produce the response is sent.

Depending on the model chosen, the provider may be:

• OpenAI
• Google
• Anthropic
• xAI
• DeepSeek
• Perplexity
• Other providers we add and list in the platform

The provider’s own terms apply to its processing. Once your prompt reaches a provider, that provider processes it under its own privacy policy and terms of service, including its own rules on retention, human review, abuse monitoring and whether submitted content may be used for model improvement. We select providers that offer business or API terms with appropriate protections, but we do not control their internal practices and we cannot vary them for you. We encourage you to read the policy of any provider whose model you use regularly; the model selector in the platform indicates which provider serves each model.

Deletion has limits. If you delete a conversation in OneAI, it is removed from our systems under section 10. It does not follow that every copy held by a provider is deleted at the same moment, because retention is governed by that provider’s own schedule. Any request to delete data held by a provider has to be made to that provider, and we will help you identify the right one and provide the details we hold about the request.

Your choice of model is your choice of processor. Selecting a model is an instruction to us to send your content to that provider. If you would rather a given provider did not receive your content, do not select its models.

AI-generated output

Responses on OneAI are produced by third-party models. They are generated statistically and may be inaccurate, incomplete, outdated, offensive or otherwise unsuitable, even where the prompt was ordinary. We do not author, review or endorse output before you see it, and we cannot guarantee that any given response will be accurate or appropriate.

You are responsible for reviewing output before relying on it, publishing it, or acting on it — particularly for legal, medical, financial, safety or other consequential decisions. Output is not professional advice.

To the maximum extent permitted by law, we accept no liability for loss or damage arising from output generated by a model, including output that is inaccurate or that you consider objectionable. Nothing in this clause limits liability that cannot be limited by law.

If a model returns content that appears unlawful or that breaches our Acceptable Use Policy, report it to support@oneaibd.com and we will review it.

6. Prompts, output and content violations

You keep whatever rights you already hold in the content you submit. You grant us a limited licence to transmit, store and display that content only as far as is needed to run the service for you.

Your responsibilities. You must not submit or request content that is unlawful in Bangladesh or in your own jurisdiction, infringes anyone’s intellectual property, reveals another person’s personal or confidential data without a lawful basis, depicts the sexual exploitation of children, promotes violence or terrorism, or is intended to harass, defraud or impersonate. You must not use output in a way that breaks the law or misleads people about its origin.

Accuracy. AI output can be wrong, incomplete, outdated or fabricated, including confident-sounding citations and figures that do not exist. Output is generated statistically and is not professional advice. Verify anything you intend to rely on for legal, medical, financial, academic, safety or business decisions, and do not treat output as a substitute for a qualified professional.

Originality. Output may resemble existing works. We make no representation that output is original, free of third-party rights, or safe to publish commercially. Checking that is your responsibility before you use it.

Reporting a violation. If you believe content generated through OneAI, or content another user has submitted, infringes your rights or breaks the law, write to us at the address in section 17 with a description of the content, the model and date if known, the right you are asserting, and your contact details. We will review the report, remove or restrict content within the platform where that is appropriate, act against the account involved under our Terms, and forward the report to the model provider concerned. Where the complaint relates to how a model produces output or what it was trained on, the provider is the party that can address it, and we will tell you who to contact.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, measure usage, prevent fraud and improve performance. Some cookies are strictly necessary for the platform to work; others are analytics cookies that help us understand which features are used.

You can manage or block cookies in your browser settings. If you block strictly necessary cookies, sign-in and other core features will not work.

8. How we share information

We do not sell your personal information. We share it only with the categories of recipient below, and only to the extent each needs it.

Service providers act on our instructions under written terms, except for the AI model providers in section 5, which process your content under their own terms as well.

9. Data security

We apply commercially reasonable technical and organisational safeguards, including HTTPS and encryption in transit, encryption of stored credentials, role-based access controls, authentication and session management, logging and continuous monitoring, and hosting on reputable cloud infrastructure.

No internet service can guarantee absolute security. Keep your password confidential, use a unique password, and tell us promptly if you suspect unauthorised access to your account. Where applicable law requires it, we will notify you and the relevant authority of a personal data breach that affects you.

10. Data retention

We keep information only as long as we need it for the purpose it was collected for.

We do not use your conversations, uploads or any other content to train or fine-tune AI models, and we do not sell or share your content with anyone for that purpose.

To generate responses, we pass your prompts and any attached content to third-party model providers. We do not control how long they hold that content. Our agreements with them prohibit the use of your content to train their models, and they retain it only briefly for security and abuse monitoring before deleting it. Their current retention terms are listed in section 5.

11. Your rights

Subject to applicable law, you may ask us to:

• give you access to the personal information we hold about you;
• correct information that is inaccurate or out of date;
• delete your account and the personal information associated with it;
• export your account data in a portable format;
• restrict or object to certain processing;
• withdraw a consent you previously gave, without affecting processing already carried out.

Write to the contact in section 17. We will respond within 30 days. We may need to verify your identity first, and we may have to keep records that law obliges us to retain. Using these rights is free and will not lead to any penalty on your account.

Requests about data held by an AI model provider have to go to that provider; tell us which model and we will point you to the right contact.

12. International data transfers

Our AI model providers, cloud hosts and some other service providers operate outside Bangladesh, which means your information may be processed in other countries, including the United States and countries in the European Union.

Where information leaves Bangladesh, we rely on written contracts with those providers that require appropriate confidentiality and security measures, and we use providers that publish recognised security certifications where available.

13. Children’s privacy

OneAI is not intended for anyone under 18, or under the minimum age set by the law that applies to you, whichever is higher. We do not knowingly collect personal information from children.

If you believe a child has registered or submitted information, contact us and we will verify and delete the account and its data promptly.

14. Third-party websites and integrations

OneAI may link to external websites or integrate third-party services. We do not control them and we are not responsible for their content, security or privacy practices. Read their policies before you use them.

15. Limitation of liability

To the fullest extent permitted by applicable law, and without limiting anything in our Terms & Conditions:

• One AI Limited is not liable for the content, accuracy or legality of AI-generated output, or for loss arising from your reliance on it;
• One AI Limited is not liable for the acts, omissions, data practices, security incidents, outages or terms of third-party AI model providers, payment providers or other third-party services;
• One AI Limited is not liable for content you or another user submitted, or for your use or publication of output.

Nothing in this Policy excludes liability that cannot lawfully be excluded, including liability for fraud, for wilful misconduct, or for obligations that the law of Bangladesh or other applicable law places on us as the operator of the platform and as the holder of your personal information.

16. Changes to this Policy

We may update this Policy to reflect changes in our services, the providers we work with, or legal requirements. The current version and its effective date are always published at oneaibd.com. For changes that materially affect your rights we will give notice by email or in the platform at least 7 days before they take effect. Continuing to use OneAI after that date means you accept the revised Policy.

17. Contact us

For privacy questions, rights requests or content reports:

One AI Limited

Dhaka, Bangladesh

https://oneaibd.com

If you are not satisfied with our response, you may complain to the competent authority in Bangladesh or, if you are outside Bangladesh, to the data protection authority where you live.