Privacy policy

ONITA is operated by Omnitron Pte. Ltd. (UEN 202606037D), a company in Singapore. When we say “we”, we mean Omnitron Pte. Ltd. You can reach us about anything on this page at hello@onita.tech.

ONITA answers the phone for businesses. That means three kinds of people are covered here: the businesses that subscribe, the people who call those businesses and speak to her, and businesses that join our early-bird list before we open.

You are speaking to an AI assistant working for that business, not to a person, and she says so at the start of the call. She also tells you that the call is recorded. The business decides what she does on the call and is responsible for the booking, order or message you leave. We process your information on the business’s behalf so she can do her job.

What we handle during a call:

• Your phone number, so the business can call you back and so she can find a booking you made.
• What you say. The call is recorded: Telnyx, our phone provider, keeps the audio, and your speech is turned into text so she can understand and reply.
• Details you give for a booking, order, enquiry or message, such as your name, party size, time, items and any requests.
• If you pay for an order, the payment happens with HitPay and is made to the business. We never see your card number.

A record of the call and any booking, order, enquiry or message stay with the business so it can serve you. ONITA deletes its copy of a call’s transcript and full summary 30 days after the call. Telnyx also keeps the conversation, and its recording, in our Telnyx account: its retention setting keeps them with no end date, so we delete them there when you or the business ask. Booking and order details are kept for as long as the business keeps its customer records.

ONITA does not phone callers. To stop a business contacting you, tell the business: it can erase your details from ONITA.

We collect what is needed to run your account and your phone line:

• Your name, email address and, if you sign in with Google, the name, email and profile picture Google shares. We use it to sign you in and contact you. We do not post to Google or read anything else in your Google account.
• Your business details: name, address, opening hours, your phone line, your menu or service list, and the answers you give her.
• Settings for how she behaves: greeting, voice, languages, what she is allowed to do.
• Login details for tools you connect, such as a till or booking system. These are encrypted before they are stored and used only to do what you asked, such as putting an order on your till.
• Billing details for your subscription, handled by Stripe. We keep the invoice record, not your card.
• Every call she takes for you: the caller’s number, the transcript, the summary and the outcome, shown to you on your dashboard.

At the start of every call she tells the caller that she is an AI assistant and that the call is recorded. You remain responsible for any other notice the law asks you to give your own customers.

If you try ONITA on this website and ask us to call you back, the phone number, business name and website you enter go to our team, by email or through our team’s alerts, so we can call you. We also keep them on our own list of businesses that asked about ONITA. A call-back request is used only to call you back.

Before ONITA opens to businesses, you can join our early-bird list on this website or on a call with ONITA. We keep your name, your business name, your phone number and email if you give them, how you reached us, and the words you agreed to and when.

We use these details only to contact you about ONITA’s launch, by phone, WhatsApp or email. Your name, number and email are encrypted before they are stored.

You can ask us to take you off the list, or to delete a call-back request, at any time by writing to hello@onita.tech, and we will delete your details.

• To answer calls, take bookings and orders, and pass on messages and enquiries, which is the service.
• To tell a business’s team about what she took, and to text a caller something they need, such as a payment link for an order.
• To show a business what happened on its line.
• To bill subscriptions and to detect abuse of the service.
• To improve how well she understands callers. We use call transcripts to fix mistakes and tune her prompts. We do not sell data, and we do not train public AI models on it.

We do not run phone lines or AI models ourselves. These companies process data under contract with us, only for the purpose listed, and we choose Singapore hosting where it is offered.

The AI that holds a phone conversation runs through Telnyx. It is a Claude model made by Anthropic, run for us by Telnyx: what a caller says goes to Telnyx, and we do not send calls to Anthropic ourselves.

Some of these providers are outside Singapore. Where personal data leaves Singapore, we rely on the provider’s contractual commitments to protect it to a standard comparable to the PDPA.

• Call recordings: kept by Telnyx in our Telnyx account with no end date, until we delete them.
• Call transcripts and full call summaries: ONITA’s copy is deleted automatically 30 days after the call. Telnyx’s copy of the conversation stays in our Telnyx account until we delete it.
• A call’s record (the caller’s number, when the call was, how long it lasted and a one-line outcome): up to 2 years.
• Bookings, orders, enquiries and messages: for as long as the business account is active.
• When a business account closes, everything above is deleted within 90 days, or sooner if the business asks.
• Account and billing records: for as long as required by Singapore tax and accounting law.

Under Singapore’s Personal Data Protection Act you can ask us what personal data we hold about you and how it has been used, ask us to correct it, and withdraw consent for its use. If you are a caller, the quickest route is usually the business you called, since the booking or order is theirs; we will help either way. Email hello@onita.tech and we will reply within 30 days.

If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission of Singapore.

Data is encrypted in transit and at rest. Each business’s data is kept apart from every other business’s, and integration logins are encrypted with keys we hold apart from the data. Our team’s access to a business’s data through ONITA’s admin console is logged, and direct access to the database is limited to the people who run the service.

This website sets a cookie to keep you signed in. It also uses PostHog, the product analytics we run for ourselves, to see which pages are useful; PostHog sets its own cookie. We do not use advertising cookies, and we do not share what you do here with advertisers.

When this policy changes we update the date at the top and, for changes that matter, tell business customers by email. See also our terms of service.