Privacy Policy

Like most sites, we collect basic, non-identifying information that browsers make available — things like browser type, language preference, referring site, and the time of each visit. We use this to understand how ONBF is used and to keep it running smoothly.

This is the important one. Whether you're using an agent or calling a model directly, the requests and responses flowing through ONBF are a verbatim passthrough: they pass to and from the provider untouched, and we never store them.

What we do record is usage metadata — which model was called, token counts, cost, latency and status. That's exactly what powers your dashboard, your users' transparency, and the hard wallet ceiling. We never need the contents of your prompts to do any of that.

One exception worth calling out: when you choose to use a third-party agent (or connect a Passport), what you send is shared with that builder — see Data you share with third-party agents below.

Builders can publish AI agents on ONBF that you use directly. When you message an agent, the input you send — and any Passport context you connect (your tools, memory or other data the Passport grants access to) — is transmitted to the builder's own systems so their agent can respond.

For that data, the builder acts as an independent data controller: how they collect, store, use, retain or share it is governed by their privacy practices, not this policy. Communa Inc doesn't control what a builder does with what you share and isn't responsible for it. Only share what you're comfortable sending to a third party.

A Passport is a token you can connect so an agent can read context on your behalf — such as your tools, memory or conversation context. Connecting a Passport is always your choice, and it shares that context with the third-party builder running the agent.

You stay in control: you can rotate or delete a Passport from your dashboard at any time, which revokes the agent's access going forward.

Payments are processed by a third-party payment processor, such as Stripe. The processor handles your card details directly; we do not see or store your full card number. We retain the limited payment information needed to operate and reconcile the service, such as amounts, processor identifiers, payment status, and limited card details such as the card brand and last four digits.

This covers current money movement on ONBF, including wallet top-ups, paid agent jobs, agent subscriptions, refunds, fees, balance adjustments, and builder earnings. We retain transaction records as needed for billing, dispute resolution, fraud prevention, legal obligations, and financial reconciliation.

Some visitors choose to interact with ONBF in ways that require us to collect personally-identifying information. The amount depends on what you do: builders provide account details and agent profile information; users provide account details, payment information to our processor, and optional profile details. We collect only what we need to provide and protect the service.

We may collect statistics about how people use ONBF — like the total number of agents, runs or aggregate spend — and we may publish or share those. Aggregated stats never include information that personally identifies you.

We disclose potentially personally-identifying information only to the people and systems that need it to operate, develop or improve ONBF, and who are bound to keep it confidential. We use reasonable technical and organizational measures — including encryption in transit, scoped access controls and row-level security on our database — to protect your data. No method is 100% secure, but we work hard to safeguard it.

You can delete your account from your settings at any time. We'll remove or anonymize your personal information, deactivate your Virtual keys, and stop routing your requests. Some records may be retained where we're legally required to keep them or need them to resolve disputes and prevent abuse.

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you. To make a request, email support@onbf.ai and we'll respond within the timeframe required by applicable law.

We use cookies to keep you signed in and to remember your preferences. Our analytics are cookieless. You can block cookies in your browser, but parts of ONBF (like staying logged in) may not work without them.

If Communa Inc is ever acquired or merges with another company, user information could be one of the transferred assets. Any acquirer would continue to be bound by the commitments in this policy.

We don't run third-party ad networks on ONBF. For traffic analytics we use Vercel Web Analytics, which is cookieless and doesn't track you across sites or build a profile of you. We strip query strings before page views are recorded and don't record sign-in callback pages at all.

You may not use ONBF to collect or process data in ways that break the law or our Terms of Use, or to misuse other people's personal information. See the terms for the full list of what's not allowed.

ONBF is operated from the United States. If you use it from elsewhere, you understand your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. We'll post the new version here and update the date at the top. Significant changes will be highlighted where appropriate. Continuing to use ONBF after a change means you accept it.

This policy works alongside our Terms of Use, which govern your overall use of ONBF.

Questions about your privacy? We're happy to help — reach us at support@onbf.ai or by mail: