Privacy Policy

At OnAirFlow we take privacy seriously. This policy explains what we collect, how we use it, and the rights you have over your data.

Information we collect

• Account information (name, email, password).
• Profile information you add to your account.
• Content you create (stories, rundowns, notes, comments).
• Communications you send us.
• Technical information (IP address, browser, device) necessary to operate the service.

How we use it

• Provide, maintain, and improve the service.
• Process billing and send transactional messages.
• Send technical notices and support replies.
• Respond to your comments, questions, and feature requests.
• Detect, investigate, and prevent fraud and abuse.

Connected AI assistants

OnAirFlow no longer offers in-app AI generation and no longer collects AI provider API keys. If you connect an AI assistant — Claude, ChatGPT, Grok, or another compatible MCP client — you authorize that client against OnAirFlow's own API using OAuth. What we hold is an access grant to our service, issued by you and revocable by you at any time from Settings; we never hold your account or subscription with the AI provider.

A connected assistant acts within the permissions of the person who approved it, never beyond them, and can reach only the rundown surface those permissions allow. When it reads or writes a rundown, that data passes to the AI provider you chose, under your agreement with them and subject to their privacy policy — not ours. OnAirFlow does not inspect, aggregate, or resell the content of your conversations with your assistant, and receives no record of them beyond the rundown changes it makes, which are attributed in your show event log.

Data security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Data is encrypted in transit and at rest.

Cookies and analytics

We use cookies to keep you logged in and to remember your preferences. On the marketing site we use Google Analytics, which sets analytics cookies to help us understand how the site is used. When we run advertising campaigns, we also use first-party cookies to remember which campaign brought you here, and the advertising platform's measurement pixel (currently OpenAI Ads) may set cookies to measure whether an ad led to a signup or purchase.

Third-party processors

We rely on a small number of service providers to operate OnAirFlow. Each processes data only as needed to provide their service:

• Google Analytics — usage analytics.
• OpenAI Ads — advertising conversion measurement (when campaigns are running).
• Stripe — payment processing.
• Resend — transactional email.
• Sentry — error monitoring.
• Cloudflare R2 — file storage.
• Supabase — database hosting.
• Railway and Vercel — application hosting.

Data retention

We retain your information for as long as your account is active or as needed to provide the service. You can request deletion at any time; we remove your data within 30 days of a verified request.

Your rights

• Access the personal data we hold about you.
• Correct inaccurate data.
• Export your rundowns and stories (PDF, Word, Markdown).
• Request deletion of your account and data.
• Opt out of marketing emails while keeping transactional ones.

Contact

Questions about this policy? Email privacy@onairflow.com.