Privacy Policy

Onirix provides private AI search and retrieval augmented generation services for organizations. This Privacy Policy explains how we collect, use, protect, and disclose information when you use the Onirix website, dashboard, APIs, integrations, and related services.

If your organization has a separate written agreement with Onirix, that agreement may include additional privacy, security, data processing, or retention terms.

Account information, such as your name, email address, organization, authentication details, workspace settings, billing or plan information, and communications with us.

Customer content, such as files you upload, text extracted from those files, metadata, folders, document titles, permissions, comments, and other content you choose to index in Onirix.

Connected source information from integrations you authorize, including Google Drive, Microsoft OneDrive, SharePoint, and other supported business systems. Depending on your configuration, this may include selected files, folders, metadata, access permissions, and update or deletion signals.

Query and usage information, including prompts, searches, generated answers, retrieved source references, citation clicks, logs, device data, IP address, browser information, and events used to operate and improve the service.

When you upload files or connect a source, Onirix may process that content to extract text, split content into searchable chunks, generate embeddings, build indexes, preserve source metadata, and keep source references available for retrieval.

When an authorized user submits a query, Onirix may retrieve relevant source chunks, file metadata, snippets, titles, links, and citations from the indexed content available to that user. Those retrieved sources may be used as context during answer generation and may be displayed so the user can inspect the underlying source.

Onirix is designed for grounded answers, but generated responses can still be incomplete or inaccurate. Users should review the cited source material before relying on an answer for important decisions.

You control which integrations are connected and which files or folders are made available to Onirix. We use the permissions granted through the relevant provider to access, sync, index, and retrieve content for the service.

If you disconnect an integration, Onirix will stop future syncing from that source. Previously indexed content may remain in the service until deleted by you, removed through retention settings, or handled under your organization agreement.

Third-party services, such as Google Drive and Microsoft OneDrive, are governed by their own terms and privacy policies. Onirix does not control those third-party services.

We use information to provide, secure, maintain, troubleshoot, and improve Onirix, including indexing content, answering queries, showing citations, enforcing permissions, supporting users, preventing abuse, and meeting legal obligations.

We may use aggregated or de-identified information to understand service performance, reliability, and product usage. We do not use your private customer content to train public AI models unless you or your organization separately authorizes that use in writing.

We may share information with service providers and subprocessors that help us host, secure, operate, analyze, support, or improve Onirix. These providers are authorized to use information only as needed to provide services to us.

Within your organization, workspace owners, administrators, and authorized users may access content, queries, generated answers, citations, logs, and settings according to configured roles and permissions.

We may disclose information if required by law, legal process, or to protect the rights, safety, and security of Onirix, our users, or others.

We use technical and organizational safeguards intended to protect customer content and account information. No internet service can guarantee absolute security, so customers should configure integrations, user roles, and source permissions carefully.

For connected sources, Onirix attempts to respect the access controls available from those sources and from your workspace configuration. Your organization is responsible for deciding what data to upload, connect, index, and make searchable.

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain backups, and support security or audit requirements.

You or your organization may request deletion of account information, uploaded files, indexed content, embeddings, and connected source data, subject to backup cycles, legal requirements, and any separate agreement with Onirix.

You can choose what files to upload, which sources to connect, which folders or documents to sync, who can access a workspace, and whether to disconnect an integration.

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing of personal information. Contact us to make a request.

Questions about this Privacy Policy or Onirix data practices can be sent through the contact page at /contact.

Last updated: May 28, 2026.