Privacy Policy

Last updated: October 2026 · OneKeyCo / MMOS Platform

Data Controller

The data controller for this website is OneKeyCo / MMOS, reachable at info@onekeyco.com.

Data We Collect

When you use the contact form on this website, we collect:

• Name and email address (required)
• Company name and message (optional)

We also collect technical data automatically: IP address, browser type, pages visited, and timestamps — for security and performance monitoring purposes.

Bank Account Information (Open Banking / Financial Connections)

Where our clients choose to connect a bank account through our banking and administrative services, we process bank account information via Stripe Financial Connections, strictly with the account holder's consent. This may include:

• Account ownership details (account holder name, IBAN) — to verify account ownership;
• Account balances and transaction history, where the client enables it — to reconcile incoming payments and provide administrative and accounting reporting on the client's behalf.

Legal basis: the connection is based on the account holder's explicit consent, which can be withdrawn at any time; processing is carried out for the performance of the service contract and, for fraud prevention and reconciliation, our legitimate interest.

We do not use this data for credit scoring or creditworthiness assessment, nor do we share it with unauthorised third parties.

Retention: bank account data is kept only for as long as necessary for the purposes above and is deleted when the connection is revoked or the service ends, unless a longer period is required by law (e.g. accounting obligations).

This data is processed through Stripe, our payment and open-banking provider, under their terms and privacy policy.

Purpose and Legal Basis

• Contact form data — processed to respond to your enquiry (legitimate interest / pre-contractual steps).
• Technical logs — processed for security, fraud prevention and infrastructure stability (legitimate interest).
• Cookies — processed based on your consent (where applicable) or legitimate interest for strictly functional cookies.

Data Retention

Contact form submissions are retained for up to 24 months or until you request deletion. Technical logs are retained for up to 90 days.

Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. Data may be shared with:

• Our hosting and infrastructure providers (Hetzner Cloud, Cloudflare) for service delivery.
• Google (Fonts CDN) — limited technical session data per their privacy policy.
• Stripe — for payment processing and, where applicable, bank account verification and open-banking data (Financial Connections), per their privacy policy.

Your Rights (GDPR)

Under the GDPR and applicable national law, you have the right to:

• Access, rectify or erase your personal data;
• Restrict or object to processing;
• Data portability;
• Lodge a complaint with your national supervisory authority.

To exercise your rights, contact us at info@onekeyco.com.

Cookies

For detailed information on the cookies we use, see our Cookie Policy.

← Back to site