Your conversations
belong to you
Ona records only what you choose, encrypts everything it keeps, and never makes your data someone else's.
Trust is earned by being clear, so here is exactly how Ona handles your data.
Ona does not keep your audio. It is deleted as soon as it is transcribed, and never stays on our servers longer than 24 hours; the transcription provider's copy is deleted too. For Ask Ona to answer questions across months of conversations, Ona keeps your transcripts, summaries and notes on secured cloud infrastructure, encrypted at every step and guarded by strict access controls, until you delete them. Nothing is shared, sold, or used to train models without your say-so. And you choose what gets recorded in the first place: every capture starts with a tap you make on purpose.
You can export your data or delete it at any moment: a single meeting, a whole project, or your entire account. Deletion is permanent on our side. And if your work demands that nothing ever leaves your device, we would rather say it plainly: cloud processing is how Ona works today.
Questions? Email us at info@onavoice.ai or read our Privacy Policy.
Encrypted at every layer
Your transcripts and notes are protected by AES-256 at rest, and every connection runs over TLS 1.2 or newer.
At rest
In transit
Key management
You're in control
Pause or stop recording at any moment, delete any conversation, or delete your whole account in one step.
Your data stays yours
We never sell your conversations and never use them to train models by default. Your data works only for you, in ways you have approved.
Consent comes first
Ona shows a visible indicator whenever it records, and we ask you to tell participants. No meeting should be captured behind anyone's back.
Built to least privilege
Access inside Ona is scoped to the minimum each system needs, and our controls are exercised by outside security reviewers.
SOC 2
Type II audit in progress
GDPR
Designed to GDPR principles
CCPA
Designed for CCPA rights
HIPAA
Privacy-conscious design for health work
Who touches your data
Ona runs on a short list of infrastructure providers. Each one processes data only under contract, only on our instructions, and only for the job below.
| Service | What it does | What it can touch |
|---|---|---|
| Cloud hosting | Runs Ona's servers and encrypted storage | Transcripts and summaries, encrypted |
| Speech to text | Turns meeting audio into transcripts | Audio, only while a transcript is being made |
| AI processing | Generates summaries and Ask Ona answers | Transcript excerpts, per request, not retained |
| Email delivery | Sends sign-in links, receipts and account email | Your email address |
| Payments | Handles subscriptions and invoices | Billing details, never your conversations |
We tell you before a new subprocessor starts handling customer data. Email info@onavoice.ai for the complete, current list.
How we run security
Security is a practice, not a badge. These are the habits behind the encryption.
Least privilege
Production access is limited to the few engineers who need it, scoped to the task at hand, and logged.
Independent testing
We bring in outside security reviewers to test our infrastructure and controls, and we act on what they find.
Always-on monitoring
Audit logs and alerts run across our systems, so unusual access wakes an engineer instead of going unnoticed.
Coordinated disclosure
Found something? We want to know, and we will not make you regret telling us. Read the disclosure policy
Frequently asked questions
Only you, unless you share them. Meetings you record are private to your account by default. In a team workspace you choose, per meeting, whether to share it, and admins see only what members have shared.
No. Your recordings, transcripts and summaries are not used to train models by default, and we never sell your data. If we ever offer a data-sharing program, it will be exactly that: off until you turn it on.
Ona shows a visible recording indicator on every platform while capture is running, and the RecordPen carries its own light for the same reason. We ask you to tell participants before you record: in many places that is the law, and everywhere it is the right thing to do.
Deleting a meeting removes its transcript, summary and everything derived from them from your account immediately, and the data is purged from our systems on a short, fixed schedule. There is no audio to remove: it was deleted once it was transcribed. Deleting your account removes everything, including your exports and settings.