Privacy, plainly.

What Onaji Collects

• Writing samples you provide (pasted text or uploaded files).
• Topic tags you select during onboarding.
• Edits you make to drafts and your answers to feedback questions.
• Your email address, used for account identification only.

How Onaji Uses It

• Writing samples and edit feedback are processed by a third-party AI provider to build and refine your Voice Profile.
• Topic tags are used to query a news service for relevant articles.
• Your data is stored in a hosted database so your profile persists between sessions.

How Onaji Protects It

Your Voice Profile, writing samples, and drafts are stored under a random user ID, not your name. Your name and email live in a separate table that only the product operator can read. A Voice Profile pulled out of the database on its own doesn't say who it belongs to; linking one back to a real person takes administrative access.

• Data travels between your browser and Onaji over encrypted connections only. Your browser is also told to refuse unencrypted connections to Onaji for the next two years.
• At rest, data lives on an encrypted database.
• The database itself enforces who can see what. Even if a bug in the code tried to return someone else's Voice Profile, samples, or drafts, the database would refuse.
• Every request that reads or changes your account is verified against your active login before the system returns or modifies anything.
• Your login sits in a cookie that scripts running in your browser can't read directly, which makes it much harder to steal.
• Onaji can't be secretly embedded inside another website. A malicious page can't frame Onaji and trick you into clicking something you didn't mean to.
• When your writing samples and Voice Profile are sent to the AI, the text is wrapped so that nothing inside it can pose as an instruction. If a sample happened to contain phrasing like “ignore what you were told,” the AI treats it as words on the page, not a command.
• Automated abuse is rate-limited.
• State-changing actions are protected against attacks where a malicious site tries to act on your behalf in a tab you left open.
• Dependencies are kept up to date so known security holes in third-party code get patched quickly.

What Onaji Doesn't Do

• Onaji doesn't sell or monetize your data.
• Onaji doesn't share your writing samples or Voice Profile with other users.
• Onaji doesn't post anything on your behalf; you copy and paste your final text wherever you choose.

Administrative Access

The product operator has administrative access to your data for the purpose of maintaining and improving the service. This includes writing samples, Voice Profiles, drafts, and feedback responses.

Third-Party Services

Your data is processed by the following categories of third-party services:

• AI processing provider (Voice Profile synthesis and draft generation).
• Database hosting provider (data storage and persistence).
• Application hosting provider (serving the web application).
• News retrieval service (your topic tags are sent as search queries, but not your identity or writing samples).

Data Retention and Deletion

Your data persists as long as your account exists. You may request complete deletion of your data at any time by emailing hello@onaji.app.