Skip to content

Privacy Policy

At Onsite, we are committed to protecting the privacy of our customers and the users of our software as we understand the importance of personal information. This Privacy Policy outlines how we collect, use, disclose, and manage your personal information.

Collection of Personal Information

We collect personal information from our customers and users in order to provide the best possible service. The types of personal information we collect may include but not limited to:

  • Name, address, phone number, and email address.
  • Property details such as address, unit number, and rental history.
  • Financial information such as credit card details and bank account information
  • User activity data such as login times, browser type, and IP address.

Use of Personal Information

We use your personal information for the following purposes:

  • To provide and manage our services to you.
  • To monitor the usage of our services to you.
  • To improve our services and customer experience.
  • To send you marketing communications about our services and promotions, where you have opted-in to receive such information.
  • To comply with legal and regulatory requirements.

Disclosure of Personal Information

We will only disclose your personal information to third parties under the following circumstances:

  • Where we are required by law or regulation to disclose your information.
  • Where it is necessary for us to provide our services to you.
  • Where you have given us explicit consent to disclose your information.
  • Where we need to protect our legal rights or interests.

Onsite MCP (AI integrations)

Onsite MCP is an optional feature that lets you connect third-party AI tools (such as Claude or ChatGPT) to your Onsite account. If you choose to use MCP, the following applies in addition to the rest of this policy.

What happens when you connect. You add our MCP server in your AI client and sign in with Onsite using OAuth 2.1. The AI tool can then request building and account data from Onsite through MCP tools, within the permissions of your Onsite user account and the scopes you approve. Data returned by those tools, and any personal information you include in prompts or conversations, may be processed and stored by the AI provider you use—not by Onsite alone.

How we use information for MCP. We use connection and usage information (for example OAuth tokens, approved scopes, tool requests, and security logs) to operate MCP, authenticate you, enforce access controls, prevent abuse, and improve the feature.

Your choices. MCP is opt-in. You can stop sharing data by disconnecting the Onsite MCP server in your AI client and, where available, revoking the integration in your Onsite account settings. Your organisation is responsible for which AI tools its users connect and how those tools are used.

Third-party AI providers. When you use MCP, personal information may be disclosed to the AI service you connect. Those providers handle data under their own privacy policies. We do not control how they retain or use conversation content outside what is needed to deliver MCP to you.

Website cookies and tracking

Our marketing website uses cookies and similar browser storage for analytics, advertising, campaign attribution, and embedded forms and videos. Optional tracking is enabled by default when your connection is detected in Australia or New Zealand. For other locations, or when we cannot determine your location, optional tracking stays off until you choose to allow it.

Cloudflare uses the IP address of your connection to determine the applicable regional setting. This does not request your device’s precise location. A regional default is not recorded as your consent, and your saved choices take priority over that default. We also honour Global Privacy Control by disabling advertising and campaign attribution.

Use Cookie settings, available throughout the marketing website, to accept, reject or change these categories:

  • Analytics: PostHog and Ahrefs help us understand website usage. Google Analytics also requires advertising permission because Google account settings can connect advertising tags. Session recording is disabled in our website’s PostHog configuration.
  • Advertising and attribution: Google, Meta and LinkedIn help us measure campaigns and reach relevant audiences. We may remember campaign parameters, advertising click identifiers, the landing page and referring website, and include them with an enquiry. HubSpot’s site-wide tracking also requires both analytics and advertising permission.
  • External forms and videos: HubSpot provides embedded forms and booking, and YouTube provides video playback. When enabled and loaded, these providers receive connection details and may use their own cookies. You can use our demo enquiry form or email hello@onsite.fm without enabling external content or optional tracking. Responding to an enquiry is separate from permission to send marketing communications.

We remember explicit privacy choices in onsite_cookie_preferences for up to 180 days using local storage and a first-party preference cookie. Campaign attribution in onsite_marketing_attribution_v1 expires after 90 days from the latest campaign capture. Expired local-storage records are discarded when next read. Vendor cookies and processing are also subject to the providers’ settings and policies linked below. Necessary storage, including your privacy choices and requested appearance preferences, supports the website’s operation.

Changing your choices stops future optional collection for the categories you disable. We remove matching tracking storage accessible to this website and reload the page to stop loaded tracking scripts. This cannot remove cookies controlled by other domains or erase information already sent to providers. Contact privacy@onsite.fm for requests about information already collected.

Service providers

The service providers we use may have access your Personal Data. These third-party vendors collect, store, use, process and transfer information about your activity on our service in accordance with their Privacy Policies

Google Analytics

We use Google to provide web analytics data. Privacy Policy

We use these services for website advertising, audience building and campaign measurement, subject to the website choices described above. Google Privacy Policy, Meta Privacy Policy, LinkedIn Privacy Policy

Ahrefs

We use Ahrefs for website traffic analytics. Privacy Policy

Cloudflare

We use Cloudflare to deliver and protect our marketing website and determine the applicable regional tracking default. Privacy Policy

YouTube

We use YouTube for embedded videos when external content is enabled. Privacy Policy

Hubspot

We use HubSpot for enquiries, forms, meeting bookings, customer communications, and website tracking subject to the choices described above. Privacy Policy

Mixpanel

We use mixpanel to allow us to evaluate feature usage. Privacy Policy

Posthog

We use posthog to allow us to evaluate feature usage. Privacy Policy

Sentry

We use Sentry to allow us detect any errors in our service. Privacy Policy

Postmark

We use Postmark to send emails. Privacy Policy

OpenAI

We use OpenAI to provide our AI services. Privacy Policy

SMS Everyone

We use SMS Everyone to send SMS. Privacy Policy

Digital Ocean

We use Digital Ocean as our hosting provider. Privacy Policy

Google Cloud Platform

We use Google Cloud Platform as our hosting provider. Privacy Policy

Betterstack

We use Betterstack for infrastructure monitoring. Privacy Policy

WorkOS

We use WorkOS for authentication and user management. Privacy Policy

Storage and Security of Personal Information

We take reasonable steps to ensure that your personal information is stored securely and protected from unauthorized access, use, or disclosure. We use industry-standard security measures such as encryption and secure servers to protect your personal information.

Access and Correction of Personal Information

You have the right to access and correct your personal information held by us. If you would like to access or correct your personal information, please contact us at the details provided below.

Contact Us

If you have any questions or concerns about our Privacy Policy or how we handle your personal information, please contact us at: privacy@onsite.fm

Changes to our Privacy Policy

We reserve the right to amend our Privacy Policy at any time. Any changes will be effective immediately upon posting the revised Privacy Policy on our website. Your continued use of our services will constitute your acceptance of any changes to our Privacy Policy.