OONOO Privacy Policy
This policy explains how Oonoo B.V. ("OONOO", "we", "us") collects and uses personal data when you use our
file transfer, agreement, view-only and identity verification services. We are the data controller for the
personal data described here.
Who we are
Oonoo B.V. (Besloten vennootschap)
Heer Heymansuysstraat 4, 3311 XE Dordrecht, Netherlands
Chamber of Commerce (KvK): 90158601
VAT (BTW): NL865226544B01
For any privacy question, please use our contact form.
What data do we collect?
The data we hold depends on how you use OONOO:
Standard (no account): the sender's email address, the recipient's email address (when you send by email), the files you upload for delivery, and, for agreements, the contract details you enter and the electronic signatures of the parties.
Pro (account): your account details and the metadata for the workflow features you choose, such as your transfer history, saved agreements, address book entries and billing information.
Identity verification (optional add-on): where a sender enables it, the recipient completes an identity check. The identity document and selfie are captured and processed by Stripe Identity (see "Identity verification" below). OONOO does not receive or store the document or selfie images.
Technical data: limited technical data needed to run the service. We do not store your IP address. Analytics data about how you use the site is only collected if you accept analytics cookies.
How do we collect your data?
You provide most of this data directly, for example when you send a transfer or an agreement, create a Pro account, or complete an identity check. Analytics data is only collected if you accept analytics cookies.
Why we use your data and our legal bases
We use your data to deliver your transfers and agreements, run identity verification when requested, provide the Pro workflow features, take payment, keep the service secure, and comply with our legal obligations. We do not sell or trade your personal data. Depending on the activity, our legal basis under Article 6 GDPR is:
performance of a contract, for delivering the transfer, agreement or Pro service you request;
your consent, for optional features such as the address book, saved transfer log and analytics cookies;
our legitimate interests, for preventing abuse and keeping the service secure;
compliance with a legal obligation, for example tax and accounting records.
Identity verification
The optional identity verification feature is powered by
Stripe Identity, who acts as our processor for this feature. When a recipient completes a check, Stripe captures and analyses their identity document and a selfie to confirm the document is genuine and matches the person. OONOO does not receive or store the document or selfie images, and we do not retain the verification data. The verification receipt is made available to the sender and recipient at the time of the check, by email or download, and is not kept by us afterwards.
Who we share your data with
We use a small number of trusted providers (processors) to run the service, under data processing agreements:
Amazon Web Services (AWS) for hosting and file storage in the EU, under their Data Processing Addendum;
Stripe for payments and, where enabled, Stripe Identity for identity verification;
Google Analytics for website analytics, only if you accept analytics cookies.
Beyond these providers, we do not share your personal data with third parties except where required by law.
International transfers
We host and store files in the EU. Some of our providers (for example Stripe and Google) may process limited data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long do we keep your data?
Files sent through the standard service are automatically deleted after the transfer window chosen by the sender (72 hours, 2 weeks or 1 month), enforced by lifecycle rules on our S3 storage. For Pro accounts, your account and workflow data is kept for as long as your account exists, and you can delete your data at any time from your account; when you delete your account it is removed. Identity verification data is not retained by us. Billing records are kept for as long as the law requires.
What are your data protection rights?
OONOO would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access - You have the right to request OONOO for copies of your personal data and we will email this information to you.
The right to rectification. - You have the right to request that OONOO correct any
information you believe is inaccurate. You also have the right to request OONOO to complete information you believe is incomplete.
The right to erasure. - You have the right to request that OONOO erase your personal data, under certain conditions.
The right to restrict processing. - You have the right to request that OONOO restrict the processing of your personal data, under certain conditions.
The right to object to processing. - You have the right to object to OONOO's processing of your personal data, under certain conditions.
The right to data portability. - You have the right to request that OONOO transfer the data that we have collected to another organization,
or directly to you, under certain conditions.
If you make a request, we have
one month to respond to you.
If you would like to exercise any of these rights, please contact us though the contact form.
Do we use cookies?
OONOO does not use any marketing or tracking cookies. Analytics cookies are only set if you accept them, and we store a single functional cookie to remember your cookie choice. This helps us improve our website.
Privacy policies of other websites
OONOO website contains links only to our own. Our privacy policy applies only to our website.
Changes to our privacy policy
OONOO keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 28 July 2026.
How to contact us
If you have any questions about OONOO's privacy policy, the data we hold on you, or you would like to exercise one of your
data protection rights, please do not hesitate to contact us.
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that OONOO has not addressed your concern in a satisfactory manner,
you may contact the
Dutch DPA (Autoriteit Persoonsgegevens).
Phone number: (+31)-(0)88-1805250 (for privacy questions, call on Monday - Thursday at 10:00-12:00)
(+31)-(0)70-8888500 (business related questions, call on Monday - Friday at 9:00-13:00)
