Privacy Policy
Last updated: March 2026 · OneCasa Group Private Limited
1. Introduction
OneBoost is a software product operated by OneCasa Group Private Limited, a company within the OneCasa Group. The website oneboost.in and the OneBoost platform are provided by OneCasa Group Private Limited. Unless we say otherwise, references to "OneBoost," "we," "us," or "our" in this policy mean OneCasa Group Private Limited as the operator of the platform.
OneCasa Group Private Limited operates OneBoost as a SaaS platform that helps local businesses manage advertising campaigns (via the Google Ads API and Meta Marketing API), capture and manage leads through a built-in CRM, handle wallet-based ad spend, and automate follow-ups. When you connect Google Ads or Meta, we (OneCasa Group Private Limited) access and process authorised account data and OAuth tokens solely to provide those features on your behalf, as described below. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
2. Information We Collect
- Account & identity: Name, email address, phone number, password (hashed), and business details when you register or onboard.
- Usage & operations: How you use the platform (e.g. campaigns created, leads, subscriptions, content), log data, and device information.
- Google Ads data: When you connect your Google Ads account via OAuth 2.0, we access your Google Ads customer ID, campaign data (names, budgets, statuses, performance metrics such as impressions, clicks, cost, and conversions), and ad-group/ad-level data. We use the Google Ads API (REST) to read, create, and manage campaigns on your behalf. See Section 5 below for full details on our Google Ads API usage.
- Meta Ads data: When you connect Meta Ads via OAuth, we receive an access token and ad-account identifier. We access campaign data, lead-gen form submissions, and performance metrics to display in your dashboard and sync leads into your CRM.
- Payments & wallet: Wallet balance, transaction history, and payment-related identifiers (via Stripe) for recharges and ad spend. We do not store full card numbers.
- Communications: Messages you send via our contact form and any support or admin correspondence.
3. How We Use Your Information
We use the information to:
- Provide, operate, and improve OneBoost (campaigns, leads, subscriptions, content, wallet).
- Connect and manage your Google Ads and Meta Ads accounts and run campaigns as per your or your assigned manager's instructions.
- Display campaign performance data (impressions, clicks, spend, conversions) in your dashboard.
- Capture and manage leads from ad platforms in the built-in CRM.
- Process wallet recharges, fees, and ad spend.
- Authenticate you and enforce access control (including admin/manager roles and client assignment).
- Respond to your contact requests and support needs.
- Send service-related and, where permitted, marketing communications.
- Comply with legal obligations and protect our rights and safety.
4. Sharing and Disclosure
We may share data with the following categories of recipients:
- Cloud hosting provider: Our servers and database are hosted on cloud infrastructure. Your data is stored on their servers subject to their security practices.
- Google (OAuth & Ads API): When you connect your Google account, authentication tokens and API requests flow through Google's services to provide campaign management and reporting.
- Meta (OAuth & Marketing API): When you connect your Meta account, authentication tokens and API requests flow through Meta's services to provide ad management and lead syncing.
- Stripe (payments): Wallet recharges and payment transactions are processed by Stripe. We do not store your full card details; Stripe handles payment data per their security standards.
- Email delivery: Transactional emails (account verification, notifications) may be sent through a third-party email provider.
- Assigned managers: If you are a business owner on OneBoost, your assigned manager/admin may view your campaigns, leads, and performance data to manage your account on your behalf.
- Legal authorities: When required by law, regulation, or legal process.
We do not sell, rent, or trade your personal information or your Google Ads data to third parties for their own marketing purposes.
5. Google Ads API — Data Practices & Limited Use Disclosure
OneBoost uses the Google Ads API to provide campaign management and reporting features. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5.1 What data we access
- Google Ads customer (account) ID and basic account information.
- Campaign, ad-group, and ad-level data: names, budgets, statuses, bidding strategies.
- Performance metrics: impressions, clicks, cost, conversions, reach.
- Keyword and targeting data associated with your campaigns.
5.2 How we use this data
- To display your campaign performance and analytics in your OneBoost dashboard.
- To create, update, pause, or manage campaigns on your behalf when you or your manager initiate those actions.
- To generate AI-powered ad copy suggestions based on your business profile.
5.3 Limited Use
OneBoost's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google Ads data to provide and improve OneBoost's campaign management and reporting features that the user has requested.
- We do not use Google Ads data for serving advertisements, and we do not sell it to third parties.
- We do not use Google Ads data for purposes unrelated to OneBoost's core ad-management functionality.
- Humans may review Google Ads data only when necessary for security purposes, to comply with applicable law, or when the data has been aggregated and anonymised for internal operations.
5.4 Storage and security
OAuth refresh tokens and access tokens are stored encrypted at rest on our servers. Google Ads data (campaign metrics, account IDs) is stored in our database and retained as long as your account is active. We use HTTPS/TLS for all API communications.
5.5 Revoking access
You may disconnect your Google Ads account from OneBoost at any time via Dashboard → Campaigns → Disconnect. Upon disconnection, we stop accessing your Google Ads data. You may also revoke OneBoost's access directly from your Google Account permissions page. If you delete your OneBoost account, all associated Google Ads data is deleted from our systems within 30 days, except where retention is required by law.
6. Meta Ads — Data Practices
When you connect your Meta (Facebook) Ads account, we access your ad account ID, page information, campaign data, performance metrics, and lead-gen form submissions via the Meta Marketing API. We use this data to:
- Display campaign performance in your dashboard.
- Sync lead-gen form submissions into your CRM.
- Create and manage ad campaigns on your behalf.
You may disconnect Meta Ads at any time from your Campaigns page. We do not sell or share your Meta Ads data with third parties.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Specific retention periods:
- Account data: Retained while your account exists. Deleted within 30 days of account deletion request.
- Google Ads & Meta Ads data: Retained while your ad account is connected. Removed within 30 days after disconnection or account deletion.
- Payment records: Retained as required by applicable tax and financial regulations (typically 7 years).
- Server logs: Retained for up to 90 days for security and debugging purposes.
9. Security
We implement technical and organisational measures to protect your data, including: encryption at rest and in transit (TLS/HTTPS), hashed passwords, role-based access controls, and secure OAuth 2.0 token storage. No system is completely secure; we encourage strong passwords and prompt reporting of any suspected breach to support@oneboost.in.
10. Your Rights
Depending on your location, you may have rights including:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data.
- Portability: Request a machine-readable export of your data.
- Objection / Restriction: Object to or restrict certain processing activities.
- Revocation: Disconnect Google Ads or Meta Ads at any time to stop further data access.
To exercise these rights, email us at support@oneboost.in or use the Contact page.
11. Children
OneBoost is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
12. International Data Transfers
Your data may be processed on servers located outside your country of residence (including India and the United States). We ensure appropriate safeguards are in place for cross-border data transfers in accordance with applicable data protection laws.
13. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Continued use of OneBoost after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions, data requests, or complaints:
- Product: OneBoost
- Operator / legal entity: OneCasa Group Private Limited
- GSTIN (India): 36AAECO8543K1Z0
- Registered office:Flat No. 103, 1-2-151/3/4/A, 2nd Floor, Sri Balaji New Green City, Balaji ResidencyKismatpur Road, Rajendra Nagar (near Plastic Factory)Hyderabad, Rangareddy, Telangana 500030India
- Email: support@oneboost.in
- Website: oneboost.in
- Phone (India): +91 8639820425
- Phone (USA): +1 (551) 359-6301
You may also reach us via the Contact page.