Privacy Policy — Onit
Summary: Agate Arch Technologies LLC does not collect your work items, provider credentials, or connection settings. Those stay on your device. When you monitor work, your device talks to provider APIs you configure (for example Jira, GitLab, GitHub, Bitbucket, and more). Optional Store subscriptions are handled by Apple or Microsoft; we do not receive your payment card details. To support evaluation and organization licensing, Onit may send limited technical license information to Agate Arch (described in Section 6). We do not use in-app analytics, advertising, or crash-reporting services that send work data to Agate Arch Technologies LLC.
1. Who we are
This Privacy Policy applies to the Onit desktop application and related support pages published by Agate Arch Technologies LLC (“Agate Arch,” “we,” “us,” or “our”).
Website: https://agatearch.com/
Privacy / support contact: info@agatearch.com
2. What Onit is
Onit is a private, local issue and review monitor for desktop. It polls providers you connect and shows assignments, reviews, and related alerts on your machine. We do not host your company work data and we do not provide an Onit cloud account for core monitoring.
By using the app you also agree to our in-app End User License Agreement (EULA). If the EULA and this Privacy Policy conflict on privacy topics, this Privacy Policy controls for privacy matters.
3. Information Agate Arch does not collect
We do not receive or store your monitored work data. In particular, we do not:
- Collect or store your provider URLs, emails, API tokens, issue/review content, inbox events, or app preferences on our systems;
- Sell personal information;
- Run first-party analytics, advertising, or crash-reporting pipelines that transmit your work data to Agate Arch Technologies LLC;
- Require an Agate Arch account to use the app.
Limited technical information used only for evaluation and organization licensing is described in Section 6. If we introduce additional collection in the future, we will update this policy and applicable store disclosures before enabling it.
4. Information stored and processed on your device
To provide features you expect, Onit locally on your device may store and process:
- Connection configuration — provider base URLs, account identifiers, API tokens/credentials, and monitor options;
- Cached work data — issue/review summaries, statuses, assignees, planning membership, and related fields needed for monitoring;
- Inbox and read state — local events, read/unread flags, snooze, and quiet-hour preferences;
- App preferences — appearance, polling intervals, window/widget placement, tray options, and similar settings;
- Legal and demo flags — for example EULA acceptance and offline-demo dismissal;
- License status on device — local copy of evaluation or organization license timing and Store subscription status needed to enable or pause live monitoring (see Section 6).
Sensitive values (such as API tokens) may use platform secure storage where available. Work connections and cached work content are used to operate the app on your device and are not uploaded to Agate Arch.
5. Network activity — providers you configure
When you use Onit with a real connection, your device sends ordinary network requests to endpoints you configure, which may include:
- Atlassian Jira Cloud or Data Center;
- GitLab, GitHub, Bitbucket, or other supported providers you add;
- Related API hosts required by those services (pagination, avatars, or metadata referenced by the provider).
Agate Arch does not control those services. They may log technical data typical of API traffic (such as IP address, user agent, or request timing) under their policies. Review your organization’s and provider’s terms and privacy notices for questions about those services.
The offline demo uses sample data only and does not contact your company services.
6. Evaluation, organization licenses, and Store subscriptions
Onit may offer a time-limited full evaluation and optional continued access through a Store subscription and/or an organization license (for example an activation code from your employer).
What Agate Arch may keep for licensing. To operate evaluation and organization licenses, Agate Arch may receive and store only:
- A technical device identifier (or a derived form of it) that is not your name, email, username, or hostname;
- License timing and status needed to know whether evaluation or an organization license is active on that device (for example start and end times, and last successful license contact);
- If you enter an organization activation code, a record that this device is associated with that organization license (seat use), without receiving your work content.
We do not use this licensing information to read your issues, reviews, or provider credentials. Ordinary connection metadata for those license requests (such as IP address) may be processed briefly for security and abuse prevention and is not used to profile your work activity. Limited platform technical information used only for licensing (for example operating system) may be included with those license contacts and is covered by the summary above.
Store subscriptions. Payment and paid subscription status are handled by the respective platform (Apple or Microsoft). We do not receive your payment card details. The platform may provide license information so the app can unlock monitoring on your device. Apple and Microsoft process personal data under their own privacy policies.
7. Desktop platform integrations
On supported desktop builds, Onit may use OS features such as:
- System tray / menu bar — status and unread indicators;
- Local notifications — optional alerts for monitored events;
- Launch at login — if you enable it;
- Floating widget / multi-window UI — local presentation of counts and navigation;
- Session presence signals (where implemented) — for example lock or idle state on the local machine to reduce noisy alerts.
These features run on your device. They do not send monitored work content to Agate Arch.
8. Permissions and platform disclosures
Depending on your OS and build, Onit may request capabilities such as:
| Permission / capability | Why it is used |
|---|---|
| Internet / network access | Poll and refresh the providers you configure; contact Store billing where used; contact Agate Arch for evaluation and organization licensing as described in Section 6. |
| Notifications | Optional desktop alerts for monitored events. |
| Secure / credential storage | Protect API tokens and encrypted local state where the platform provides it. |
| Background / startup | Optional launch at login and continued monitoring while the UI is minimized to the tray. |
The permission list shown by your OS or store at install time is authoritative for your build.
9. Retention and deletion
Your monitored work data stays on your device. Deletion of that data is primarily under your control:
- Use in-app options to disconnect, clear local data, or uninstall the app, subject to how your OS handles residual files;
- Removing a connection stops the app from using those credentials;
- License records described in Section 6 are kept only as needed to operate evaluation and organization licenses (including preventing misuse of evaluation) and may be removed or updated when a license ends or when we process a valid request;
- If you email us for support and voluntarily include information, we retain that correspondence only as needed to respond and as described in our reply.
10. Security
We design the app to use reasonable platform features (such as encrypted or secure storage for sensitive values where implemented). No app or device is perfectly secure. Use a device passcode or login, keep your OS updated, and only connect providers and tokens you are authorized to use.
11. Children’s privacy
Onit is not directed at children under 13 (or the minimum age required where you live). We do not knowingly collect personal information from children on our systems. If you believe we received child-related information in error via support email, contact info@agatearch.com.
12. International users
Agate Arch Technologies LLC is based in the United States. Your device processes and stores work data locally as described above. License information in Section 6 may be processed on infrastructure we operate or use (which may be in the United States or other regions). Providers you configure may operate in other countries. Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal information — contact us regarding information you sent us directly (for example support email) or license records we hold. Rights relating to providers you configure or Store purchases must be exercised with those parties or your organization.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will change the “Last updated” date and post the new version at this URL (or a successor URL linked from the store listing). Where required by law, we will provide additional notice.
14. Contact
Questions about this Privacy Policy: info@agatearch.com
This document describes how Onit is intended to work from a privacy perspective. It is not legal advice.