Last updated: October 24, 2026.

This policy explains what personal information Onezero Labs ("we", "us") collects through this website, how we use it, who we share it with and the choices you have. It applies to visitors of this site and to people who contact us or apply for a role through it. It does not cover the products we build for clients, which are governed by each client's own policies.

Information you give us. When you use the contact form you provide your name, phone number, email address and anything you write in the message. When you apply for a role you may also provide a link to your GitHub, portfolio or LinkedIn profile. We record the page you submitted the form from and, if you arrived through a campaign, the campaign parameters (UTM tags) in the URL.

Information collected automatically. Like most websites we receive standard technical data: IP address, browser and device type, pages viewed, referring page and timestamps. We use Google Tag Manager and Google Analytics / Google Ads tags to measure traffic and the performance of our advertising. These tags set cookies and may collect an advertising identifier. We do not use session-replay tools and we do not sell this data.

We do not knowingly collect information from children under 16, and this site is not directed at them.

We use the information to respond to your inquiry, evaluate job applications, operate and secure the site, understand which pages and campaigns are useful, and comply with legal obligations. Contact-form details go to our team by email and into our internal CRM so we can follow up. We do not use your information for automated decision-making that has legal or similarly significant effects.

Service providers that process data on our behalf: hosting and email delivery providers, Google (Tag Manager, Analytics, Ads) and the CRM where inquiries are stored. Each provider is bound by contract to use the data only to provide its service. We may also disclose information when required by law, to protect our rights, or as part of a merger or acquisition. We do not sell personal information and we do not share it for cross-context behavioral advertising, except to the extent advertising cookies described above are treated as a "share" under certain US state laws — you can opt out as described below.

Analytics and advertising cookies are set through Google Tag Manager. You can block or delete cookies in your browser settings, install the Google Analytics opt-out add-on, or manage ad personalization at adssettings.google.com. If your browser sends a Global Privacy Control (GPC) signal we treat it as a request to opt out of the sharing of your data for targeted advertising where that right applies.

Depending on where you live you may have the right to know what personal information we hold about you, to receive a copy of it, to correct or delete it, to opt out of its sale or sharing for targeted advertising, and not to be discriminated against for exercising these rights. Residents of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, Oregon and other states with comprehensive privacy laws may exercise these rights by contacting us through the form on this site; we will verify the request using the information you provided and respond within the time the applicable law requires. If you are in the EU, UK or Switzerland, the GDPR / UK GDPR give you comparable rights, and our legal basis for processing is your consent (for cookies), performance of a contract or pre-contractual steps (for inquiries), and our legitimate interest in running and improving the site.

We keep inquiry and application data for as long as needed to handle it and for a reasonable period afterwards for follow-up and record-keeping, unless you ask us to delete it sooner.

Form submissions are sent over TLS, stored in access-controlled systems and limited to the people who need them to respond. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Our team and providers may process data outside the state or country you live in; where required we rely on recognized transfer mechanisms such as standard contractual clauses.

We may update this policy from time to time; the date at the top reflects the latest version and material changes will be highlighted on this page. Questions, requests and complaints can be sent through the contact form on this site — mark the message "Privacy request" and we will route it to the right person.