Data retention policy
One Horizon retains customer data while your subscription is active. Upon service termination, we permanently delete the user account and associated data. Inactive accounts (12+ months) will be automatically deleted. Payment records are retained for 7 years as legally required. Users can request data deletion anytime at privacy@onehorizon.ai.
Data archiving and removal policy
One Horizon does not archive customer data. Upon account termination, we permanently delete all customer data and associated records. Accounts inactive for 12+ months are automatically deleted. Users are able to delete their own account at any time, this will permanently delete any associated data to their account.
Data storage policy
One Horizon currently stores all customer data exclusively in EU data centers (Amsterdam, Netherlands). We use secure subprocessors including Fly.io (EU hosting), Supabase (AWS), and Google (Netherlands) for AI services. All data is stored with enterprise-grade security measures and encryption in transit and at rest.
Data center location(s)
Netherlands, Germany
Data hosting details
Cloud hosted. One Horizon uses multiple EU-based cloud providers including Fly.io, Supabase on AWS, and Google Cloud. All infrastructure is cloud-native with no on-premise components.
Data hosting company
Supabase, AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Google Gemini, OpenAI 4.1-nano
LLM retention settings
One Horizon's LLM is configured to retain Customer Data for zero duration, data is processed in real-time and immediately discarded after response generation.
LLM data tenancy policy
Customer data processed through Google Gemini is isolated per tenant with no cross-tenant data sharing. All LLM processing occurs in EU (Netherlands) with enterprise-grade data protection. Customer prompts and responses are not used to train models.
LLM data residency policy
One Horizon's LLM currently operates exclusively in EU data centers ensuring all customer data processing remains within European jurisdiction.