Privacy Policy

0nmcp.com is operated by RocketOpp LLC (“we,” “us,” or “our”), a Pennsylvania limited liability company. Our principal contact is mike@rocketopp.com.

Account Information

When you create an account, we collect your email address, name, and any profile information you provide. If you sign in with Google, LinkedIn, or GitHub, we receive your public profile data (name, email, avatar) from the identity provider.

OAuth Tokens

If you use “Connect Google” to link your Google account, we store OAuth access tokens and refresh tokens to maintain your connection to Google services. These tokens are stored securely in our database and are only used to authenticate API calls on your behalf.

Vault Credentials

API keys you store in the Console Vault are encrypted client-side using AES-256-GCM with PBKDF2 key derivation before being transmitted. We cannot read your API keys. Encryption and decryption happen entirely in your browser.

Usage Data

We collect standard web analytics data: pages visited, session duration, referral source, browser type, and device information. We use this data to improve our service.

• Provide, maintain, and improve our services
• Authenticate your identity and manage your account
• Execute API calls to third-party services on your behalf (using your stored credentials)
• Send transactional emails (account confirmation, password reset, security alerts)
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

We use the following third-party services to operate 0nmcp.com:

• Supabase — Authentication and database hosting
• Vercel — Application hosting and deployment
• Stripe — Payment processing (we never store credit card numbers)
• Google OAuth — Optional account linking for Google services

Each third-party service has its own privacy policy governing its use of data.

0nmcp.com's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Google account, we request access to specific Google services (Gmail, Calendar, Drive, Sheets, etc.) as described during the consent process. We only access data within the scopes you explicitly authorize.

You can revoke 0nmcp.com's access to your Google account at any time from your Google Account permissions page.

We implement industry-standard security measures including:

• Client-side AES-256-GCM encryption for vault credentials
• HTTPS/TLS encryption for all data in transit
• Row Level Security (RLS) policies on all database tables
• OAuth 2.0 with PKCE for authentication flows
• Secure HTTP-only cookies for session management

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymized usage analytics may be retained indefinitely.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Withdraw consent for optional data processing
• Revoke third-party OAuth connections at any time

To exercise these rights, contact us at mike@rocketopp.com.

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics data is collected via server-side methods where possible.

0nmcp.com is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, contact us and we will delete it promptly.

We may update this privacy policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top reflects the most recent revision.

For questions about this privacy policy or our data practices, contact: