Privacy policy.

Who we are and what this covers

One Question operates onequestion.io and offers One Question Accelerator, Build With You and Accelerator Community. This policy covers visits to this website, use of its business tools, inquiries submitted here and Community checkout on this website or Stripe’s website. Contact us at accelerator@onequestion.io.

Information we collect and why

• Inquiries and correspondence: your name, email address, phone number, launch details and anything else you choose to send. We use this information to respond, assess fit and discuss the service you requested. Please do not submit sensitive information such as health information, government identifiers or payment-card details.
• Necessary website information: your privacy choice and technical request information, such as IP address, browser information and request time, processed by our hosting provider to deliver and protect the website and process forms.
• Optional analytics: only after you accept, PostHog processes page visits/exits, public-link and button clicks, inquiry/checkout actions, tool progress, click/scroll heatmaps, page-speed metrics and browser-error types/stack locations. It also records masked sessions so we can find navigation and conversion problems. Inputs, inquiry text and tool results are blocked from replay; click text and attributes are masked; console and network payload recording are off. Published campaign labels help us compare traffic, while raw ad click identifiers are removed. In your browser, an opaque identifier uses tab-only sessionStorage, cleared on withdrawal and when the tab closes. With analytics permission, we can link browser identifiers and campaign labels to Stripe-confirmed Community registration, first payment and renewals using opaque receipt identifiers, actual paid amounts and payment status. Replays are retained for 30 days. URL query strings and fragments are removed from analytics URL properties. It receives connection information needed to receive a request; our project is configured to discard stored IP addresses. Business-tool inputs and outputs stay in your browser and are never sent in analytics. We do not send contact details or inquiry text or build personal profiles. If you allow analytics, we also save campaign labels with your inquiry in Netlify to understand which routes produce leads. These labels stay with the submitted inquiry instead of disappearing when this browser tab closes.
• Google Analytics: only after analytics permission, Google processes public page/referral paths, campaign labels, visits, scrolls, public-link and form interactions, and confirmed inquiries, Community registrations, payments and renewals, browser/device and connection information. With analytics permission, a browser identifier and campaign labels can connect the checkout journey to its Stripe-confirmed outcome. The existing Enhanced measurement setting can also measure site search, videos and file downloads; form events carry form metadata rather than answers. First-party analytics cookies identify a browser and session for up to 12 months. We remove them on withdrawal; Google server retention is separate. We exclude contact details, inquiry answers and tool inputs/results, and disable Google advertising signals and personalization. See Google’s privacy policy.
• Optional advertising: only after you allow advertising, Meta Pixel and server measurement can send page visits, Community page views, confirmed inquiries, Community registrations, first payments and renewals. This includes public page/referral addresses, permitted campaign tags, browser/device and connection information, advertising cookie or ad-click identifiers, opaque receipt identifiers, payment status and actual paid amounts. We can associate a checkout with its Stripe-confirmed outcome only for the purposes you permit. Meta may associate these actions with your Meta account to measure and improve our Facebook and Instagram advertising and show relevant ads across websites. Automatic event capture and automatic advanced matching are disabled in our website integration. Our Meta advertising setup also includes a connected web Conversions API service for website event processing through a server. We do not send contact details, inquiry text, payment-card details, or tool inputs and outputs to Meta. A checkout click is tracked separately from a confirmed registration or payment; a complimentary $0 registration is not a paid purchase.
• Checkout: payment information is entered on Stripe’s website. One Question receives information needed to operate your membership, such as customer/contact information, payment status and subscription details. We do not receive your full payment-card number through this website.

We use information for the purposes above, service administration, security and legal obligations. Analytics and advertising have separate preferences. Accepting either is separate from submitting an inquiry, buying a service or agreeing to receive marketing messages.

Providers and disclosures

Netlify hosts this website and processes inquiry forms on our behalf. Cal.com processes name, email, business context and scheduling details for requested calls and shares the booking with Elliot and his connected Google Calendar. After you submit the free-call form, we use your name and email once to prefill Cal.com in the same browser tab; that prefill expires after 30 minutes. Loops sends service emails, including a link to finish booking. See Cal.com privacy and Loops privacy. We may keep service contacts and permitted campaign labels in Attio. PostHog provides optional analytics. Meta provides optional advertising measurement and targeted advertising. Stripe processes Community checkout and subscription payments through its own website or an embedded payment form on our website. On the embedded Community checkout page, the Stripe payment form opens when the page loads; the Stripe-hosted option opens after you choose Continue. Stripe handles the payment fields; we do not record them or receive full payment-card details. The applicable provider notices are Netlify privacy, PostHog privacy and Stripe privacy and Meta privacy.

One Question and providers involved in responding to you or providing your requested service may access the information needed for that purpose. For a requested membership, database, email and community-service providers support delivery and communications. We may disclose information where required by law, to protect the service or people, or in a business transfer with appropriate protections. Service providers may process information in the United States and other countries where they operate.

With advertising permission, we share the website event information described above with Meta for ad measurement and cross-context behavioral advertising. Depending on applicable law, this may be considered sharing, targeted advertising or a sale of personal information; we do not receive money for it. You can opt out through Cookie preferences, and we honor GPC and DNT. Analytics and advertising stay off until you accept their respective categories.

Cookies and online tracking

Our cookie policy lists the technologies we use. A necessary first-party cookie remembers your choice for up to 12 months. PostHog uses no analytics cookies. After analytics permission, an anonymous identifier and campaign context stay in sessionStorage for this browser tab until it closes; we clear them on withdrawal. Meta Pixel may use advertising cookies, including _fbp and _fbc, generally for up to three months, with renewal possible. You can reject analytics and advertising independently or withdraw permission through Cookie preferences in the footer without losing access to this website, inquiries or checkout links.

Global Privacy Control and Do Not Track: we honor either browser signal by disabling all optional tracking on this website, even if an earlier saved preference accepted it. Google Analytics, PostHog and Meta load only with the appropriate permission. Withdrawing advertising permission reloads the page to remove the Pixel and asks your browser to remove our named Meta cookies, _fbp and _fbc, at the website paths and domains used by our integration. Changing your choice does not erase information already received by a provider or clear cookies on Meta’s own websites.

Checkout confirmation and optional attribution

A random checkout-confirmation reference stays in this browser tab for up to 24 hours, or until the tab closes, so we can match a completed Stripe checkout to the correct confirmation. It contains no contact or advertising identifiers and works without optional tracking.

Only for purposes you accept, One Question can keep browser or ad-click identifiers, campaign labels and their connection to the verified checkout for up to 90 days. A separate opaque withdrawal reference can remain in this browser’s localStorage for up to 90 days after an optional choice is accepted. It contains no contact, analytics or advertising identifiers and lets Cookie preferences withdraw the selected purpose from linked server tracking in this browser. Analytics and advertising remain independent.

Withdrawing a purpose stops future optional sends for that purpose from the linked checkout contexts and removes their optional identifiers. It does not erase events already delivered to a provider or automatically change choices made in another browser or device. Contact us using the privacy-request details below for help with records from other devices.

Retention and security

The privacy-choice cookie expires after 12 months unless changed or cleared. We keep inquiry and correspondence information for as long as needed to respond, manage the relationship and meet legitimate recordkeeping, security or legal obligations. Permitted campaign labels saved with an inquiry follow this contact-record retention period. Changing your website choice stops new collection; contact us to request deletion of retained contact information. Analytics retention depends on the configured service and is separate from the cookie’s lifetime. Payment and subscription records are retained as needed for service, accounting and legal obligations.

We use access restrictions and secure connections to protect information. No transmission or storage method can guarantee complete security. Contact us if you have a concern or wish to request deletion of information we hold.

Your privacy requests

Depending on where you live and applicable law, you may have rights to access or obtain a copy of personal information, correct it, delete it, opt out of sale/sharing or targeted advertising, or appeal a denied request. You can opt out of sharing or targeted advertising and turn off optional website analytics immediately through Cookie preferences; no account or identity check is needed for that choice.

Send other requests, including a request to review or change inquiry information or appeal our response, to accelerator@onequestion.io. Describe the request and the information needed to find your record. We may verify identity before disclosing or changing personal information; we will not ask for more than is reasonably needed. An authorized agent may contact us on your behalf, with appropriate authorization. We respond within the time required by applicable law and explain any lawful limits. If we deny an appeal, we will explain any further complaint process available under applicable law, including contacting your state attorney general. We do not discriminate against you for exercising applicable privacy rights.

Children and external services

Our website and founder services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us so we can address it.

Links to Stripe or other external services take you to their websites. Their privacy policies and choices govern those services; our cookie preference does not control them.

Updates and contact

We post changes here and update the date above. If optional tracking purposes materially change, we will ask for a new choice before enabling them. For privacy questions or requests, email accelerator@onequestion.io.