last updated August 3, 2026Privacy Policy
Kaleido Inc. dba OnNiche® and OnNiche® by Kaleido ("OnNiche®," "we," "us," or "our") operates the website at www.onniche.com and provides marketing services and software to financial advisors and their firms. This Privacy Policy explains how we collect, use, and disclose Personal Information when you visit our website, use the OnNiche® Marketing App at app.onniche.com, use any other website, tool, or assessment we make available, or otherwise interact with us (together, the "Platform").
Kaleidocreative.com redirects to www.onniche.com and is covered by this Privacy Policy. The Platform is intended for users in the United States. If you choose to use the Platform, you agree to the collection and use of information as described here, and we will not use or share your information except as described in this Privacy Policy. Terms not defined here have the meaning given in our Terms of Service.
Who does this Privacy Policy cover?
This Privacy Policy applies to everyone who interacts with us, including:
Website visitors: anyone who browses www.onniche.com, fills out a form, requests a demo, or subscribes to our updates.
Prospects and marketing contacts: anyone who downloads a resource, completes an assessment, books a meeting with us, registers for a webinar or event, or joins our email list.
App users: financial advisors, their firms, and their teams who use the OnNiche® Marketing App.
Throughout this policy, "you" means whichever of these applies to you. When you use the Marketing App to plan and create marketing, you may enter information about your own business and, at times, about your own clients or contacts.
Our Terms of Service prohibit you from submitting Sensitive Information — such as government-issued identifiers, financial account numbers, or health, biometric, or similar data — to or through the App. The App is not designed or authorized to receive Sensitive Information, and we do not seek to collect it. If it is submitted anyway, it is submitted contrary to our Terms of Service, remains your responsibility, and we may remove it or suspend access when we become aware of it.
What information do we collect?
Account and contact information: your name, business name, job title, email address, phone number, and login credentials.
Billing and payment information: processed through our PCI-compliant payment provider. We do not store full payment card numbers on our own systems.
Content you provide: the marketing information, files, text, and images you submit to or create within the Platform.
Usage and log data: information your browser or device sends when you use the Platform, such as IP address, browser type and version, pages viewed, and the dates, times, and duration of visits.
Prospect and lead information: what you give us when you fill out a form, download a resource, request a demo, register for a webinar, or subscribe to our list. This may include your name, business name, job title, firm name, email address, phone number, and anything you write in a form field.
Assessment responses: your answers, the score and results generated from them, and the contact details you enter on the assessment form. This includes answers you begin but do not finish, and an approximate location derived from your IP address. Your responses and contact details may be passed to our contact management system.
Scheduling information: when you book a meeting with us, the date and time you select, your time zone, and any details you provide in the booking form.
Marketing engagement information: whether you open our emails, which links you click, and which pages of our website you visit.
Analytics identifiers: cookie identifiers and similar identifiers collected through analytics technologies on our website, together with the pages you view and how you arrived.
How is personal information collected?
We collect information in the following ways:
Directly from you: when you register for an account, request a demo, subscribe, contact support, or enter information into the App.
Automatically: through cookies, server logs, tracking scripts, and similar technologies as you interact with the Platform.
From third parties: from the service providers that help us run the Platform, and from colleagues who invite you to or help set up your account.From analytics providers: which give us information about how people find our website and move through it.
How do we use your information?
We use the information we collect to:
provide, operate, maintain, and improve the Platform and our services;
create and manage accounts and verify users;
process payments and manage billing;
respond to your questions and provide support;
send you service and account messages, and — where permitted — marketing messages you can opt out of at any time;
understand how the Platform is used so we can improve it;
analyze website traffic and understand which content and channels bring people to us;
generate and deliver your assessment results;
schedule and confirm meetings, demos, and consultations you request;
protect the Platform and prevent fraud or misuse; and
meet our legal, tax, and accounting obligations and enforce our agreements.
How do we use artificial intelligence?
Some features of the Marketing App use artificial intelligence (AI) to help you create marketing materials, such as suggested draft copy. To provide these features:
Information you enter ("inputs") is processed by AI systems, which may be operated by us or by third-party AI providers acting on our behalf.
We use your inputs to generate the outputs you request and to operate and support the feature. We do not use your inputs to train publicly available AI models, and our AI providers are contractually prohibited from using your inputs to train their models.
AI outputs are suggestions only and may be inaccurate or incomplete. Your responsibilities when using them, including your obligation to review and approve them before use, are set out in our Terms of Service.
You should not enter Sensitive Information into an AI feature.
Some AI features research a topic on the web to complete your request, such as when drafting a blog post or a specialty page. When they do, we send the topic and any notes you provide to a search provider through our AI provider. We do not send your account details, billing information, or other content from your account for this purpose. Because your notes are transmitted, do not include information that identifies your own clients in them.
Support chat inside the Marketing App may be answered by an AI agent or by a member of our team, depending on the time of day and whether you choose to speak with the AI agent. You can ask to be transferred to a person at any time. What you type in the chat, together with basic context about your account and the page you are on, is processed by our support provider and by the third-party AI models it uses. Those models operate under zero data retention terms, meaning your conversation is not stored by them after a response is generated, and they are contractually prohibited from using it to train their models. Chat transcripts stay with our support provider and are not added to our marketing contact records.
AI features operate inside the Marketing App. Our public website does not process your information through AI features.
Do we use cookies?
Cookies are small data files — often an anonymous unique identifier — that a website sends to your browser and stores on your computer or device to recognize your browser and remember information about your visit. We use cookies and similar technologies to operate our website and Platform, keep you signed in, remember your preferences, and collect information that helps us understand and improve how our website and Platform are used.
We use four categories of cookies and similar technologies:
Strictly necessary. Required to operate the website and Platform, keep you signed in, and maintain security. These cannot be switched off.
Functional. Remember your preferences and settings so you do not have to enter them again.
Analytics. Help us understand how people find and use our website so we can improve it. We use Google Analytics for this.
Contact tracking. Our email platform sets a first-party cookie that records which pages of our website you visit. Once you click a link in one of our emails or submit a form, we can link those visits to your contact record. We use this to understand which content is useful to you.
We do not use advertising cookies, and we do not run retargeting or interest-based advertising.
You can accept or refuse cookies through your browser settings, and set your browser to notify you when a cookie is being sent. If you choose to refuse cookies, you may not be able to use some portions of our website or Platform.
How do we use analytics?
We use Google Analytics to understand how visitors find and use our website. Google Analytics collects information such as your IP address, the pages you view, how you arrived, and how long you stay. We use it to measure and improve our website, not to advertise to you.
You can opt out of Google Analytics on every website you visit by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
How do we respond to Do Not Track and Global Privacy Control signals?
Do Not Track. Some browsers offer a "Do Not Track" (DNT) setting. There is no common industry standard for how websites should respond to DNT signals, and our website does not currently respond to them.
Global Privacy Control. We do not sell or share personal information, so there is nothing for a Global Privacy Control (GPC) signal to opt you out of. If that ever changes, we will update this Privacy Policy and honor GPC signals as opt-out requests.
Who do we share your information with?
We do not sell your personal information. We share it only as described below.
Service providers. We use trusted third-party providers to run the Platform. They may access personal information only to perform services for us and are required to protect it. Our current providers include:
Supabase (supabase.com): Database, authentication, and backend data storage
GitHub (github.com): Source code hosting and software development
Vercel (vecel.com): Application hosting and deployment
Resend (resend.com): Sending account, transactional, and notification emails
Intercom (intercom.com): Customer support, in-app messaging, and the AI support agent. Intercom uses third-party AI providers to generate AI responses.
Anthropic - Claude API (anthropic.com): AI processing that powers the Marketing App's AI features. Information you enter into the Marketing App is sent to Anthropic through the Claude API only.
Anthropic - Claude Team (anthropic.com): AI tools we use internally when providing marketing services
OpenAI - ChatGPT Business (openai.com): AI tools we use internally when providing marketing services
Stripe (stripe.com): Payment processing
Squarespace (squarespace.com): Hosting, content management, and forms for www.onniche.com
Google Analytics (google.com): Website analytics and traffic measurement
Active Campaign (activecampaign.com): Marketing email, marketing automation, and contact records
Zoom (zoom.com): Meeting scheduling and video meetings
Content Snare (contentsnare.com): Collecting onboarding information and documents from new clients
Intuit Quickbooks (quickbooks.intuit.com): Accounting, invoicing, and billing records
DocuSign (docusign.com): Electronic signature of agreements
We may add or change providers as our services evolve and will update this list accordingly.
Other disclosures. We may also share personal information with our professional advisors (such as legal and accounting advisors); in connection with a merger, acquisition, financing, or sale of assets; when required by law or legal process, or to protect the rights, property, or safety of OnNiche®, our users, or others; and with your direction or consent. We also use AI tools internally when we provide marketing services, and information you enter into the Marketing App may be processed through them. Every AI tool we use, whether inside the Platform or internally, operates under commercial terms that prohibit the provider from using your information to train its models.
Where is your information stored?
We are based in the United States, and our service providers store information in the United States.
How do we protect your information?
We use commercially reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot guarantee absolute security.
How long do we keep your information?
We keep personal information for as long as we have an ongoing legitimate business need — to provide the Platform and services, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. When we no longer have such a need, we delete or de-identify the information; where that is not immediately possible, we securely store and isolate it until deletion is possible.
Information you enter into the Marketing App is retained by us in accordance with our Terms of Service. We may continue to hold this information after an account or subscription ends. You may ask us to delete it at any time, and we will delete or de-identify it within 45 days of a verified request, except where we are required to keep it by law or have agreed otherwise in writing. Backup copies are deleted as they expire in the ordinary course, and we may keep aggregated or de-identified information that does not identify you or your clients. You may export your content at any time while your account is active.
Prospect and marketing contact information is held in our contact management system until you ask us to delete it or we determine it is no longer useful to an ongoing business relationship or the prospect of one. Unsubscribing stops us from sending you marketing email but does not delete your contact record. To have your record deleted, ask us using the contact details below, and we will delete or de-identify it within 45 days of a verified request.
Whose information is it?
Most of the information described in this Privacy Policy is information about you and your firm, and we decide how it is used. For that information, we are the controller.
Information about your own clients or contacts is different. If you enter that information into the Marketing App, you decide what to enter and why, and we process it only to provide the Platform to you and on your instructions. For that information, you are the controller and we act as your processor or service provider. You are responsible for having the right to give us that information and for providing your clients with any notices your own obligations require.
What are your California privacy rights?
This section applies to California residents and supplements the rest of this Privacy Policy. We extend the following rights to everyone we deal with, whether or not the law requires us to. You have the right to:
Know the categories and specific pieces of personal information we have collected, and the sources, purposes, and recipients;
Delete the personal information we have collected from you;
Correct inaccurate personal information;
Opt out of the "sale" or "sharing" of your personal information;
Limit the use of sensitive personal information (other than account login credentials, which we use only to authenticate you, we do not seek to collect it, and our Terms of Service prohibit submitting it); and
Not receive discriminatory treatment for exercising your rights.
Categories we collect. In the past 12 months, the categories of personal information we may have collected are: identifiers (such as name, email, and address); commercial information (such as services purchased); internet or network activity (such as usage and log data, cookie identifiers, and browsing and interaction history on our website); professional or employment information; account login credentials; content you enter into the Marketing App; and inferences drawn from the above. We collect this information directly from you, automatically through your use of the Platform, from colleagues who invite you to or help set up your account, and from our analytics providers. We use it for the purposes described in this Privacy Policy, and we disclose it for business purposes only to the service providers listed above.
Sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not run advertising or retargeting, and we do not disclose personal information to advertising platforms. We do not knowingly sell or share the personal information of consumers under 16.
How to exercise your rights. Submit a request at privacy@onniche.com. We will acknowledge your request and respond within 45 days, and may extend by up to another 45 days where allowed, letting you know if we need the extra time. We will verify your identity before responding, and you may use an authorized agent. We will not discriminate against you for exercising your rights.
What rights do residents of other states have?
Nevada. Nevada residents may direct us not to sell certain personal information by contacting us at privacy@onniche.com. We do not sell personal information as defined by Nevada law.
Other U.S. states. Residents of certain other states may have similar rights to access, correct, delete, or obtain a copy of their personal information, and to opt out of certain processing. Contact us using the details below to exercise them. Depending on your state, you may also have the right to appeal if we decline your request. If we decline, we will tell you how to appeal.
Do we collect information from children?
The Platform is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share it. If we learn that we have collected such information, we will delete it.
Are there links to other websites?
The Platform may contain links to third-party websites and services. We do not control and are not responsible for their content or privacy practices, and this Privacy Policy does not apply to them. We encourage you to review their privacy policies.
Will we change this Privacy Policy?
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the new version on this page. Changes are effective when posted, and we will provide additional notice where required by law.
How can you contact us?
For questions about this Privacy Policy or to exercise your privacy rights, contact us at privacy@onniche.com.
You can also write to us at:
Kaleido Inc. dba OnNiche® 501 W Broadway, Suite 800 San Diego, CA 9210