Privacy policy
Last updated: October 22, 2026
This policy explains how OnRise handles personal data: in the app at start.onrise.app, on our website onrise.app, and on the link pages our customers publish. We've kept it as short and plain as we can.
- We collect only what we need to run OnRise: your e-mail address, what you tell us about your business, and the content you create.
- You connect LinkedIn and Instagram through their official sign-in screens. We never see your passwords.
- We don't sell your data, we don't show ads and we don't use tracking or analytics tools.
- You can disconnect your accounts, close your account and ask us to erase your data at any time.
Who we are
OnRise is operated by Silver Software Ltd, Registered in England and Wales, company no. 12551103, Office 403, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER (“OnRise”, “we”, “us”). We are the controller of the personal data described in this policy.
For anything about your data, write to [email protected]. We answer within one month at the latest.
What we collect
When you use the app. You can try OnRise without an account. From your first visit we store:
- Account details: your e-mail address once you add it, your language and time zone, and when you signed up and were last active.
- Your business profile: what you enter during setup, such as your business or personal name, industry, city, a short description, website, role, skills, goals and preferred tone.
- Your content: posts and captions, images you upload, schedules, settings and your link page (headline, bio, photo and buttons, which can include a phone number, WhatsApp number, e-mail address, street address or booking link that you choose to publish).
- Connected accounts: the ID, name, username and follower count of the LinkedIn profile or page and the Instagram account you connect, the permissions you granted, and the access tokens that let us post for you.
- Activity on your posts: links to published posts, statistics such as reach, likes, comments and shares, and the comments people leave on your posts.
- Technical data: the IP address and browser (user agent) of your most recent visit, and the cookies described below.
Sign-in codes. We don't use passwords. To sign up or sign in, we e-mail you a 6-digit code. We store only a scrambled (hashed) version of the code.
People who comment on our customers' posts. When a customer's Instagram post gets a comment, we store the commenter's Instagram username, the comment text and its time, so the customer can read and answer it in OnRise. For LinkedIn comments we store the text and time, but not who wrote it.
People who visit a link page. When you open a link page made with OnRise or click one of its buttons, we only add one to a daily counter for that link and note whether you came from Instagram, LinkedIn or a QR code. We don't store your IP address or browser details for this and we set no cookies.
Visitors to our website. onrise.app sets no cookies of its own and uses no analytics. Its hosting provider and Cloudflare, which delivers it, process your IP address to show you the pages and to protect the site.
When you write to us. We keep your e-mail and our reply so we can help you.
Why we use it and on what legal basis
- To provide OnRise (your account, writing and scheduling posts, publishing them to your connected accounts, showing comments and statistics, and your link page). Legal basis: performing our contract with you, including the steps before you sign up.
- To sign you in and send the codes you ask for. Legal basis: contract.
- To keep OnRise secure and working, for example limiting how often requests can be made and fixing errors. Legal basis: our legitimate interest in a safe and reliable service.
- To show customers the comments and clicks their posts and link pages receive. Legal basis: our and our customers' legitimate interest in answering their audience and seeing what works. We keep this to the minimum described above.
- To meet legal obligations, such as tax records once paid plans start or answering lawful requests from authorities. Legal basis: legal obligation.
We don't use your data for advertising, we don't sell it and we don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
AI writing
OnRise writes posts with built-in templates and, when AI writing is switched on, with Claude models from Anthropic. In that case we send Anthropic only what's needed for the text you ask for: your business profile (as listed above), the language, the topic or idea, the draft or caption to improve, and for reply suggestions the comment text and your post. We don't send your e-mail address, the commenter's name, images or access tokens.
Anthropic processes this content as our service provider. Under its commercial terms, it doesn't use the content to train its models. Always check AI-written text before it's published; on autopilot, OnRise publishes the posts it has written for you.
International transfers
Our app server is in Germany. Some providers, such as Anthropic, Cloudflare and Google, process data in the United States or other countries. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions (including the UK–US Data Bridge and the EU–US Data Privacy Framework where the provider is certified) or on standard contractual clauses with the UK addendum. You can ask us for details at [email protected].
How long we keep data
- Your account, profile and content: for as long as your account is open.
- Access tokens for LinkedIn and Instagram: until you disconnect the account or close your OnRise account. If you try OnRise without an account and don't come back for 30 days, your trial is paused and its access tokens are deleted.
- Sign-in codes: deleted automatically about a day after they expire (each code is valid for 15 minutes).
- Images you upload but don't use: deleted automatically after a day.
- IP address and browser: we keep only the most recent one; each visit replaces the previous one.
- Link page clicks: daily counters, kept with your link page statistics.
- After you close your account: it stops working immediately (see “Deleting your data”). The records that remain, such as your e-mail address, posts and statistics, are kept only so we can answer questions about the account and meet legal obligations, and we erase or anonymise them when you ask us to.
How we protect it
All connections use encryption (HTTPS). Access tokens and session cookies are encrypted, sign-in codes are stored only in hashed form and expire after 15 minutes, and access to our servers is restricted. No system is perfectly secure, but if a breach puts your rights at risk, we'll tell you and the authorities as the law requires.
Your rights
Under data protection law (such as the UK GDPR, the EU GDPR, Turkey's KVKK and India's DPDP Act), and depending on where you live, you have the right to:
- get a copy of your personal data and information about how we use it;
- have inaccurate data corrected (you can change most of it yourself in the app);
- have your data erased;
- restrict or object to our use of it, including use based on legitimate interests;
- receive the data you gave us in a commonly used, machine-readable format;
- withdraw any consent you've given, without affecting what we did before.
To use these rights, write to [email protected] from the address linked to your account. We may ask you to confirm your identity. We reply within one month, which can be extended by two months for complex requests; we'll tell you if so.
If you're unhappy with how we handle your data, please tell us first. You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your country; in Turkey, the Personal Data Protection Authority (KVKK).
Deleting your data
This section also explains how to delete the data OnRise receives from LinkedIn and Instagram (Facebook Login).
- Disconnect an account: in OnRise, open Settings and disconnect LinkedIn or Instagram. We delete that account's access tokens straight away and stop publishing to it.
- Remove our access from the platform: on Instagram, go to Settings → Website permissions → Apps and websites and remove OnRise; on LinkedIn, go to Settings → Data privacy → Other applications → Permitted services.
- Close your account: in OnRise, open Settings and choose “Delete account”. Your account is closed immediately: you're signed out, publishing stops, your link page goes offline and all access tokens are deleted.
- Erase everything: e-mail [email protected] from your account's address with the subject “Delete my data”. We erase or anonymise all personal data linked to your account, including posts, images, comments, statistics and your e-mail address, within 30 days and confirm by e-mail. We keep only what the law requires us to keep.
Children
OnRise is made for businesses and professionals and isn't intended for anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.
Changes to this policy
We'll update this policy when OnRise or the law changes; the date at the top shows the latest version. If a change affects you significantly, for example when paid plans and a payment provider are added, we'll let you know in the app or by e-mail before it takes effect.
Contact
Silver Software Ltd, Registered in England and Wales, company no. 12551103, Office 403, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER
E-mail: [email protected]
LinkedIn and Instagram
You connect your accounts through LinkedIn's and Instagram's own sign-in screens and decide which permissions to grant. We receive an access token, never your password. We keep access tokens encrypted.
We use these permissions only to do what you ask OnRise to do:
You can disconnect an account in OnRise's settings at any time; we then delete its access tokens straight away. You can also remove OnRise's access in your LinkedIn or Instagram settings. LinkedIn's and Meta's own privacy policies apply to what you do on their platforms.