Legal

Open Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains how OpenChat, Inc. ("Open," "we," "us," or "our") collects, uses, shares, and protects personal data when you visit open.cx, use our AI customer support platform, or otherwise interact with our services. It describes the categories of information we process, why we process them, the legal bases we rely on, how long we retain the data, the third parties we share it with, and the rights you have to access, correct, delete, or restrict our use of your information. Open is committed to handling personal data transparently and in compliance with global privacy regulations, including the EU GDPR, the UK GDPR, the Swiss FADP, the California Consumer Privacy Act (CCPA/CPRA), and similar laws around the world. We process personal data only where a legal basis applies — your consent, the performance of a contract, our legitimate interests, or a legal obligation — and where we rely on consent (such as for non-essential cookies), you can withdraw it at any time. If you have questions about any part of this policy, contact our Privacy Officer at [email protected] with any questions or concerns.

1. Categories of Personal Data We Collect

We collect and process the following categories of personal data:

1.1 Information You Provide Directly

  • Account Information: Name, email address, phone number, company name, job title, and password when you create an account or request a demo.
  • Payment Information: Billing address, payment card details (processed by our payment processors), and transaction history.
  • Communications: Content of messages, support tickets, and feedback you send to us.
  • Customer Support Data: Information contained in customer support conversations processed through our platform on behalf of our business customers.

1.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system, device identifiers, and hardware settings.
  • Usage Data: Pages visited, features used, time spent on pages, click patterns, and referring URLs.
  • Cookies and Similar Technologies: Session cookies, persistent cookies, and similar tracking technologies as described in our Cookie Policy.

1.3 Information from Third Parties

  • Integration Data: Information from third-party services you connect to Open (e.g., Zendesk, Intercom, Salesforce).
  • Business Contact Information: Professional contact details from business partners or publicly available sources.

2. Purposes for Processing Personal Data

We process personal data for the following purposes. For each purpose, we state the legal basis we rely on under the EU GDPR and UK GDPR:

  • Service Delivery: To provide, maintain, and improve our AI customer support platform and related services. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Account Management: To create and manage user accounts, authenticate users, and process transactions. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Customer Support: To respond to inquiries, provide technical assistance, and resolve issues. Legal basis: performance of a contract and our legitimate interests in providing effective support (Article 6(1)(b) and 6(1)(f) GDPR).
  • Communications: To send service-related notices, updates, security alerts, and administrative messages. Legal basis: performance of a contract and our legitimate interests in keeping users informed about the service (Article 6(1)(b) and 6(1)(f) GDPR).
  • Marketing: To send promotional communications (with your consent where required) which you may opt out of at any time. Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
  • Analytics and Improvement: To analyze usage patterns, troubleshoot problems, and enhance our services. Legal basis: our legitimate interests in understanding and improving how the service is used (Article 6(1)(f) GDPR), and consent where required for non-essential cookies.
  • Security and Fraud Prevention: To detect, prevent, and respond to security incidents, fraud, and abuse. Legal basis: our legitimate interests in protecting the service and its users (Article 6(1)(f) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests. Legal basis: compliance with legal obligations (Article 6(1)(c) GDPR).

Where customer support conversations are processed through our platform on behalf of our business customers, the business customer is the data controller and Open processes that data as a processor under the applicable data processing agreement.

3. Your Rights Regarding Personal Data

You have the following rights regarding your personal data:

3.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

3.2 Right to Correction

You have the right to request correction of inaccurate personal data or completion of incomplete personal data we hold about you.

3.3 Right to Deletion

You have the right to request deletion of your personal data, subject to certain legal exceptions (such as data required for legal compliance or to complete a transaction you initiated).

3.4 Right to Object and Restrict Processing

You have the right to object to processing of your personal data based on legitimate interests, and to request restriction of processing in certain circumstances.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

3.6 Right to Opt Out

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.

3.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3.8 Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. Where such processing takes place, you may request human intervention, express your point of view, and contest the decision by contacting us at [email protected].

3.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: [email protected]
  • Mail: OpenChat, Inc., Attn: Privacy Officer, 108 W. 13th Street, Suite 100, Wilmington, DE 19801-1145, United States

4. Sharing Your Information

Open may transfer personal data to third-party service providers (subprocessors) that perform services on our behalf. These third parties include:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Analytics providers
  • Customer support tools
  • Email service providers

5. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and audits
  • Employee training on data protection
  • Incident response procedures

While we strive to protect your personal data, no security system is impenetrable. We cannot guarantee the absolute security of your data.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • To provide our services and maintain your account;
  • To comply with legal obligations;
  • To resolve disputes and enforce agreements; and
  • For legitimate business purposes such as fraud prevention.

When personal data is no longer needed, we securely delete or anonymize it.

7. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected], and we will delete such data.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this policy;
  • Notify you via email or prominent notice on our website; and
  • Obtain your consent where required by applicable law.

We encourage you to review this policy periodically to stay informed about how we protect your data.

9. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

OpenChat, Inc.
Attn: Privacy Officer
108 W. 13th Street, Suite 100, Wilmington, DE 19801-1145, United States
Email: [email protected]

10. Our Commitment

Open is committed to protecting the privacy and security of personal data. We will:

  • Process personal data lawfully, fairly, and transparently;
  • Collect data only for specified, explicit, and legitimate purposes;
  • Ensure data is adequate, relevant, and limited to what is necessary;
  • Maintain accurate and up-to-date data;
  • Retain data only as long as necessary; and
  • Ensure appropriate security of personal data.

By using our services, you acknowledge that you have read and understood this Privacy Policy.