Privacy Policy

Effective 1 September 2026 · Last updated 1 September 2026

This Privacy Policy explains how openbyo.ai ("openbyo.ai", "we", "us") collects, uses, shares and protects information when you visit openbyo.ai and its subdomains, join our early-access list, request an integration, or sign in with Google (together, the "Service"). If you have questions, email support@openbyo.ai.

1. Information we collect

Information you give us

• Early-access form: your email address, the AI providers you use, the apps you want to use them with, and your consent to be contacted.
• Integration request form: your work email, name, company or app details, platforms, expected usage, timeline and any notes you add.
• Messages you send us by email.

Information from Google sign-in

When you choose "User Login" or "Developer Login", you sign in with your Google account. We request only the openid, email and profile scopes, and receive from Google:

• your email address and whether Google has verified it;
• your name, first name and last name, as set on your Google account;
• the URL of your Google profile picture; and
• a unique Google account identifier.

We do not request access to your Gmail, contacts, calendar, Drive files or any other Google data. We use Google's sign-in response only to read the information above. We do not store Google access tokens or refresh tokens, and we cannot act on your Google account.

Information collected automatically

• Request details: approximate location (country and city, derived by our hosting provider from your IP address), browser user agent, referring page, the page you were on and any campaign tag in the link you followed.
• Usage analytics: pages viewed, clicks, scroll depth, form interactions and session recordings of your visit (on openbyo.ai only), through PostHog. Password fields are never recorded.
• Bot protection: Cloudflare Turnstile checks that form submissions come from a person; it processes device and browser signals for that purpose.

2. How we use information

• To verify your email address and record your interest in openbyo.ai as a user or a developer.
• To check whether your account has access, manage our early-access list and invite you when access is available.
• To contact you about early access, your integration request and the launch, when you have asked us to or it is needed to respond to you.
• To understand how visitors use the site and improve it.
• To protect the Service against spam, abuse and fraud, and to comply with law.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Google user data

openbyo.ai's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the user-facing features described above (sign-in, email verification and access-list management);
• we do not transfer Google user data to others except as needed to provide those features (our service providers in section 4), to comply with law, or as part of a merger or acquisition with notice to you;
• we do not use Google user data for advertising, and we do not sell it;
• we do not use Google user data to train artificial intelligence or machine-learning models; and
• no person at openbyo.ai reads Google user data except with your consent, for security purposes, to comply with law, or when it is aggregated and anonymized for internal operations.

4. How we share information

We share information only with service providers that process it on our behalf, under contract:

• Cloudflare: hosting, our database (where sign-in records are stored) and bot protection;
• HubSpot: our CRM, for early-access and integration form submissions;
• PostHog: product analytics and session recordings; and
• Google: sign-in.

We may also disclose information if required by law or legal process, to protect the rights, safety or property of openbyo.ai, our users or others, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to the information transferred.

5. Cookies and similar technologies

• A short-lived, strictly necessary cookie (up to 10 minutes) that keeps a Google sign-in secure between leaving and returning to openbyo.ai.
• Local storage that remembers your light or dark theme.
• PostHog cookies and local storage that tell visits apart for analytics, on openbyo.ai only.

You can block or delete cookies in your browser settings; sign-in will not work without the first one.

6. Retention

We keep sign-in and form records for as long as you are on our early-access list or have an open request with us, and delete them when you ask us to. Analytics data is kept for up to 12 months. We may keep limited records longer where the law requires it.

7. Your choices and rights

• Access, correction and deletion: email support@openbyo.ai from the address concerned and we will respond within 30 days.
• Unsubscribe: every email we send has an unsubscribe link, or email us.
• Revoke Google access: remove openbyo.ai at myaccount.google.com/permissions. To delete what we already received, email us as above.

Depending on where you live, you may have further rights. Residents of the European Economic Area, the United Kingdom and Switzerland may object to or restrict processing, ask for portability and complain to their data protection authority; we rely on your consent (forms, sign-in) and our legitimate interest in running and securing the Service. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights; we do not sell or share personal information for cross-context behavioral advertising.

8. Security

Data is encrypted in transit (HTTPS) and stored with our hosting provider with access limited to the people who need it. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law.

9. International transfers

openbyo.ai is operated from the United States, and our service providers may process information in other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

11. Changes to this policy

We may update this policy. We will post the new version here with a new "Last updated" date and, for material changes, tell you by email or on the site before they take effect.

12. Contact

openbyo.ai · support@openbyo.ai