Privacy Policy

Account & Billing Information

When you create an account, OpenAssistant primarily uses third-party authentication providers such as Google or Microsoft to verify your identity. Through these providers, we receive basic account information such as your name and email address.

Users may optionally provide additional profile information, including company name, phone number, or address, to support account management and communications.

If you subscribe to a paid plan, payment processing is handled by a third-party payment processor such as Stripe. OpenAssistant does not store or process full payment card information. We receive limited billing details such as payment status, billing contact information, and the last four digits of your payment method for account and recordkeeping purposes. All payment information is governed by Stripe's privacy and security practices.

Connected Services Data

Users may choose to connect third-party accounts and services such as Google, Microsoft, Slack, Zoom, cloud storage providers, and other supported services. OpenAssistant accesses and processes information from these services only in accordance with the permissions authorized by the user.

Depending on the services you connect and the permissions you grant, OpenAssistant may have access to information including:

• Calendar events, availability, and meeting information
• Email messages, threads, attachments, and related metadata
• Contacts and contact information
• Files and documents
• Messages and conversations from connected communication platforms
• Information from other connected applications and services

Connecting certain services or granting certain permissions is optional. For example, users may choose whether to connect their email inbox. Some OpenAssistant features may require access to particular services or permissions in order to function.

When email access is enabled, OpenAssistant may access and process email messages, threads, attachments, sender and recipient information, and related metadata as necessary to understand requests, provide relevant context, perform tasks, draft or send communications, execute workflows and automations, and provide other assistant functionality requested or enabled by the user.

OpenAssistant may similarly access information from other connected services when necessary to perform tasks or provide functionality requested or enabled by the user.

Information obtained through connected services is used to provide the Services and is not used for advertising purposes.

User-Provided Content

OpenAssistant may collect and process content that users voluntarily provide through the Services, including files, documents, notes, saved instructions, assistant memories, knowledge sources, prompts, messages, contacts, preferences, recurring workflows, and other information submitted to customize, operate, or improve the functionality of the Services.

This information may be used to provide requested features, personalize assistant behavior, execute user-configured workflows and automations, generate outputs, respond to user requests, and otherwise deliver the Services. OpenAssistant processes such information only as necessary to provide the Services and in accordance with this Privacy Policy.

Third Party Integrations

OpenAssistant allows users to connect third-party services and integrations, including Google Workspace, Microsoft 365, Slack, Zoom, cloud storage providers, CRM systems, project management tools, messaging platforms, and other supported services, to enable functionality within the Services.

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Data accessed through these integrations is used solely to provide and improve OpenAssistant's functionality and is not used for advertising purposes.

OpenAssistant also utilizes trusted third-party service providers, including AI providers such as OpenAI and Anthropic, to support natural language understanding, reasoning, workflow execution, content generation, and other AI-powered functionality. These providers process data only as necessary to deliver functionality on OpenAssistant's behalf and are contractually prohibited from using OpenAssistant customer data to train or improve their general AI models. Anthropic operates under a zero-day data retention policy, meaning customer data is not retained after processing.

All third-party integrations and service providers are subject to contractual obligations designed to protect the confidentiality and security of data.

Marketing Communications

OpenAssistant may send users product updates, service-related communications, and promotional information related to the Services. Users may opt out of promotional communications at any time by following the unsubscribe instructions provided in such messages or by contacting us directly.

Automatic Data Collection

OpenAssistant and affiliated third parties may use cookies, embedded scripts, pixels, web beacons, and similar tracking technologies ("Tracking Technologies") to automatically collect information as you interact with the Site and Services. These technologies help operate the Services, maintain user sessions, analyze usage, and improve performance and user experience.

Cookies allow us to recognize your browser and keep you logged in where applicable. You may manage or disable cookies through your browser settings; however, certain features of the Services may not function properly without cookies.

Usage Data includes information about how you interact with the Services, such as scheduling activity, feature usage, and general engagement metrics. This information helps us provide analytics, monitor system performance, and improve functionality.

Log and Device Data may include IP address, browser type, operating system, pages viewed, timestamps, authentication events, API requests, audit logs, security events, and related technical information. This data is used for security, analytics, troubleshooting, fraud prevention, and operational purposes and may be aggregated or de-identified where appropriate.

Provision of Services

We use personal information to create and manage user accounts, authenticate access, process subscriptions, and deliver OpenAssistant's AI assistant, scheduling, automation, workflow execution, research, communication, and coordination features.

This may include processing information from connected services and user-provided content to understand user requests and context, search and retrieve relevant information, perform tasks, execute user-configured workflows and recurring automations, draft or send communications, generate outputs, manage user preferences and assistant memory, and otherwise provide functionality requested or enabled by the user.

Third-Party Integrations

Information obtained through connected third-party services is used to provide requested functionality, execute workflows, perform tasks, generate outputs, and otherwise deliver the Services.

Security and Fraud Prevention

We use information to protect the Services, detect and prevent unauthorized activity, errors, and misuse, and maintain the integrity and security of user accounts.

Service Improvement and Analytics

We use usage data and analytics to operate, maintain, improve, and enhance the Services, develop new features, and understand user engagement and performance. OpenAssistant may create and use aggregated or de-identified information that does not reasonably identify an individual for analytics, security, research, product improvement, and operational purposes.

Communications

We use contact information to send service-related communications such as account updates, security notices, billing information, and responses to inquiries.

Marketing Communications

Where permitted, we may send promotional communications related to OpenAssistant. Users may opt out of promotional messages at any time.

Legal and Compliance

We may use and disclose personal information as required to comply with applicable laws, regulations, legal processes, and governmental requests.

General Disclosure

OpenAssistant does not sell personal information. We disclose personal information only as described in this Privacy Policy or with appropriate authorization.

Service Providers and Subprocessors

We may disclose personal information to trusted third-party service providers and subprocessors that perform services on our behalf, including hosting, payment processing, analytics, security, customer support, and AI-enabled functionality. These providers are contractually required to protect personal information and may use it only in accordance with OpenAssistant's instructions.

Business Transfers

If OpenAssistant is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

Legal and Safety Disclosures

We may disclose personal information as necessary to:

• Comply with applicable laws and legal processes
• Protect the security and integrity of the Services
• Detect and prevent fraud or misuse
• Protect rights and safety of OpenAssistant, users, or others

Account Information

OpenAssistant retains user account information, including profile and contact details, for as long as an account remains active, including when a user is downgraded to a free plan. Account information may be retained for a reasonable period after account termination to comply with legal obligations, resolve disputes, and enforce agreements.

Connected Services Data

Message threads and related communication data that are no longer active are deleted within approximately 30 days, unless retention is required for operational, legal, or security purposes.

Files and User-Provided Content

Files, documents, and other content uploaded by users or created and saved through the Services may be stored in a user's account to provide file storage, assistant memory, and related functionality. Users may view, manage, or delete stored files through the Services.

Stored files and related content may be retained for as long as the user's account remains active or as necessary to provide the Services. When a user deletes a file or requests deletion of their account, associated content will be deleted in accordance with our standard deletion processes, subject to applicable legal, security, backup, and contractual retention requirements.

Legal and Compliance Retention

We may retain certain personal information as necessary to comply with applicable laws, regulations, legal processes, accounting requirements, and contractual obligations.

Aggregated or De-identified Data

OpenAssistant may retain aggregated or de-identified information for analytics, service improvement, and operational purposes, where such data does not reasonably identify an individual.

User-Configured Workflows and Automations

Certain OpenAssistant features allow users to configure recurring workflows, reminders, and automations that periodically access connected services to perform requested tasks. These automations are created, configured, and controlled by the user. OpenAssistant does not initiate recurring access to connected services unless the user has explicitly enabled or configured such functionality. Users may modify or disable these automations at any time.

Marketing Communications

Users may opt out of promotional communications at any time by following the unsubscribe instructions included in such messages or by contacting us using the information in the Contact Us section below. Service-related communications, such as billing and security notices, may still be sent as necessary.

Cookies and Tracking Technologies

Users may manage their preferences for non-essential cookies and similar tracking technologies through the cookie preference controls available on our Site, where applicable. Users may also manage or disable cookies through their browser or device settings.

Certain cookies and similar technologies are necessary for the operation, security, authentication, and functionality of the Services and may not be disabled through our cookie preference controls. Disabling certain cookies may impact the availability or functionality of the Services.

Analytics Controls

Some analytics providers may offer opt-out mechanisms for certain data collection. Users may manage preferences through applicable provider tools where available.

Access, Correction, and Deletion

Users may access and update personal information through their account profile at any time. Users may also disconnect connected services, revoke previously granted permissions where supported, modify or delete saved instructions and assistant memories, disable recurring workflows or automations, and request deletion of their account and associated personal information, subject to applicable legal, security, and contractual retention requirements.

Requests related to privacy rights may be submitted using the information provided in the Contact Us section below.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have certain rights regarding your personal information, including the right to:

• Know the categories and specific pieces of personal information we have collected about you
• Request correction of inaccurate personal information
• Request deletion of personal information, subject to certain legal exceptions
• Receive personal information in a portable, commonly used, and machine-readable format
• Opt out of the sale or sharing of personal information (OpenAssistant does not sell personal information)

You also have the right not to be discriminated against for exercising any of your CCPA or CPRA rights.

You may designate an authorized agent to submit a request on your behalf. We may require verification of the agent's authority and your identity.

California residents may exercise these rights by contacting us using the information provided in the Contact Us section below.

Virginia Privacy Rights (VCDPA)

If you are a Virginia resident, you have certain rights under the Virginia Consumer Data Protection Act, including the right to:

• Confirm whether we are processing your personal data
• Access your personal data
• Correct inaccuracies in your personal data
• Delete personal data, subject to applicable exceptions
• Obtain a copy of your personal data in a portable format

Virginia residents may exercise these rights by contacting us using the information provided in the Contact Us section below.

European Union Privacy Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• The right to access your personal data
• The right to correct inaccurate or incomplete data
• The right to request deletion of personal data ("right to be forgotten"), subject to legal obligations
• The right to restrict or object to certain processing
• The right to data portability
• The right to withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

EU users may exercise these rights by contacting us using the information provided in the Contact Us section below.

Other U.S. State Privacy Rights

Residents of other U.S. states may have additional privacy rights under applicable state laws. Requests may be submitted by contacting us using the information in the Contact Us section below.

Verification and Response Timing

To protect your privacy, we may require verification of your identity before fulfilling requests. We respond to verified requests within the timeframes required by applicable law.