Privacy Policy
Privacy Policy
OpenSelf is built around user control: your data stays yours, approvals matter, and connected data should work for you rather than trap you. This policy explains how the hosted service handles personal data.
Last updated: March 30, 2026
1. Scope
This Privacy Policy explains how OpenSelf collects and uses personal data when you access the hosted service at openself.dev, create an account, connect data sources, chat with the product, or publish a page.
It applies to the hosted OpenSelf service. If you self-host or fork the AGPL-3.0 codebase, you are responsible for your own privacy compliance and notices.
2. Data we collect
We collect the minimum data needed to run OpenSelf as a living personal page builder and to keep your page current over time.
- Account and identity data, such as your email address, login credentials, and profile preferences.
- Conversation and page data, including messages, edits, approvals, page content, and related metadata needed to operate the product.
- Connector data that you explicitly authorize us to access, such as profile, activity, or content signals from third-party services.
- Technical and usage data, such as IP address, device or browser information, logs, security events, and service diagnostics.
- Operational communications, such as verification emails, account notices, and support interactions.
3. How we use your data
We use personal data to provide, secure, and improve the service you asked us to operate.
- Create, host, and maintain your OpenSelf account and public page.
- Generate, revise, and organize page content from your conversations, approved facts, and connected sources.
- Sync connector data when you request it so your page can stay current.
- Support exports, deletion requests, moderation, abuse prevention, debugging, and product reliability.
- Comply with legal obligations and enforce our Terms of Service.
4. AI and large language model usage
OpenSelf uses large language models and related AI services to help transform conversations and connected signals into structured facts, editorial suggestions, and page copy.
When needed to provide the service, relevant inputs may be processed by third-party AI providers acting as subprocessors. OpenSelf is designed so that models propose and the application enforces: the model does not directly publish content or write arbitrary data without application controls.
You remain responsible for reviewing what you publish. OpenSelf is built around approval and visibility controls so that proposed changes can be checked before they become public.
5. Connectors and data ownership
You choose whether to connect external services. Connector access is voluntary and can be revoked by disconnecting the integration or removing the relevant data from OpenSelf.
Your content and personal data remain yours. OpenSelf uses authorized connector data only to provide the features you requested, such as profile enrichment, freshness, and identity insights.
You can export or delete your data, and you can decide what is public versus private inside the product.
6. Legal bases under GDPR
Where the General Data Protection Regulation applies, OpenSelf generally relies on one or more of the following legal bases: performance of a contract to provide the service, your consent for optional actions such as connector access, legitimate interests in securing and improving the product, and compliance with legal obligations.
If consent is the basis for a particular processing activity, you may withdraw that consent at any time going forward.
7. Sharing, processors, and international transfers
We do not sell your personal data. We share data only with service providers and subprocessors needed to operate OpenSelf, such as hosting, database, email, authentication, and AI model providers, or when disclosure is required by law.
Some providers may process data outside your country. When required, we rely on appropriate contractual and technical safeguards for international transfers.
8. Retention and security
We keep data for as long as needed to provide the service, maintain security and auditability, comply with legal obligations, and honor your account settings and deletion requests.
We apply reasonable technical and organizational measures to protect personal data, but no online service can guarantee absolute security.
9. Your rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing of your personal data, and to lodge a complaint with a supervisory authority.
To exercise privacy rights or ask a question about this policy, contact hello@openself.dev.
10. Changes to this policy
We may update this Privacy Policy as the product evolves. When changes are material, we will update the date above and, where appropriate, provide additional notice inside the service.