Privacy Policy

Overview

This Privacy Policy describes how OpenFiles ("Company," "we," "us," or "our") collects, uses, and protects information in connection with our AI file storage platform and related services ("Services"). This policy applies to all users of our Services.

Information Collection

Account Information

We collect and maintain the following account-related information:

• Full name
• Email address
• Organization name (if applicable)
• GitHub account information (for OAuth authentication)

User Data

We store and process user data that is uploaded to or created within our Services, including:

• Files and documents uploaded through AI agents
• File metadata and version history
• User-generated content and configurations
• API usage patterns and file operations

AI Agent Data

When AI agents interact with our Services, we process:

• Files created, edited, or accessed by AI agents
• Semantic search queries and results
• File operation logs and version control data

Technical Information

We collect technical data necessary for service operation and security:

• API authentication tokens and keys
• Service access logs
• System performance metrics
• API usage statistics

Use of Information

The information we collect is used for:

• Account creation and management
• Service authentication and API access control
• File storage, versioning, and retrieval
• Semantic search functionality
• Essential service communications
• System security and operational maintenance
• Service improvement and feature development
• Compliance with legal obligations

Data Processing

File Storage and Processing

We store and process files as part of our core service functionality. All files are versioned automatically, and previous versions are retained according to your plan limits. Files may be processed for semantic search capabilities using industry-standard embedding techniques.

AI Service Integration

OpenFiles is designed to work with various AI services including OpenAI, Anthropic, and others. When you connect these services:

• Your AI agents can directly store and retrieve files through our APIs
• File operations are performed based on AI agent instructions
• We do not access or analyze the AI conversation context, only the file operations requested

Data Security

Encryption

All data transmissions are protected using industry-standard TLS encryption. Files are encrypted at rest using AES-256 encryption standards.

Infrastructure Partners

We utilize trusted third-party service providers for infrastructure operations:

• AWS (Amazon Web Services) for cloud infrastructure and storage
• Supabase for database and authentication services
• Cloudflare for content delivery and security services

These providers are contractually bound to maintain appropriate security standards and data protection measures.

Information Disclosure

We do not sell, rent, or otherwise commercially distribute personal information. Information may be disclosed only in the following circumstances:

• To infrastructure service providers as necessary for service operation
• When required by applicable law or legal process
• To protect the rights, property, or safety of the Company or others
• In connection with a corporate transaction such as merger or acquisition

Data Retention and Deletion

Account information and user data are retained for the duration of the service relationship. File versions are retained according to your subscription plan limits. Users maintain control over their data and may delete files through our APIs or dashboard. Users may request complete account and data deletion at any time by contacting support.

User Rights

Subject to applicable law, users may:

• Request access to their account information and stored files
• Request correction of inaccurate information
• Request deletion of their account and associated data
• Export their files and data
• Object to certain processing activities
• Request data portability where technically feasible

Requests should be submitted through our designated contact channels.

International Transfers

Information may be transferred to and processed in jurisdictions other than the user's country of residence. We implement appropriate safeguards to ensure adequate protection during such transfers.

Policy Updates

This Privacy Policy may be updated periodically. Material changes will be communicated through email notification to account holders or prominent notice within our Services.

Legal Compliance

This policy is designed to comply with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

Contact Information

For privacy-related inquiries or to exercise your rights under this policy, contact us at:

Email: founders@openfiles.ai

This Privacy Policy governs the collection and use of information by OpenFiles. By using our Services, you acknowledge that you have read and understood this policy.