Privacy Policy

1. Information We Collect

Account and Contact Information

When you create an account, join the Openbase beta or waitlist, or otherwise sign up for Openbase, we may collect information such as:

• your name;
• email address;
• account information;
• signup source and signup page;
• signup date and time; and
• the version of any consent disclosure presented when you signed up.

Communications

If you contact us, provide feedback, participate in product research, or request support, we may retain the information you choose to provide and our communications with you.

Device Information

We may receive limited device information needed to operate or support the Services, such as your operating system.

Website Usage Information

If you choose to enable analytics, we use Google Analytics and Amplitude on the public Openbase website to understand aggregate traffic and page usage. These providers may process information such as pages viewed, referral source, approximate location, browser and device characteristics, and identifiers stored in local storage, cookies, or similar technologies. Analytics remains disabled unless you enable it, and the website provides a control to disable it again. We do not send Workspace Content, source code, voice inputs, prompts, or agent responses to these analytics providers.

2. Information We Process to Provide the Services

Openbase acts as an interface between your mobile device and AI agents, coding tools, cloud services, or development environments that you choose to use.

To provide this functionality, certain information may be transmitted through or temporarily processed by Openbase systems even when Openbase does not retain that information.

Voice Inputs and Instructions

When you use Openbase voice features, your voice input is processed to understand your request and communicate instructions to connected agents or tools.

Voice input may be processed by Openbase and by service providers that support speech recognition, AI processing, or related functionality.

Openbase does not retain your voice recordings after they have been processed to provide the requested functionality.

Transcriptions, prompts, instructions, agent responses, approvals, or related information may be processed by Openbase systems as necessary to route your request and return the resulting response.

Prompts, Agent Responses, and Workspace Content

When you instruct Openbase to perform a task, prompts, instructions, agent responses, and information necessary to fulfill your request may be transmitted to and processed by Openbase servers.

Depending on the task, this information may include portions of source code, file contents, repository information, development context, or other information made available by a connected agent or tool (“Workspace Content”).

Openbase processes this information only as necessary to provide the functionality you request, including routing instructions, communicating with connected agents, returning responses, and supporting user approvals or controls.

Connected agents or tools may separately access, modify, transmit, or otherwise process Workspace Content within the permissions and environment configured by the user.

Openbase does not use Workspace Content, source code, voice inputs, prompts, or agent responses to train AI models.

3. Connected Agents and Third-Party Services

Openbase allows users to interact with third-party AI agents, model providers, developer tools, repositories, cloud services, APIs, MCP servers, and other services selected by the user.

When you instruct Openbase to communicate with a connected service, information necessary to fulfill your request may be transmitted to or processed by that service.

The processing performed by a third-party service is subject to that service's own terms, privacy practices, configurations, permissions, and retention policies.

Openbase does not control the independent data practices of third-party services that you choose to connect or use.

You should review the terms and privacy practices of any third-party service before using it with confidential, proprietary, regulated, or organization-owned information.

4. User Responsibility for Connected Data and Systems

You are responsible for determining whether you are authorized to use Openbase and any connected AI agent, developer tool, model provider, repository, cloud service, or other third-party service with the information and systems you choose to access.

You should only connect accounts, repositories, development environments, files, data, or other resources that you are legally and contractually authorized to access and use.

If you use Openbase in connection with information belonging to an employer, client, organization, customer, or another third party, you are responsible for obtaining any permissions, approvals, or consents required by that organization or applicable agreement before using such information with Openbase or a connected third-party service.

Openbase's technical ability to connect to or interact with a resource does not represent or imply that the owner of that resource has authorized its use with Openbase, an AI agent, or another third-party service.

You are also responsible for complying with:

• your employer's or organization's security and acceptable-use policies;
• confidentiality and nondisclosure obligations;
• contractual restrictions;
• data-protection requirements applicable to information you handle; and
• restrictions imposed by third-party services or systems you choose to connect.

If you are uncertain whether you are authorized to use particular information or systems with Openbase, you should obtain appropriate permission before doing so.

5. Agent Actions and User Authorization

Openbase enables users to instruct connected AI agents and developer tools to take actions within environments to which those tools have access.

Such actions may include reading or modifying files, executing commands, interacting with repositories, communicating with external services, or taking other actions permitted by the connected tool or environment.

The user controls which agents, tools, accounts, environments, and permissions are connected to Openbase.

Where Openbase presents an approval or confirmation step, you are responsible for reviewing the proposed action and deciding whether to authorize it.

Approval or confirmation through Openbase indicates your instruction to proceed with the applicable action. Openbase does not independently determine whether an action is appropriate for your organization, project, repository, environment, or contractual obligations.

The capabilities of a connected agent depend on the permissions, configuration, and access granted to that agent by the user or by the underlying service.

6. How We Use Information

We may use information we collect or process to:

• provide and operate the Services;
• authenticate accounts and sessions;
• process voice instructions;
• route prompts and responses;
• communicate with connected agents and tools;
• provide user approvals and controls;
• maintain security and reliability;
• troubleshoot technical issues;
• respond to support requests;
• improve product performance and functionality;
• administer beta access and downloads;
• send service-related communications;
• send optional product updates where permitted; and
• comply with applicable law and enforce our agreements.

We do not use Workspace Content to advertise third-party products to you.

7. How We Disclose Information

We do not sell personal information.

We may disclose information to:

Service Providers

We may use providers that support cloud infrastructure, authentication, communications, payments, speech processing, AI processing, or other infrastructure necessary to operate the Services.

Services You Choose to Use

When you direct Openbase to interact with a third-party agent, model provider, repository, cloud service, API, or other service, we may transmit information necessary to carry out your instruction.

Legal and Security Purposes

We may disclose information where reasonably necessary to comply with law, legal process, or governmental requests, or to protect the rights, safety, security, or integrity of Openbase, our users, or others.

Business Transactions

Information may be transferred in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable law.

8. Data Retention

Openbase retains information that it collects only for as long as reasonably necessary to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, prevent abuse, or enforce agreements.

Not all information processed through Openbase is retained.

Some information may be processed temporarily to complete a request, establish a connection, communicate with a connected agent, or operate a feature and may not be retained after that processing is complete.

Third-party services may apply their own retention practices to information processed through those services.

Backup copies of information Openbase does retain may remain for a limited period as part of ordinary backup and recovery processes.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information handled by the Services.

However, the security of connected development environments, repositories, cloud accounts, AI agents, and third-party tools also depends on permissions, configurations, credentials, and security controls outside of Openbase's control.

Users are responsible for maintaining appropriate security for the accounts, devices, environments, credentials, and third-party services they choose to connect.

No method of electronic transmission, software operation, or data storage can be guaranteed to be completely secure.

10. Your Choices and Rights

Depending on where you live, you may have rights relating to personal information we maintain about you, including rights to access, correct, delete, or obtain a copy of certain information.

You may also:

• request deletion of your Openbase account;
• request removal of your beta or waitlist contact record;
• disconnect agents or third-party services;
• manage permissions granted to Openbase or connected services; and
• unsubscribe from non-essential communications.

We may retain certain information where reasonably necessary for legal compliance, security, fraud prevention, dispute resolution, or enforcement of our agreements.

To submit a privacy request, contact privacy@openbase.cloud.

11. Children's Privacy

Openbase is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. International Processing

Openbase and its service providers may process information in the United States or other countries.

Where required by applicable law, we take appropriate measures relating to international transfers of personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy as Openbase and our data practices evolve.

When we make changes, we will update the effective date above. Where required by law, we may provide additional notice of material changes.

14. Contact Us

For questions or requests relating to privacy, contact:

privacy@openbase.cloud