Privacy Policy

OpenZync (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We may collect the following types of information:

• Account Information: When you create an account, we collect your email address, name, and authentication credentials.
• Usage Data: We automatically collect information about how you interact with our services, including API calls, memory operations, and feature usage.
• Agent Data:The agent memory data you store through OpenZync is yours: organization LLM keys, webhook signing secrets, and PII fields are encrypted through OpenBao’s Transit engine before they reach PostgreSQL — the database stores ciphertext, not plaintext.
• Cookies: We use essential cookies for authentication and session management. Analytics cookies are used only with your consent.

We use the collected information to:

• Provide, maintain, and improve our services
• Process transactions and manage your account
• Send technical notices, security alerts, and support messages
• Monitor usage patterns to improve performance and reliability
• Comply with legal obligations

We implement industry-standard security measures to protect your data:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• Public source: the AGPLv3 core is auditable before you deploy it
• Strict access controls and authentication requirements
• Automated threat detection and incident response

We retain your account information for as long as your account is active. Agent memory data is retained according to your configured retention policies. You can request deletion of your data at any time by contacting our support team.

OpenZync integrates with third-party services including graph databases and LLM providers. Data processed through these integrations is subject to their respective privacy policies. We recommend reviewing the privacy policies of any third-party services you connect to OpenZync.

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC (“Google”). GA4 uses first-party cookies to analyze how users interact with our website. The information generated by these cookies about your use of the website (including your IP address, browser type, pages visited, and time spent) is transmitted to and stored by Google on servers in the United States.

We have enabled IP anonymization in GA4, which truncates your IP address before transmission. We have entered into a Data Processing Amendment with Google to ensure your data is processed in compliance with GDPR.

What GA4 collects:

• Pages visited and time spent on each page
• Referring website or campaign
• Browser type, device type, and operating system
• Approximate geographic location (city-level)
• Clicks on links and buttons

How we use this data:

• Understanding which content resonates with our audience
• Measuring marketing campaign effectiveness
• Identifying technical issues
• Improving user experience and site performance

Your choices:

• You can opt out of GA4 analytics cookies via our Cookie Consent Banner
• You can install the Google Analytics Opt-out Browser Add-on
• You can configure your browser to block or delete cookies

Data retention:We retain GA4 event data for 14 months. After this period, data is automatically deleted from Google’s servers.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected].