Legal
Privacy Policy
Last updated October 2, 2026
This policy explains what personal data OpenCMO collects, why, and the choices you have. We collect only what we need to run the product.
What we collect
- Account data: from your Google sign-in, your email address, name and profile picture; and sign-in records.
- Business information: the website you enter and the strategy documents OpenCMO creates from it.
- Your content: videos you upload or import, and the drafts and clips created from them.
- Connected accounts: access tokens for social accounts you choose to connect, used only to publish what you approve.
- Billing data: plan and payment status. Card details are handled by our payment provider, not by us.
- Usage data: basic logs and error reports needed to keep the service working.
How we use it
To provide OpenCMO, process your content, publish what you approve, bill you, answer support requests and keep the service secure. We do not sell your data and we do not use your content to train AI models.
Service providers
We use providers to run OpenCMO: hosting and database (Vercel, Supabase), media processing (Modal), AI model providers that process prompts and transcripts to produce drafts, our payment provider acting as merchant of record (currently Creem), and, when you use those features, public social data and publishing integrations. They process data only on our instructions.
Retention
Processed clips are deleted 7 days after processing finishes. Account data is kept while your account is open. Accounts that never make a purchase are deleted, with all their content, 30 days after sign-up; the app shows the date in advance. When you delete your account, we delete your content and personal data within 30 days, except records we must keep for legal or tax reasons.
Your rights
You can access, correct, export or delete your data. Email support@opencmo.io and we will respond within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.