Privacy Policy

Who we are

openheard is a hosted feedback board service operated by openheard. You can reach us at hello@openheard.com.

What we collect

• Account information — your email address, display name, and optionally your Google profile image when you sign in with Google.
• Content you create — posts, votes, comments, and workspace settings.
• Technical data — IP address and user agent string, recorded in server logs.
• Cookies — a session cookie to keep you signed in. No advertising or tracking cookies.

How we use it

We use your data to operate the service: authenticate you, display your posts and votes, send notifications you opted into, and diagnose errors. We do not sell your data. We do not show ads. We do not profile you for marketing.

Where it lives

Your data is stored on Cloudflare infrastructure in the US West region. Backups and replicas stay within Cloudflare's network.

Subprocessors

• Cloudflare — hosting, edge compute (Workers), database (D1), file storage (R2), and transactional email.
• Google — OAuth sign-in only. We receive your email, name, and profile image; Google does not receive your openheard activity.

Retention

Account data and content are kept for as long as your account exists. Server logs with IP addresses are retained for 30 days, then deleted. If you delete your account, your personal data is removed within 30 days; posts you authored are anonymised.

Deletion

You can request deletion of your account and associated data at any time by emailing hello@openheard.com. We will process your request within 30 days.

GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland:

• Lawful basis — we process account and content data under legitimate interest (operating the service you signed up for) and session cookies under the same basis. We process your email for notifications only with your consent.
• Your rights — you may access, correct, export, or delete your personal data, restrict or object to processing, and withdraw consent for optional processing. Email hello@openheard.com to exercise any right.
• Data controller — openheard, reachable at hello@openheard.com.

Children

openheard is not directed at anyone under 16. If we learn that a child under 16 has provided personal data, we will delete it promptly.

Changes

We may update this policy and will post the revised version here with a new effective date. Material changes will be communicated via email to account holders.