Privacy Policy
The short version
- You don't need an account. We don't ask for your name, email or phone number.
- Your messages are sent to our AI provider, Google (Gemini), to write your companion's replies. We don't store your conversations on our servers, but Google may keep and review them to improve its products (see section 4). This currently applies on paid plans too, so don't share anything highly sensitive.
- Your chats, companions and saved notes stay in your browser, and only if you switch on "Save on this device". Otherwise they disappear when you close the tab.
- Your companion only remembers notes you've approved. You can edit or delete them at any time.
- We don't sell your data, show ads, or use your conversations for marketing.
1. Who we are
Openly is an AI companion website run by Abhinav Kaushik, an individual based in Gurugram, Haryana, India ("Openly", "we", "us"). This policy explains what information we handle when you use the Openly website and app at openlyonline.in (the "Service"), why, and the choices you have.
For questions about this policy, email abhi.kaushik1213@gmail.com.
2. What we collect
Information you choose to provide
| What | Examples | Where it goes |
|---|---|---|
| Messages | What you type to your companion | Sent through our server to Google's Gemini API to generate a reply. Not stored by us; Google may retain it and use it to improve its products (see section 4). |
| Companion settings | The name, look, personality, interests and backstory of companions you create; your tone and reply-length preferences | Sent with each message so replies match your settings. Kept in your browser only if you turn on saving. |
| Saved notes ("memory") | Things you approve for your companion to remember, such as "Your sister Dana visits on Friday" | Sent with each message so your companion can refer to them. Kept in your browser only if you turn on saving. |
| Age and AI confirmation | Your confirmation that you're 18 or older and understand companions are AI | Kept in your browser only if you turn on saving. |
Information collected automatically
- IP address. Our server keeps your IP address in memory for about one minute to limit how many messages can be sent in a short time. This protects the Service from abuse. It is not written to a database.
- Country check. To decide whether we can offer live AI and paid plans where you are, our server looks up which country your IP address belongs to, using a copy of a public IP-to-country list kept on our own server. Nothing is sent to anyone else, and the result isn't stored.
- Daily usage count. To cap how many messages each visitor can send per day, our server turns your IP address into a scrambled one-way code (a salted hash) that can't be turned back into the address, and counts requests against it. The code and counts are held only in memory and are deleted every day at midnight UTC (5:30 AM IST), or sooner if the server restarts.
- Error logs. If something goes wrong, our server records a short technical error message. These logs don't include the content of your messages.
- Standard web logs. Like most websites, our hosting provider, Render Services, Inc., may record basic request information such as IP address, browser type and time of visit.
If you buy a paid plan
- Payment. Checkout happens on Dodo Payments' own pages. They collect your payment details, name, email and billing country to take payment, calculate tax and send your receipt, under Dodo Payments' privacy policy. We never see your card or bank details.
- Licence key. When you paste your licence key into Openly, our server sends it to Dodo Payments to check it's active and which plan it's for. Dodo's reply includes basic customer details such as your name and email. We don't store those details; we only use the plan. Our server keeps a scrambled (hashed) form of your key in memory for up to 30 minutes so it doesn't have to ask Dodo on every message, and uses it to count your daily messages.
- In your browser. Your licence key and a signed plan token are saved in your browser so your plan keeps working, even if "Save on this device" is off. You can remove them under "Your plan" in the app.
What we don't collect
We don't use accounts, advertising or tracking cookies, and we never see your card or bank details. We count page visits with Cloudflare Web Analytics, which doesn't use cookies or identify you. We don't build a profile of you across visits on our servers.
3. How we use your information
| Purpose | Information used | Legal basis |
|---|---|---|
| Generating your companion's replies | Messages, companion settings, saved notes | Providing the Service you ask for (contract) |
| Suggesting notes to remember, when you press "Find things to remember" | Your recent messages and existing notes | Your request (consent); nothing is saved until you approve it |
| Preventing abuse and keeping the Service running | IP address, error logs | Our legitimate interest in a secure, available Service |
| Counting visits to understand how the site is used | Pages viewed, approximate country, browser and device type (through Cloudflare Web Analytics, without cookies) | Our legitimate interest in improving the Service |
| Meeting legal obligations | Any of the above, where required | Legal obligation |
We never use the content of your conversations for advertising or marketing.
4. Who we share it with
We don't sell or rent your personal information. We share it only with these service providers, and only as needed to run the Service:
- Google LLC (Gemini API) provides the AI model that writes your companion's replies. Your messages, companion settings and saved notes are sent to Google for each reply. We currently use Google's free (unpaid) Gemini API service for all chats, including chats on paid plans. Under Google's terms for that service, Google may use the content sent to it to provide, improve and develop its products, and human reviewers may read it. Please don't share sensitive, confidential or personal information you wouldn't want reviewed. If we move paid plans to Google's paid service, which doesn't use content this way, we'll update this policy. See the Gemini API Additional Terms and Google's Privacy Policy.
- Render Services, Inc. hosts our server (in Singapore) and may keep standard request logs, under Render's privacy policy.
- Read-aloud. If you tap "Listen", the reply is read out by your device's built-in text-to-speech voice. This normally happens on your device; we don't receive any audio.
- Dodo Payments (Dodo Payments Inc.) sells our paid plans as merchant of record. If you buy a plan, they process your payment and send us your plan and basic customer details when you activate a licence key, as described in section 2.
- Cloudflare, Inc. (Cloudflare Web Analytics) counts how many people visit our pages, which pages they view, roughly where they're visiting from and what kind of browser or device they use, so we know how the site is doing. It doesn't use cookies, doesn't store anything on your device and doesn't track you across sites or build a profile of you. Like any website request, Cloudflare receives your IP address when the counting script loads. See Cloudflare's Privacy Policy.
- Google Fonts and public content networks (cdnjs and unpkg) deliver our fonts and some code. Like any website request, they receive your IP address and browser information.
- Authorities, if the law requires it, or to protect someone's safety, our rights, or the rights of others.
- A successor business, if Openly is merged, acquired or sold. This policy would continue to apply to your information.
5. Data stored on your device
Openly uses your browser's local storage, not cookies, for two things:
- Your companions, chats, notes and preferences, only if you switch on "Save on this device". This data stays in your browser and is not sent to us except as part of a message you send.
- Your theme choice (space or sky), once you use the theme switch.
- Your licence key and plan token, if you've activated a paid plan. Remove them under "Your plan" in the app.
To delete this data, switch off "Save on this device", use "Reset all data" in the app, or clear this site's data in your browser settings. Anyone with access to your device and browser profile may be able to see saved chats, so use saving only on a device you trust.
6. How long we keep it
- Conversations: we don't keep them. Our server passes each message to Google and forgets it once the reply is sent. Google may keep the content it receives for the periods set out in its own terms, and may use it to improve its products, as described in section 4.
- IP addresses for abuse prevention: about one minute.
- Daily usage counts (scrambled, not your IP address): until the next midnight UTC.
- Licence check results (a scrambled form of your key and your plan): up to 30 minutes, in memory only.
- Payment records: kept by Dodo Payments as required for tax and accounting, under their policy.
- Error logs: up to 30 days.
- Data saved on your device: until you delete it.
7. Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act 2023, the EU and UK GDPR, and US state laws such as California's, you may have the right to:
- access the personal data we hold about you, or correct it;
- ask us to delete it;
- withdraw consent you've given, at any time;
- object to, or ask us to restrict, certain processing;
- nominate someone to exercise your rights if you can't (India);
- complain to a data protection authority, such as the Data Protection Board of India or your local regulator.
Because we don't keep accounts or store your conversations, most of your data is under your direct control in your browser, and you can view, edit or delete it there at any time. For anything else, email abhi.kaushik1213@gmail.com. We'll respond within 30 days. We won't treat you differently for exercising your rights.
8. Sensitive information and other people
You decide what to tell your companion. Please think before sharing highly sensitive details, such as health information, financial or government ID numbers, or passwords. Avoid sharing other people's private information beyond what's needed for a conversation. Your companion only remembers what you approve, and you can delete any note at any time.
9. Adults only
Openly is only for people aged 18 and over. We don't knowingly handle information from anyone under 18. If you believe someone under 18 is using Openly, contact us and we'll take appropriate steps.
10. Security
Our site uses encrypted connections (HTTPS). Our AI provider key is kept on our server and never sent to your browser. Our server checks and limits what it accepts, and we keep as little data as possible. No system is perfectly secure, though, so we can't guarantee absolute security.
11. International transfers
Our service providers, including Google, may process your information in countries other than yours, including the United States. Where the law requires it, we use appropriate safeguards for these transfers.
12. Changes to this policy
We may update this policy as Openly changes. If we add accounts, cloud storage of chats or any new kind of data collection, we'll update this page before the change takes effect and change the effective date above. For significant changes, we'll also show a notice on the site.
13. Contact and grievance officer
Email: abhi.kaushik1213@gmail.com
Operator: Abhinav Kaushik, Gurugram, Haryana, India
Grievance officer (India): Abhinav Kaushik, abhi.kaushik1213@gmail.com. We'll acknowledge complaints within 24 hours and aim to resolve them within 15 days.