Privacy Policy - opencream.ai

1. Data Controller

The data controller for opencream.com, opencream.ai, and opencream.partners is:

Opencream SASU
15 av Marie Amelie
60500 Chantilly, France
Email: hello@opencream.ai

2. Data We Collect

We collect minimal data necessary to provide our services:

Contact Form Data: Name, email, company name and message content when you submit the contact form. The form is sent through our own form service (forms.opencream.ai), which emails it to us.
Analytics Data: We use PostHog analytics on this site. Before you make a choice, and if you reject, it only counts page views, without cookies or a personal profile, and stores nothing on your device. If you accept in the banner, it also stores an identifier in your browser (cookie and local storage) and records clicks and interactions. You can change your choice at any time with "Cookie settings" in the footer.
Calendar Bookings: When you book a call, we store your name, email, company (optional), note (optional) and the chosen time in our own booking service on our servers at Hetzner in Germany.

3. How We Use Your Data

To respond to your inquiries and provide requested services
To schedule and manage consultations
To understand website traffic patterns (without personal profiles)
To improve our website and services

4. Legal Basis (GDPR Art. 6)

Consent: When you submit contact forms or book consultations, and for analytics identifiers and interaction tracking that you accept in the cookie banner.
Legitimate Interest: For privacy-preserving, cookieless page-view analytics without personal profiles to understand website traffic and improve our services.
Contract: To provide services you've requested

5. Third-Party Services

We use the following third-party services:

PostHog Analytics: Analytics, hosted in the EU (eu.i.posthog.com). Without your consent: page views only, no cookies, no local storage, no personal profile. With your consent: an identifier stored in your browser plus click and interaction events. Session recordings are switched off.
Booking a call: The "Book a call" link leads to our own booking calendar (opencream booking, book.opencream.ai), running on our servers at Hetzner in Germany. Confirmation emails go out through eusend (EEA) and the appointment is added to our Google Calendar (see section 6).
Contact form service: Our own form relay (forms.opencream.ai) runs on our servers at Hetzner in Germany and passes your message to us by email through an EU-based email delivery provider (eusend.dev).
Hetzner Online GmbH: Website hosting, Germany.

International transfers

Booking data and emails stay in the EEA. Google may process our calendar data in the United States; Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses (GDPR Chapter V). You can ask us for a copy of the applicable safeguard at the email below. Hosting, contact form processing and analytics data stay in the EU.

6. Google Calendar connection (opencream booking)

Businesses that use our booking tool (opencream booking, book.opencream.ai) can connect their Google Calendar. If you connect yours, the tool receives the following Google user data:

Free/busy information of your calendars: only whether a time is busy, never the title, attendees or content of your events.
Your calendar list (names and your access level), to decide which calendars count as busy.
Access to events the tool creates: it adds each booked appointment to your calendar and can change or delete only those appointments.

We use this data only to show your free times to people booking with you and to put their bookings into your calendar. We do not sell it, do not use it for advertising, do not use it to train AI models, and nobody reads it except when you ask us to, for security reasons, or where the law requires it.

The access token Google gives us is stored encrypted on our servers at Hetzner in Germany. You can remove access at any time in your Google account (Security, Third-party connections); on request we delete the stored token immediately. Appointments already in your calendar stay there.

opencream booking's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined above or as required by law. Contact form submissions are retained for 2 years unless you request earlier deletion. Providing data is optional; without it we cannot answer your message. Booking details are deleted 12 months after the call.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

Access your personal data
Rectify inaccurate data
Request deletion of your data
Restrict processing of your data
Data portability
Object to processing
Withdraw consent at any time

To exercise these rights, contact us at hello@opencream.ai

9. Cookies & Local Storage

We use one strictly necessary cookie for your language and one for your cookie choice. Analytics identifiers are only stored if you accept.

Language preference cookie (preferred_lang): remembers your language so we do not re-detect it on every visit. Strictly necessary.
Cookie choice (cookie_consent): remembers whether you accepted or rejected analytics, for 12 months. Strictly necessary.
PostHog identifiers (ph_* cookie and local storage): stored only if you accept analytics in the banner.

You can change your choice at any time with "Cookie settings" in the footer, or clear your browser cookies.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

11. Contact & Complaints

For privacy-related inquiries, contact us at hello@opencream.ai

You have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).