opentopost

Privacy

Privacy policy

Last updated 14 October 2026

This policy covers the hosted version of opentopost. If your team runs its own copy, your team controls that data, and this policy does not apply to it.

Data we collect

  • Account data: your name, email address, and sign-in ID, received from our sign-in provider.
  • Workspace data: the notes, source content, voice samples (text, recordings, images, and links you add, and their transcripts), voice notes, ideas, drafts, and post links you add.
  • Model keys and connection tokens, which we encrypt with AES-256-GCM before we store them.
  • Basic usage records, such as when a scan ran and how many model tokens it used.
  • Product analytics: the pages you view, the buttons and links you click, how far you scroll, and how long a page is active, with your browser type, device type, language, and time zone. We tie these to a random ID kept in your browser, and to your account when you are signed in. We do not record what you type.

How we use it

We use your data only to run opentopost for you: to sign you in, find post ideas, write drafts, and show results.

We do not sell your data. We do not use it to train models. We do not show ads.

Who processes it

  • Kinde runs sign-in. When card payments are on, Kinde runs billing and Stripe processes payments for Kinde.
  • Convex stores workspace data and runs the server functions.
  • Vercel hosts the website.
  • The model provider you choose (Google, Anthropic, OpenAI, or OpenRouter) receives the content needed for each request, under your own API key and that provider's terms. On paid plans, Anthropic receives it under our key, and Google receives voice recordings and videos.

Cookies

We use only the cookies needed to keep you signed in. We use no advertising or tracking cookies. Our analytics keep a random ID in your browser's local storage, not in a cookie, and are off when your browser sends Do Not Track or Global Privacy Control.

How long we keep it

We keep your data while your account exists. When you delete a workspace or your account in settings, we delete the data in it from our database. You can export a workspace as JSON at any time.

Your rights

You can see, export, correct, and delete your data in the app. For any other request, such as a copy of your account data, contact us at [email protected].

Changes to this policy

When we change this policy, we update the date at the top of this page.