Privacy Policy

This Privacy Policy explains how OpenNous LLC ("Nous", "we", "us", or "our") collects, uses, discloses, and protects personal data when you use the hosted Nous service available at opennous.cloud and related applications (the "Service"). It also describes the rights you have over your personal data.

1. Who we are and how to contact us

The data controller for personal data processed through the hosted Service is OpenNous LLC, Greenwich, Connecticut, United States. For any privacy question or to exercise your rights, contact us at privacy@opennous.cloud.

2. The data we collect

2.1 Account and profile data

When you create an account we collect your name, email address, workspace details, and authentication identifiers. If you sign in with a third party provider such as Google, we receive basic profile information from that provider.

2.2 Connected integration data

The Service works by connecting to tools you choose to authorize. Depending on the integrations you enable, we process data from those sources, which may include email content and metadata, calendar events, CRM records, contact details, meeting and call transcripts, and messaging activity. We only access the integrations you explicitly connect, and we request the minimum permissions ("scopes") needed for each one.

2.3 Usage and technical data

We collect information about how you use the Service, such as feature usage events, log data, device and browser information, and IP address. We use this to operate, secure, and improve the Service.

2.4 Billing data

If you subscribe to a paid plan, our payment processor collects and processes your billing information. We do not store full payment card numbers on our systems.

3. How we use your data

We use personal data to:

• Provide, operate, and maintain the Service, including building your revenue layer from the sources you connect.
• Authenticate you and secure your account and workspace.
• Process billing and manage subscriptions.
• Provide support and respond to your requests.
• Monitor, troubleshoot, and improve the Service, including reliability and security.
• Comply with legal obligations.

4. Legal bases for processing (EEA and UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where required. Where we rely on consent, you may withdraw it at any time.

5. How we share data and who processes it

We do not sell your personal data. We share it only with service providers ("subprocessors") that help us operate the Service, and only to the extent needed to perform their function. Our current subprocessors and their purposes are listed on our Subprocessor page.

We may also disclose data where required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets, in which case we will provide notice as required.

6. Artificial intelligence processing

The Service uses AI models to extract and organize context from the data you connect. This processing is performed through the application programming interfaces of our AI subprocessors under terms that do not permit your data to be used to train their general models. Nous does not use your data to build shared or cross customer models. The only model that learns from your data is your own workspace model, which serves you alone.

7. International data transfers

We and our subprocessors may process data in countries other than your own. Where we transfer personal data out of the EEA or the UK, we use appropriate safeguards such as the European Commission Standard Contractual Clauses. You may request a copy of the relevant safeguards by contacting us.

8. Data retention and deletion

We retain personal data for as long as your account is active or as needed to provide the Service, and afterward only as required to meet legal, accounting, or security obligations. When you delete your workspace, the associated records are deleted from our primary systems. You may request deletion of your personal data at any time by contacting us or by deleting your workspace in the application.

9. How we protect your data

We apply technical and organizational measures appropriate to the risk, including encryption of data in transit using TLS, encryption of sensitive credentials at rest using AES 256, isolation of each customer's data by workspace, authentication through OAuth so that we never store your third party passwords, and signature validation of inbound integration events. Our security practices are described further on our Trust and Security page.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have rights under the CCPA and CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise any right, contact privacy@opennous.cloud. We will respond within the time required by applicable law.

11. Cookies and analytics

We use necessary cookies to operate the Service and a limited set of analytics tools to understand product usage. You can control cookies through your browser settings. Where required by law, we request your consent before setting non essential cookies.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

Questions about this policy or our handling of your data can be sent to privacy@opennous.cloud, or by mail to OpenNous LLC, Greenwich, Connecticut, United States.

Nous, the revenue layer for modern GTM teams.