Privacy Policy
Last updated: May 2026 · Open Source AI Ltd · Registered in England & Wales · Company No. 16933778
1. Who We Are
Open Source AI Ltd operates the Opensource AI Agent platform at opensource-ai-agent.uk. For privacy questions, contact us at [email protected].
2. What Data We Collect
- Account data: email address, name, and authentication provider (Google OAuth or email/password)
- Usage data: workflow executions, AI build usage, feature interactions — used to enforce plan limits and improve the product
- Payment data: handled entirely by Stripe. We do not store card numbers or payment details
- Workflow data: workflows you save are stored on our UK-based servers
- Technical data: IP address, browser type, approximate location (country-level for pricing only)
3. How We Use Your Data
- To provide and operate the platform
- To send transactional emails (password reset, billing receipts)
- To apply regional pricing based on country (IP-based, not stored permanently)
- To enforce plan limits and prevent abuse
- We do not sell your data. We do not use your data for advertising.
4. Data Storage and Security
Your data is stored on servers located in the United Kingdom. We use industry-standard encryption for data in transit (TLS) and at rest. Workflow data and account information are backed up regularly.
5. Your Rights (UK GDPR)
- Access: Request a copy of your data at any time
- Deletion: Request deletion of your account and data
- Correction: Update incorrect data via account settings
- Portability: Export your workflow data in JSON format
To exercise any of these rights, email [email protected].
6. Cookies
We use only essential cookies for authentication (session tokens). We do not use advertising cookies or third-party tracking cookies.
7. Third-Party Services
- Stripe — payment processing (Stripe Privacy Policy applies)
- Google OAuth — optional sign-in (Google Privacy Policy applies)
- Groq — AI inference for workflow nodes (data sent to Groq API when using AI nodes)
- ipapi.co — country detection for pricing (IP address sent, not stored by us)
8. Data Retention
Account data is retained while your account is active and for 30 days after deletion. Payment records are retained for 7 years as required by UK law.
9. Contact
For any privacy concerns: [email protected]