Your data
Privacy policy
Last updated October 16, 2026
01Data controller
The controller of the personal data collected on opentahr.com is the site publisher, a French sole proprietorship whose full details are in the legal notice.
For any question about personal data, write to contact@opentahr.com. The same address handles privacy requests from every country, in English or in French.
02Our principle, data minimization
OpenTahr is designed to process as little data as possible. In practice, this means three things.
- Your API keys are never sent to our servers. They are stored locally in your browser, on your device.
- Your prompts, conversations and work (audits, generated sites, reports) are stored locally in your browser. We have no access to them.
- When you use a tool, your browser talks directly to the AI provider you chose, without passing through our servers.
The only personal data we process is what is strictly needed to run your account and to deal with you.
03Data we process
Data we process ourselves (on the server)
- Account. Email address, password (stored only as a one-way hash), plan, email preferences (product news, getting-started emails) and the dates of account creation and email verification. Your sign-in sessions are recorded until they expire.
- Consents and confirmations. Proof of what you confirmed or chose at sign-up and afterwards (that you are 18 or older, acceptance of the terms, newsletter), with a timestamp.
- Aggregated usage. Daily usage counters per tool, used for product statistics and quota enforcement. These counters contain none of your prompts, keys or work.
- Emails. A record of the emails we queue and send (transactional, getting-started and, if you agreed to them, product news).
- Support requests. The bug reports, suggestions and messages you send from the assistant in the app, our replies and the page you were on. They are linked to your account.
- Messages to contact@opentahr.com. The emails you send us and our replies.
- Withdrawal requests. If you use the online withdrawal form, the email address, name, order reference and message you enter, with the date and your IP address.
- Technical data. Your IP address, used to limit abuse (rate limiting) and to log administrative access. We also keep a technical error log (error message, route, time) that contains none of your prompts or keys. None of them is kept beyond these purposes.
- Push notifications (optional). If you turn them on, the technical subscription address (endpoint) and the encryption keys your browser provides, so we can send you notifications. No personal data is included in the message.
Data stored only on your device (never sent to our servers)
- Your API keys (AI providers) and the credentials of the third-party services you link, for example DataForSEO, a Google service account for Search Console, SpeedyIndex, LemmiLink, PopCash or the image libraries.
- Your conversations, audits, generated sites and other work.
- Your theme preference (light or dark).
Data stored on your own website
If you install the OpenTahr Connector plugin on a WordPress site or the OpenTahr Connect file on another site, the connection key (stored hashed) lives on that site. For the auto-blog, the title queue and the AI key it needs (stored encrypted) also live there. That site is hosted by you or your web host, so this data stays under your control and never reaches our servers.
04Purposes and legal bases
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Creating and managing the account, providing the service | Email, password hash, preferences, plan | Performance of the contract (terms of use) |
| Handling support requests and messages | Email, messages, page concerned | Performance of the contract (legitimate interest for suggestions) |
| Handling withdrawal requests and keeping the acknowledgment | Email, name, order reference, message, IP address, date | Legal obligation (French Consumer Code) |
| Transactional emails (login, security, service) | Performance of the contract | |
| Product news and updates emails | Consent (can be withdrawn at any time) | |
| Getting-started emails (3 messages at most after you confirm your email) | Legitimate interest, with one-click opt-out from each message (GDPR art. 21) | |
| Usage statistics and quota enforcement | Usage events | Legitimate interest (improving and protecting the service) |
| Site audience measurement (Google Analytics 4) | Pseudonymized browsing data (pages viewed, device type, random identifier) | Consent (dedicated banner, can be withdrawn at any time with Manage cookies) |
| Security, abuse prevention, logging | IP address, technical logs, error log | Legitimate interest |
| Push notifications (if you turn them on) | Push subscription address (endpoint), browser keys | Consent (explicit opt-in, can be turned off at any time) |
| Answering legal requests and keeping proof of consent | Consents, logs | Legal obligation |
05Your keys and your prompts, what to know
When you use an OpenTahr tool, your browser calls the AI provider directly, using the key you set up (for example OpenAI, Anthropic, Google, DeepSeek, Mistral, Groq or OpenRouter). Your prompts and the content you submit are then processed by that provider, as controller or processor within your own contract with that provider.
OpenTahr is not a party to that relationship. We do not receive, store or read your keys, your prompts or the models' answers.
We encourage you to read the privacy policy of each provider you choose, and to use their options to opt out of training on your data where they exist.
The only two tool features that go through our servers
When you use the tools, information passes through our servers in only two cases, for purely technical reasons (browsers cannot call some third-party services directly). In both cases the data is public and is neither stored nor logged on our side. No key, prompt, AI content or Search Console data is involved.
- Site audits. When you start an audit, our server fetches the page to analyze from its public address (URL) and sends its content back to you. We only receive that public URL, no key or cookie is sent, and the URL is not kept.
- Keyword suggestions (free mode). The public keyword you type is relayed by our server to Google's autocomplete service and the suggestions are sent back to you. The keyword is neither stored nor logged. The advanced mode, which uses your DataForSEO account, calls DataForSEO directly, without our servers.
Some features run on your own website through the OpenTahr plugin or file, such as the auto-blog and Boost Pop campaigns. Your site then calls the AI provider or PopCash directly, with the keys stored on your site. Our servers are not involved in those calls.
Tip. Do not put sensitive personal data in your prompts, and use dedicated API keys with spending caps set up with your provider.
06Recipients and processors
Account data is never sold, rented or transferred. Only the publisher and the following technical processors can access it.
| Processor | Role | Where the data is |
|---|---|---|
| o2switch SAS | Hosting of the site, the API and the accounts database (authentication, quotas) | France (Clermont-Ferrand) |
| Scaleway SAS | Sending transactional and news emails | France (Paris) |
| Google Ireland Limited | Audience measurement (Google Analytics 4), only if you consent | EU / United States (see Transfers) |
| Anthropic PBC | AI assistant (Claude) that the publisher may use to help read, sort and answer support requests | United States (see Transfers) |
o2switch, Scaleway and Google work under contracts that follow article 28 of the GDPR. Anthropic is used under the terms of the Anthropic service the publisher subscribes to.
07Transfers outside the European Union
Account data is hosted in France and is not transferred outside the European Union, with the exception of support requests described below.
If you consent to audience measurement, the data collected by Google Analytics may be transferred to the United States. That transfer is covered by Google's certification under the EU-US Data Privacy Framework (European Commission adequacy decision of July 10, 2023), together with Google's standard contractual clauses. Without your consent, no data is sent to Google.
When the publisher uses Claude, Anthropic's AI assistant, to help read and answer a support request, the text of that request and the email address attached to it are processed by Anthropic PBC in the United States, under the terms of the Anthropic service the publisher uses. Please do not put sensitive personal data in a support request.
Also, if you choose to connect the API key of a provider based outside the EU (for example in the United States), the prompts you send from your browser go to that provider within your contract with it. That choice is yours, and the safeguards that apply (standard contractual clauses, EU-US Data Privacy Framework and so on) are the ones that provider offers.
08Retention periods
| Data | How long |
|---|---|
| Account data | As long as the account is active, then deleted within 30 days of a deletion request |
| Proof of consent | 5 years after consent is withdrawn (CNIL recommendation) |
| Daily usage counters | 13 months, then deleted |
| Support requests and their replies | As long as the account exists. They are deleted with the account |
| Withdrawal requests | 5 years, then deleted |
| Record of emails sent | 90 days after sending |
| Sign-in sessions | Until they expire or you sign out |
| Technical error log | Rolling log limited to the latest 1,000 entries |
| IP address (anti-abuse rate limiting) | 24 hours |
| Technical security logs and administrative audit log | 12 months at most |
| Push notification subscription | Until you turn it off or delete your account |
| Your audience measurement choice (ot-consent) | 6 months, then we ask again |
| Audience measurement (Google Analytics) | Cookies limited to 13 months. Data is kept at Google for the shortest period the tool offers |
| Data stored in your browser | Under your sole control. It stays until you delete it (app settings or clearing your browser data) |
09Your rights
Under the GDPR and the French Data Protection Act, you have the following rights over your data. Access, correction, deletion, restriction of processing, objection, portability, withdrawal of consent at any time, and the right to set instructions for what happens to your data after your death.
To exercise these rights, write to contact@opentahr.com, ideally from the email address of your account and with Privacy request in the subject line. Requests are free of charge. You will get an answer within one month, which can be extended by two months for complex requests. We may ask for proof of identity if we have reasonable doubt about who is making the request.
You can also ask to delete your account directly from the settings of your workspace.
If, after contacting us, you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr), or with the data protection authority of your country.
10If you live outside the European Union
OpenTahr applies the same rules to every user, wherever you live. The rights listed above, the contact address and the response time are the same for everyone.
- United Kingdom. The UK GDPR and the Data Protection Act 2018 give you rights equivalent to those listed above. You can also complain to the Information Commissioner's Office (Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom, ico.org.uk).
- United States and other countries. We do not sell your personal data, we do not share it for targeted advertising and we build no advertising profile from it. If a privacy law of your state or country gives you rights such as access, correction, deletion or opting out, send your request to the same address and it is handled the same way. Using your rights never changes the service you get.
- Audience measurement stays off until you accept it in the banner, whatever your country.
11Security
We apply suitable technical and organizational measures. These include encrypted connections (TLS), secure authentication with passwords stored as one-way hashes, access to each account's data limited to that account, data minimization, hosting in the European Union and logging of administrative access.
The security of data stored locally also depends on your device. We recommend an up-to-date computer protected by a session password, and API keys with a low spending cap.
12Minors
The service is meant for professionals and adults. Creating an account requires confirming that you are 18 or older. The service is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account or sent us data, contact us and we will delete it.
13Changes to this policy
This policy may change, in particular when new features are added (optional cloud sync, paid plans). Any substantial change will be announced on the site and, for account holders, by email. The date of the last update is shown at the top of this page.