Privacy Policy

Last updated: September 14, 2026

This policy explains how Opencomplai (“we”, “us”) collects and uses personal data through this website, opencomplai.com. It does not cover the open-source Opencomplai software itself: when you run pip install opencomplai it runs in your own infrastructure and does not send data to us.

Who we are

CheckRef Ltd (company number 15416191)
71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ, United Kingdom
Contact: hello@opencomplai.com

Data we collect

Waitlist form

When you submit the waitlist form, we collect your email address, the interest options you selected, your IP address, coarse geolocation (city, region, and country, derived from network-level headers provided by our hosting provider, Vercel — no separate lookup service is used), and your browser's user agent string. This information is sent via email through Brevo, our transactional email provider, to our team at hello@opencomplai.com, so we can follow up with you.

The “Oracle” widget

Text you type into the Oracle widget on our homepage is sent to Google's Gemini API to generate a regulatory-classification response. Google acts as a sub-processor for this feature, and using it may involve transferring your data outside the European Economic Area; we rely on Google's standard contractual safeguards for such transfers. Do not paste confidential or personal information into the Oracle widget — treat it as a public, informational tool, not a secure channel.

Repo chat (invite-only)

The repo chat feature at /repo-chat is available only to people we've given an access code. If you use it, we store your conversation history on our servers, tied to the name associated with your access code, and the text of your messages is sent to Google's Gemini API to generate responses. Because this is a small, identifiable group of people, you can ask us to access or delete this data at any time by contacting hello@opencomplai.com.

Vercel Web Analytics

We use Vercel Web Analytics on every page of this site to understand aggregate traffic patterns. It is cookieless: it does not set any cookie and does not assign you a persistent visitor identifier. We rely on our legitimate interest in understanding how the site is used as the legal basis for this processing.

Authentication cookies

The admin area and repo chat feature use strictly-necessary, HttpOnly cookies to keep you signed in. These cookies are not used for tracking or advertising. See our Cookie Policy for details.

Legal bases for processing

• Waitlist marketing communications: your consent, given when you submit the form.
• Analytics and security: our legitimate interest in operating and improving the site.
• Oracle widget and repo chat: performance of the service you've requested and our legitimate interest in providing these features.

Sub-processors

We use the following third parties to process data on our behalf:

• Google (Gemini API)– Processes Oracle widget queries and repo chat messages.
• Brevo– Sends transactional email notifications for waitlist signups.
• Vercel– Hosts this website and provides web analytics and file storage.
• Neon– Hosts our Postgres database (repo chat history, blog content).

International data transfers

Some of our sub-processors (including Google, Vercel, and Neon) may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, such as standard contractual clauses, offered by those providers.

Data retention

We keep waitlist submissions and repo chat conversation history until you ask us to delete it — contact hello@opencomplai.com at any time to request deletion. We do not retain data for longer than necessary for the purposes described in this policy.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at hello@opencomplai.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children's privacy

This site is not directed at, and we do not knowingly collect personal data from, individuals under the age of 16.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision.