Legal

Privacy Policy

Last updated: August 21, 2026

Open Tag ("Open Tag", "we", "us") builds a model-agnostic AI teammate you tag into your team's workspace. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

Information you provide

When you create an account or configure Open Tag, we collect details such as your name, email address, workspace and channel identifiers, and the configuration you set (for example, which tools and data sources you connect and which model provider you bring).

Content you send to the assistant

When you tag Open Tag or send it a request, we process the messages, files, and context you make available so the assistant can complete the task. Administrators control which channels and data sources Open Tag can access.

Usage and device data

We collect limited technical information such as log data, timestamps, approximate location derived from IP address, and diagnostics to keep the service reliable and secure.

How we use information

• To provide, maintain, and improve Open Tag.
• To route requests to the model provider you configure.
• To secure the service and prevent abuse.
• To respond to your support and account requests.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your private content to train our own models.

Model providers and your keys

Open Tag is model-agnostic: you bring your own API key for the provider you choose. When Open Tag processes a request, the relevant content is sent to that provider under your account and their terms and privacy policy. If you run an open-source model on your own hardware, that content stays inside your infrastructure. You can review the providers commonly used with Open Tag on our Subprocessors page.

Sharing and disclosure

We share information only with the subprocessors that help us run the service, when required by law, or to protect the rights and safety of our users. See our Subprocessors page for the current list.

Data retention

We retain information for as long as your account is active or as needed to provide the service, and thereafter only as required for legitimate business or legal purposes. You can also self-host Open Tag and control retention entirely yourself.

Security

See the trust model for invited channels, approval gates, and bring-your-own-key behavior. No method of transmission or storage is perfectly secure. To report a security issue, see our Vulnerability Disclosure page.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@opentag.bot.

International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

Children's privacy

Open Tag is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

Contact us