Effective date: March 10, 2026 · Last updated: July 27, 2026
OpenFactory collects the minimum data needed to run the service, protect the platform, and deliver your operating systems. We do not sell personal data or use your builds and conversations for ads or model training. Google may process limited device and usage data for analytics and advertising on marketing and guest-launch surfaces.
This policy explains what OpenFactory Inc. collects, why we collect it, how long we keep it, and what control you retain over that information across openfactory.tech and related services.
We keep the scope narrow and tie collection to a specific operational need.
We store your name, email address, profile image, and authentication identifiers so you can sign in and manage your account.
We store your recipes, build settings, generated images, logs, and test results so you can create, review, rerun, and download your systems.
If you use AI-assisted build workflows, we store the conversation and any generated draft artifacts so the session can continue and the system can produce the requested output.
We log IP addresses, user-agent strings, authentication events, and basic service telemetry to prevent abuse, investigate incidents, and maintain platform reliability.
If you belong to a team, we store organization membership, roles, and encrypted integration credentials for services that you explicitly connect.
When you contact sales, request a security review, or scope a technical pilot, we store the contact details, company and role, inquiry notes, qualification answers, source and campaign context, and opaque session or visitor identifiers you submit or that accompany the form. We hash the submitting network address for abuse prevention and do not store the raw address in the commercial lead record.
We keep third-party access limited to infrastructure and service delivery.
We retain data only as long as it remains useful for the service or necessary for security and compliance.
| Data | Kept for | After deletion |
|---|---|---|
| Account information | While the account exists | Removed within 30 days |
| Builds and recipes | While the account exists | Removed within 30 days |
| ISO images | Up to 90 days after build | Purged automatically |
| Conversations | While the account exists | Removed within 30 days |
| Security logs | Typically 90 days | Purged automatically |
| Sales, security, and pilot inquiries | Up to 24 months after the last commercial interaction | Purged automatically unless a contract or legal obligation requires longer |
| Audit logs for regulated workflows | Up to 7 years when required | Retained as required by law or contract |
Enterprise customers can negotiate different retention periods through a written agreement.
We respond to privacy requests through privacy@openfactory.tech and normally complete them well before the 30-day mark.
We use a small number of cookies and similar technologies.
| Cookie or signal | Purpose | Required |
|---|---|---|
| Session cookie | Keeps you signed in and maintains session state | Yes |
| Analytics cookies | Measure marketing-site traffic and navigation patterns | No |
| Advertising cookies or signals | Provide and measure Google ads and control offer frequency | No |
You can decline or withdraw optional advertising storage through the consent prompt where offered, Google ad settings, or browser controls. Core service functionality and guest launch controls remain available when an ad is unavailable or blocked.
OpenFactory is not intended for children under 16, and we do not knowingly collect personal data from them.
If we make material changes to this policy, we will post the update here and, where appropriate, notify account holders in advance.
For privacy requests, data-processing questions, or regulated-environment inquiries, contact us here.
If you are in the EEA or UK and believe we did not resolve a complaint appropriately, you may also contact your local data protection authority.