Privacy Policy

1. Introduction

Welcome to Opensyte (“we,” “our,” or “us”). We are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and join our waitlist for our open-source business management platform.

Opensyte is an open-source business management platform designed for startups and small businesses. We are currently in our pre-launch phase, collecting email addresses for our waitlist to notify interested users when our platform becomes available.

By using our website or providing your information to us, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you join our waitlist, we collect:

• Email Address: Required for waitlist signup and communications
• Name: Optional, if provided during signup
• Company Information: Optional, if you choose to share your company name or role
• Additional Information: Any other information you voluntarily provide in forms or communications

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP Address: For security, analytics, and geographic insights
• Browser Information: Browser type, version, and settings
• Device Information: Operating system, device type, and screen resolution
• Usage Data: Pages visited, time spent, and interaction patterns
• Referral Information: How you found our website

3. How We Use Your Information

3.1 Primary Purposes

• Waitlist Management: To notify you when Opensyte launches
• Platform Updates: To inform you about product development progress
• Early Access: To provide priority access to beta versions or early features

3.2 Secondary Purposes

• Product Development: To gather feedback and improve our platform
• Market Research: To understand user needs and preferences
• Community Building: To engage with our user community
• Technical Operations: To maintain and improve our website performance
• Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

3.3 Communication Frequency

We will contact waitlist members sparingly and only for meaningful updates. You can expect:

• Launch notification (when the platform becomes available)
• Major milestone updates (monthly at most)
• Occasional feedback requests for product development
• Early access opportunities

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: For waitlist signup and marketing communications (Article 6(1)(a))
• Legitimate Interests: For website analytics, security, and product development (Article 6(1)(f))
• Legal Obligation: For compliance with applicable laws (Article 6(1)(c))

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Share Your Information

5.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Email Services: For sending waitlist notifications and updates
• Analytics Providers: For website performance and user behavior analysis
• Cloud Hosting: For secure data storage and website hosting
• Security Services: For fraud prevention and security monitoring

These service providers are contractually bound to protect your information and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoenas, court orders)
• Government investigations
• Protection of our rights, property, or safety
• Protection of users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or website notice of any such change in ownership.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data transmission and storage encryption
• Access Controls: Restricted access to personal data
• Regular Security Audits: Ongoing security assessments
• Secure Infrastructure: Industry-standard hosting and security practices
• Employee Training: Privacy and security awareness for our team

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying you of any breaches as required by law.

7. Data Retention

We retain your personal information for different periods depending on the purpose:

• Waitlist Data: Until platform launch + 2 years, or until you opt out
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: Up to 24 months
• Security Logs: Up to 12 months
• Legal Compliance: As required by applicable laws

We will delete or anonymize your personal information when it is no longer needed for the purposes outlined in this Privacy Policy.

8. Your Rights and Choices

8.1 GDPR Rights (EU Residents)

If you are located in the European Union, you have the following rights:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your personal data
• Right of Restriction: Request limitation of processing
• Right of Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

8.2 CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Equal treatment regardless of privacy choices

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: dagermohamed@opensyte.org
• Subject Line: “Privacy Rights Request”
• Include: Your email address and specific request

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

8.4 Opt-Out Options

You can opt out of our communications at any time by:

• Clicking the “unsubscribe” link in any email
• Contacting us directly at dagermohamed@opensyte.org
• Updating your preferences through our website (when available)

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes and codes of conduct

10. Children’s Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from children under 16 without verification of parental consent, we will take steps to remove that information from our servers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the “Last updated” date at the top of this policy
• Notify you via email if the changes are material
• Post a notice on our website homepage
• Provide a summary of key changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You can also reach out to us through our GitHub repository or community forums for general questions about our open-source project and data practices.