Privacy policy

Who we are

NowOpen.ai is run by Gautier Fauchart, an individual based in the Netherlands, who is responsible for your personal data (the “controller” under the GDPR). Write to gautier.fauchart@gmail.com about anything on this page. Our sign-in emails come from a no-reply address that nobody reads, so please don’t answer those.

What we collect

• Your email address, to create your account and send you sign-in codes. There are no passwords.
• Your address on the waiting list, if you leave it there, so we can send you an invitation.
• What you tell us about your business: your messages in the chat, your answers to our questions, the files and images you upload, and the name, address and domain you choose for your site. This is what your site is built from.
• Websites you ask us to read. When you ask us to bring over your current site, or to make yours look like another one, we read the pages you named and the pages they link to. Images from them are copied into your site only once you confirm they are yours.
• Your sites: every version we build, so you can preview it, publish it and go back to it.
• Usage: how much AI work each request took and what it cost, counted against your AI budget.
• Security data: your IP address when you ask for or enter a sign-in code, used to stop people guessing codes. We store codes only in scrambled (hashed) form.

We use no analytics, advertising or tracking of any kind, and we never sell your data or share it for marketing.

Cookies

One cookie keeps you signed in. It lasts 14 days from your last visit and never more than 30 days from when you signed in. If you arrive with an invitation, a second cookie holds it for half an hour while you sign in. If you pick a language in your settings, it is saved with your account and a third cookie remembers it in this browser for a year. These only do what you asked for, which is why we don’t ask for consent. Sites we host set no cookies of ours.

Why we use it

• To provide the service you signed up for: your account, sign-in codes, and building and hosting your sites (contract, GDPR Article 6(1)(b)).
• To invite you from the waiting list, which you asked us to do (steps before a contract, Article 6(1)(b)).
• To keep accounts safe: limiting sign-in attempts and warning you when someone keeps guessing your code (our legitimate interest in security, Article 6(1)(f)).

Who handles it for us

• Scaleway (France) runs our application, database and file storage, and sends our emails. All of it is in its Paris region.
• Our AI provider builds and edits your sites. Your messages, the files and images you upload, the text of pages we read for you and your site’s own files are sent to it to do that work, and may be processed outside the European Union. Your site needs facts about your business, not private details about you or anyone else, so please keep those out of the chat.
• Cloudflare delivers the sites we host and connects your own domain to your site. To do that it handles visitors’ requests, including their IP addresses, on a global network that is not limited to the EU.

Visitors to sites we host

When someone visits a site built with NowOpen.ai, Cloudflare and Scaleway serve the request. We keep no analytics about them and set no cookies. The business that owns the site decides what is on it, including any third-party widgets such as a booking system, which follow their own privacy policies. For those visitors the business is the controller, and we handle their data only on its behalf.

How long we keep it

• Your account and its usage records: for as long as the account exists.
• A site and everything about it: until you delete the site. Deleting a site removes its public pages, drafts, every version, your uploads and the conversation. There is no trash and no hidden copy.
• Sign-in codes: until a day after they expire.
• The waiting list: until you ask us to take you off it.
• Our providers’ technical logs: a few days, then deleted automatically.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to receive a copy of it, or to object to or restrict how we use it. You can delete a site yourself from your list of sites. For anything else, including deleting your account, email gautier.fauchart@gmail.com. We answer within a month.

If you think we have mishandled your data, you can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens, or to the one where you live.

Children

NowOpen.ai is a service for businesses and is not meant for anyone under 16.

Changes

When this policy changes we update this page and the date at the top. If a change affects how your data is used, we email you before it takes effect.