Privacy & Data Compliance

This Privacy and Data Compliance Statement supplements our Privacy Policy and describes how Open Computer complies with applicable data protection legislation, including:

• The General Data Protection Regulation (EU) 2016/679 ("GDPR") — applicable to users in the European Economic Area
• The UK General Data Protection Regulation ("UK GDPR") — applicable to users in the United Kingdom
• The Digital Personal Data Protection Act, 2023 ("DPDP Act") — applicable to users in India

Where any provision of this statement conflicts with our general Privacy Policy, this statement takes precedence for users in the relevant jurisdictions.

For the purposes of applicable data protection law, the data controller is:

Open Computer
Bengaluru, Karnataka, India
Email: tryopencomputer@gmail.com

As data controller, we determine the purposes and means by which your personal data is processed. For questions about how we handle your data, contact us at the address above.

Under the GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following bases:

Performance of a Contract (Article 6(1)(b))

Processing necessary to provide the Services you have requested, including account creation, credit management, content generation, and customer support.

Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate interests, including platform security, fraud detection and prevention, abuse monitoring, and internal analytics for service improvement, where these interests are not overridden by your rights.

Consent (Article 6(1)(a))

Where you have given explicit consent, specifically for the use of free tier User Content and prompts for AI model training. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Legal Obligation (Article 6(1)(c))

Processing required to comply with applicable legal obligations, such as financial record retention or responses to lawful government requests.

If you are located in the EEA or UK, you have the following rights under the GDPR and UK GDPR:

Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you, information about how we process it, and details of any third parties with whom we share it.

Right to Rectification (Article 16)

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure — "Right to be Forgotten" (Article 17)

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to certain legal retention obligations.

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

Right to Object (Article 21)

You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with your national data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law.

If you are located in India, you have the following rights under the Digital Personal Data Protection Act, 2023:

Right to Access Information

You have the right to obtain a summary of the personal data we process about you and the processing activities carried out with your data.

Right to Correction and Erasure

You have the right to request correction of inaccurate or misleading personal data, and to request erasure of personal data that is no longer necessary for the purpose for which it was collected, or where consent has been withdrawn.

Right to Grievance Redressal

You have the right to have your grievances addressed in a timely manner. You may raise any data-related complaint with us at tryopencomputer@gmail.com and we will acknowledge and respond within 7 business days.

Right to Nominate

You have the right to nominate an individual who may, in the event of your death or incapacity, exercise your data protection rights on your behalf.

Consent Management

Under the DPDP Act, you have the right to withdraw consent for data processing at any time. Withdrawal of consent will not affect the legality of processing carried out prior to withdrawal. Where withdrawal makes it impossible to continue providing the Services, we reserve the right to cease providing those Services.

Open Computer is based in India. Your personal data may be transferred to and processed in countries outside India, including through our service providers. Such transfers may include countries that do not have data protection laws equivalent to those in India or the EEA.

Where personal data is transferred outside India or the EEA, we ensure appropriate safeguards are in place, including:

• Contractual protections with our service providers (including standard contractual clauses where applicable)
• Transfers only to providers who maintain adequate data security standards

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, or as required by applicable law. When data is no longer required, we delete or anonymize it securely.

You may request deletion of your account and associated data at any time by contacting tryopencomputer@gmail.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

To exercise any of the rights described in this statement, submit a written request to:

Email: tryopencomputer@gmail.com
Subject: Data Rights Request — [your registered email address]

Please include the following in your request:

• Your full name and registered email address
• The specific right you wish to exercise
• Any relevant details to help us identify your request

We may request additional information to verify your identity before processing your request. We will acknowledge your request within 3 business days and respond fully within 30 days. In complex cases, we may extend this period by an additional 30 days with prior notice.

EEA Users

If you are in the EEA and believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with the data protection supervisory authority in your member state.

UK Users

If you are in the UK, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Indian Users

Under the DPDP Act 2023, the Data Protection Board of India will serve as the supervisory authority once established. Until then, complaints may be directed to us directly at tryopencomputer@gmail.com.

We may update this statement periodically to reflect changes in applicable law or our data practices. Material changes will be communicated through the platform or via email. Your continued use of the Services after such changes constitutes acceptance of the updated statement.

For all data protection and compliance inquiries:

Open Computer
Bengaluru, Karnataka, India
Email: tryopencomputer@gmail.com
Response time: Within 7 business days