Privacy Policy

This Privacy Policy describes how Fieldcrest Ventures, LLC (“Company,” “we,” “us,” or “our”) collects, uses, stores, and discloses information in connection with the OpenCollar AI employee service (“Service”). OpenCollar is a product name and trade name of Fieldcrest Ventures, LLC and is not a separate legal entity.

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you are accepting this policy on behalf of an organization, you represent that you have the authority to do so.

1. What Information We Collect

1.1 Account Information

When you create an account or subscribe to the Service, we collect:

• Name and contact information (email address, business name)
• Billing and payment information (processed through Stripe; we do not store full card numbers)
• Account credentials and authentication data

1.2 Usage and Log Data

We collect technical data generated by your use of the Service, including:

• Session activity logs and interaction records associated with your AI Employee
• Cron job schedules, task configurations, and operational parameters you set
• API request logs, error reports, and diagnostic data
• Browser and device information when you access our web application

1.3 Content Processed by the AI Employee

The AI Employee processes content at your direction. This may include:

• Documents, emails, files, and data you share with or expose to the AI Employee
• Instructions, prompts, and directives you provide
• Outputs and work products the AI Employee generates on your behalf
• Credentials and access tokens you grant the AI Employee (stored encrypted)

We treat content processed by the AI Employee as Customer Content under our Terms of Service. We do not use Customer Content to train our own models.

1.4 Communications

If you contact us by email or through the Service, we retain records of those communications.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription
• Authenticate your identity and secure your account
• Monitor Service health, diagnose problems, and prevent abuse
• Comply with legal obligations
• Communicate with you about your account, the Service, and material changes to our policies

We do not sell your personal information. We do not use your Customer Content for advertising purposes.

3. How We Share Your Information

3.1 Third-Party AI Model Providers

The AI Employee is powered by Anthropic, OpenAI, and other leading commercial providers of large language models and other AI models. We access these providers through their commercial APIs under their standard enterprise terms of service. Content you provide to the AI Employee — including instructions and context you make available to it — is transmitted to these providers for processing.

We do not control the data practices of these providers. Each provider’s handling of content transmitted through its API is governed solely by its own privacy policy and terms of service. We cannot guarantee, warrant, or represent how these providers collect, store, use, or retain data processed through their APIs. You are encouraged to review their policies directly:

• Anthropic: anthropic.com/privacy
• OpenAI: openai.com/policies/privacy-policy

By using the Service, you acknowledge and accept that your content will be transmitted to and processed by these third-party providers, and that OpenCollar’s obligations extend only to our own handling of your data as described in this Policy.

3.2 Payment Processing

Payment card data is processed by Stripe, Inc. We share only the information necessary to complete your transaction. Stripe’s privacy policy is available at stripe.com/privacy.

3.3 Infrastructure Providers

We use cloud infrastructure providers (including Hetzner Cloud) to host the Service. These providers may have access to data stored on infrastructure they operate on our behalf, subject to confidentiality obligations.

3.4 Legal Requirements

We may disclose information if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, the rights of others, or the safety of persons.

3.5 Business Transfers

If Fieldcrest Ventures, LLC undergoes a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change as required by applicable law.

4. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

• Encryption of credentials and secrets at rest and in transit
• Access controls limiting employee and system access to customer data
• Routine security audits and monitoring

No method of transmission or storage is perfectly secure. We cannot guarantee that unauthorized access, hacking, data loss, or other breach will never occur. By using the Service, you acknowledge this inherent risk.

As stated in our Terms of Service, you are solely responsible for the nature and sensitivity of any information you make accessible to the AI Employee. We strongly advise against providing the AI Employee with access to highly sensitive regulated data (such as HIPAA-covered health information, PCI payment card data, or similarly regulated categories) unless you have independently determined that doing so is appropriate under applicable law.

5. Data Retention

We retain your account information and usage logs for as long as your account is active and for a reasonable period thereafter as needed for legal, operational, and dispute-resolution purposes.

Customer Content (as defined in our Terms of Service) is retained while your account is active. Upon termination, you may request a copy of your Customer Content within thirty (30) days of termination. We may permanently delete Customer Content after that period. See our Terms of Service for the full data-at-termination procedure.

6. Your Rights and Choices

You may request to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated personal information (subject to legal retention obligations)
• Export your Customer Content (as described in our Terms of Service)

To exercise any of these rights, contact us at the address in Section 10. We will respond to verifiable requests within a reasonable time.

If you are located in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR or UK GDPR, including the right to lodge a complaint with your local supervisory authority. If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale (we do not sell personal information).

7. Cookies and Tracking

Our web application uses cookies and similar technologies for authentication, session management, and basic usage analytics. We do not use third-party advertising tracking cookies.

You may configure your browser to refuse cookies, but doing so may prevent you from using certain features of the Service.

8. Children’s Privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email or through the Service. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the Service after notice of changes constitutes your acceptance of the updated policy.