Privacy Policy

Last updated: September 28, 2026

This Policy explains how information is handled when you use OpenNext AI. For privacy questions or requests, email support@opennextai.com.

1. Scope

This Policy covers browsing, product submissions and management, upvotes, Sponsored purchases, reports, and support requests on OpenNext AI. Product websites and payment-provider pages have their own privacy policies, which apply when you leave our site.

2. Information we collect

• Product and submission data: product URL, name, descriptions, category, logo, preview image, submitted website metadata, review status, and ownership history.
• Contact and verification data: Owner, payer, reporter, and support email addresses; Magic Link records; verification timestamps; and correspondence you send.
• Order data: internal order identifiers, amount, currency, terms version, provider checkout and payment identifiers, payment/refund/dispute status, and timestamps.
• Usage and click signals: requested product, time, a pseudonymous visitor identifier, a rotating IP-derived hash, referring host, user-agent bot signals, valid or suspected-click totals, and aggregate website analytics such as page views, referring source, approximate country, device, and browser type.
• Security and operations data: admin actions, audit reasons, webhook event data, rate-limit signals, diagnostic information, and server or hosting logs.
• Browser preferences: theme and sound settings, upvote selections, and Scout progress stored on your device, as described below.

Our application does not store raw payment-card numbers. Payment providers may collect billing name, address, tax information, card or bank details, device data, and fraud signals under their own policies.

3. How we use information

• Operate organic listings, Sponsored ranking, checkout, refunds, and product management.
• Verify ownership, prevent email enumeration, secure Magic Links, and resolve disputes.
• Measure valid outbound engagement and filter duplicate or automated traffic.
• Review products and reports, enforce the Terms, prevent fraud, and preserve payment and administrative audit records.
• Respond to support, privacy, legal, and safety requests.
• Maintain, debug, secure, and improve the service and comply with applicable law.

4. Legal bases

Where a legal basis is required, we process information as necessary to perform a contract or take requested pre-contract steps; for legitimate interests such as operating, securing, measuring, and improving the service; to comply with legal obligations; and with consent where required. You may withdraw consent without affecting earlier lawful processing.

5. Email and account security

Owner and billing email addresses in our application records are encrypted, with separate protected identifiers used for matching. Secure verification and management links are single-use and expire after 30 minutes. Keep these links private; someone with a valid link may be able to act on the associated product.

We use email to deliver requested verification links, payment-related messages, and support responses. Service emails are separate from marketing. We do not use a product submission or payment as consent to receive marketing emails.

6. Click measurement

Outbound product links pass through a redirect so we can measure visits and filter repeated or automated clicks. Our click records use a pseudonymous visitor identifier and a daily IP-derived hash rather than a raw IP address. Hosting and security providers may separately process IP addresses in their logs. Click counts are estimates, not a count of unique people or guaranteed customers.

7. Cookies and local storage

• Product-visit cookie: when you follow a product link, the on_visitor cookie helps identify repeated clicks from the same browser. It is set for up to one year and may be renewed on later visits.
• Preferences and participation: local storage remembers light or dark mode, sound preferences, your upvote selections, and Scout progress. These remain until you clear site data or change the relevant setting. Upvote selections and Scout progress currently stay in that browser and do not sync to an account.
• Security sessions: restricted areas use session cookies. An administrator session expires after two hours.
• Website analytics: Vercel Web Analytics measures aggregate page views, referrers, approximate location, and device information. Its analytics service does not use analytics cookies or cross-site advertising profiles.

You can delete or block cookies and local storage in your browser. Doing so resets saved preferences and local participation state and may affect restricted-area access or visit measurement.

8. How we share information

We use service providers for hosting, database storage, email delivery, analytics, security, and payments. They receive information needed for those services. The payment provider identified at checkout receives order and billing information and handles payment under its own privacy policy. Vercel Web Analytics processes website analytics as described above.

We may also disclose information when required by law; to protect rights, safety, and service integrity; in connection with a genuine business reorganization subject to appropriate safeguards; or at your direction. We do not sell personal information or share it for cross-context behavioral advertising.

9. Public information

Approved product names, descriptions, categories, images, domains, Sponsored status, rank, effective weekly amount, and filtered click count are public. Owner and payer emails, payment-provider identifiers, visitor hashes, and internal audit data are not intended for public display.

10. Retention

We retain information only while reasonably necessary for the purposes described here, including operating active and historical listings, resolving disputes, preventing abuse, maintaining security records, and meeting accounting, tax, payment, and legal obligations. Payment and immutable ledger records may be retained for the period required by applicable law and provider obligations. Removal of a public listing does not require deletion of transaction or audit records.

Retention depends on the type of record, whether the product or order is still active, unresolved disputes, and applicable recordkeeping requirements. Expiration of an access link does not necessarily delete its security record. You can ask us to delete personal information; if a record must be retained, we will explain the applicable reason when responding to your request.

11. International processing

Our infrastructure and service providers may process information in countries other than yours, where privacy laws may differ. Applicable legal requirements govern these transfers. Contact us for information about processing locations and safeguards relevant to your data.

12. Security

We use access controls, encryption for sensitive application records, expiring verification links, abuse prevention, and payment verification to protect the service. No method of storage or transmission is completely secure. Please do not send passwords, private API keys, or full payment-card details in a submission or support message.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive portable data; withdraw consent; and complain to a supervisory authority. We may need to verify your identity and authority before responding. Authorized agents may be required to provide proof of authority.

Send requests to support@opennextai.com with the subject “Privacy request.” Mandatory rights and response periods under applicable law remain unaffected.

14. Children

OpenNext AI is not directed to children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can investigate and take appropriate action.

15. Changes and contact

We may update this Policy as the service, providers, or laws change. Material changes will be identified by a new effective date and any notice required by law. For questions or complaints, use the Contact page or email support@opennextai.com.