Privacy Policy

1. Who we are

Openbiznis is operated by Launchzy s. r. o., a limited liability company (spoločnosť s ručením obmedzeným) registered in the Slovak Republic.

• Registered address: Jazernica 129, 038 44 Jazernica, Slovakia
• Company ID (IČO): 57605513
• Tax identification number (DIČ): 2122848673
• Commercial register: Obchodný register Okresného súdu Žilina, oddiel: Sro, vložka č. 91150/L
• Contact: support@openbiznis.com · +421 905 706 135

For the purposes of the EU General Data Protection Regulation (GDPR), Launchzy s. r. o. is the controller of personal data described in section 3, and theprocessor of customer data described in section 4.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy enquiries go to support@openbiznis.com.

2. Two different roles

It matters which hat we are wearing, because your rights differ:

• As controller — when you visit this website, contact us, book a demo, or administer an Openbiznis account, we decide why and how that data is processed.
• As processor — when your organisation uses Openbiznis and puts its own business data into it (leads, contacts, deals, call records), your organisation decides why and how. We act on its documented instructions. If you are an individual whose data sits inside a customer's Openbiznis workspace, that customer is your controller and you should direct requests to them first.

3. Data we process as controller

Website visitors

• Technical data: IP address, browser and device type, referring page, pages viewed, and timestamps.
• Purpose: serving the site, keeping it secure, and understanding aggregate usage.
• Legal basis: legitimate interests (Article 6(1)(f) GDPR) in operating and securing our own website.

Bot and abuse protection

• Data: IP address, browser and device characteristics, and the outcome of the challenge, processed by Cloudflare Turnstile when you sign in, sign up, create a workspace, or book through a public booking page.
• Purpose: telling people apart from automated abuse before an account or booking is created.
• Legal basis: legitimate interests (Article 6(1)(f) GDPR) in securing the platform against automated attacks. Cloudflare acts as our processor and appears on the Sub-processors page.

Free trial abuse prevention

• Data: a one-way cryptographic hash of the IP address used to create a workspace. The hash cannot be reversed back to an IP address without a secret key we control.
• Purpose: recognising when the same person tries to start more than one free trial, so the trial remains a genuine one-time offer.
• Legal basis: legitimate interests (Article 6(1)(f) GDPR) in preventing abuse of a promotional offer.

Enquiries and demo bookings

• Data: name, email address, phone number, company, and whatever you choose to tell us.
• Purpose: responding to you, scheduling and running the demo, and following up about it.
• Legal basis: steps taken at your request prior to entering a contract (Article 6(1)(b)), and legitimate interests in business development (Article 6(1)(f)).

Account administration

• Data: name, work email, role, authentication data including multi-factor settings, and login and audit records.
• Purpose: providing the platform, authenticating users, enforcing permissions, supporting customers, billing, and maintaining a security audit trail.
• Legal basis: performance of a contract (Article 6(1)(b)), legal obligation for accounting records (Article 6(1)(c)), and legitimate interests in platform security (Article 6(1)(f)).

4. Data we process as processor

When a customer uses Openbiznis, we process the business data they enter or connect — for example lead and contact records, deal and pipeline data, call logs and dispositions, calendar entries, messages synced from connected channels, commission and invoice records, files uploaded to the workspace, and prompts and context submitted to AI features.

We process that data only to provide, secure, and support the platform, on the customer's documented instructions. We do not sell it, we do not use it to build advertising profiles, and we do not use it to train publicly available AI models. The terms governing this are in our Data Processing Agreement.

Automated processing by AI features

Three features in the platform send workspace data to a large language model, and each runs only when a user explicitly asks for it — nothing is processed automatically in the background:

• Call summary — where a call has been recorded and transcribed, the transcript of that call is sent for summarisation.
• Suggested follow-up — the lead's record and recent call context are sent to draft a message, which a person reviews before anything is sent.
• Social insight — aggregate performance figures for connected social accounts are sent for commentary.

Inference is routed through OpenRouter, listed in oursub-processor list, and processed in the United States under the transfer safeguards described there. Output is shown to the user and is always labelled as AI-generated. No decision with a legal or similarly significant effect on any person is taken by these features: every one of them produces text a person then reads, edits, or discards.

The rules for reviewing, disclosing, and using AI output are in our AI & Content Policy.

5. Cookies and similar technologies

We use only cookies that are strictly necessary to operate the site and the platform — principally session and authentication cookies. We do not use analytics, advertising or cross-site tracking cookies, which is why you are not asked to accept any. Full detail is in our Cookie Policy.

6. Sharing and sub-processors

We share personal data only with service providers who help us run Openbiznis, and only to the extent they need it. Each is bound by a written contract with confidentiality and security obligations at least as protective as ours. The current list, with purpose and location, is published on our Sub-processors page.

We may also disclose data where we are legally required to, or to establish, exercise, or defend legal claims.

7. International transfers

We prefer EU or EEA hosting. Where a provider processes data outside the EEA, we rely on an adequacy decision by the European Commission where one exists, and otherwise on the European Commission's Standard Contractual Clauses together with any supplementary measures the transfer requires. The location of each sub-processor is stated on the sub-processors page.

8. Retention

• Website and technical logs — up to 12 months.
• Enquiries and demo records — up to 24 months from our last meaningful contact, unless you ask us to erase them sooner.
• Account and customer workspace data — for the life of the subscription. Ordinary termination allows up to 30 days for export. Owner-requested deletion is immediate where no legal hold applies; new payment failures can lead to deletion after 14 days. Workspaces already overdue when that policy takes effect keep their prior schedule. Backups follow their rotation, and legally required evidence may be retained longer.
• Security and audit records — up to 24 months.
• Trial abuse-prevention hashes — kept indefinitely; this is a one-way hash, not a reversible identifier, and the record only exists to recognise a repeat trial signup.
• Accounting and tax records — for the period required by Slovak law, generally 10 years.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have data erased, where the grounds in Article 17 apply;
• restrict processing in the circumstances set out in Article 18;
• receive data you gave us in a portable format, and have it transmitted to another controller;
• object to processing based on legitimate interests, including profiling; and
• withdraw consent at any time, where processing is based on consent — this does not affect processing already carried out.

Write to support@openbiznis.com. We respond within one month, and will tell you if we need the extension Article 12(3) allows. Exercising these rights is free; we may charge a reasonable fee only for manifestly unfounded or excessive requests.

If we process your data as a processor for a customer, we will forward your request to that customer and support them in answering it, rather than acting on it ourselves.

Where another applicable privacy law grants you additional rights, we will honour those rights. We may need to verify your identity and the jurisdiction that applies before acting.

10. Complaints

If you think we have handled your data unlawfully, please raise it with us first. You also have the right to lodge a complaint with a supervisory authority. Ours is theOffice for Personal Data Protection of the Slovak Republic(Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, Slovakia. If you live or work in another EU member state, you may complain to your local authority instead.

11. Security

We apply technical and organisational measures appropriate to the risk, including role-based access control enforced server-side, row-level data isolation, multi-factor authentication with step-up verification on sensitive actions, encryption in transit, and an audit trail of meaningful changes. More detail is on ourSecurity page.

No system is perfectly secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours where required, and notify affected users without undue delay where Article 34 requires it.

12. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Openbiznis includes automation that qualifies and routes leads, but the commercial decisions that follow are made by our customers' staff.

13. Children

Openbiznis is a business tool sold to organisations. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

14. Changes

We may update this policy as the product or the law changes. The "last updated" date at the top always reflects the current version. Where a change materially affects your rights, we will give account holders reasonable notice by email or in-product before it takes effect.

15. Contact

Launchzy s. r. o., Jazernica 129, 038 44 Jazernica, Slovakia
support@openbiznis.com · +421 905 706 135

Related documents