Legal
Privacy Policy
OpenCoven is a local-first platform. Your agent conversations, memory files, API keys, and personal data processed by the local Coven runtime live on your machine — not on this landing site. This policy explains the limited data the public OpenCoven website can handle and how optional analytics are constrained.
Effective date: May 27, 2026 · Last updated: August 31, 2026
Who We Are
OpenCoven ("we", "us", "our") is an open-source project building infrastructure for persistent AI familiars. Our website is available at opencoven.ai. Questions? Email us at hello@opencoven.ai.
What We Don't Collect
Because the Coven runtime is local-first, this public landing site does not receive:
- Your agent conversations or session transcripts
- Your MEMORY.md, daily notes, or workspace files
- Your API keys (OpenAI, Anthropic, GitHub, etc.)
- Your tool outputs, file reads, shell commands, or command results
- Local data processed by the Coven daemon merely because you visit this website
The landing repository's analytics mode is off by default. The shipped analytics contract also forbids prompts, commands, filenames, repository names, paths, raw error contents, session replay, heatmaps, and broad autocapture from analytics payloads.
What We Do Collect
| Data | Why | When / retention |
|---|---|---|
| Bounded website interaction events and approved technical context | Diagnose public-site usage and conversion only when the deployment explicitly enables events analytics mode | Not collected by the default configuration. An enabled deployment must document its analytics provider, region, sampling, and retention before treating that mode as production-approved. |
| Support or security messages you choose to send by email, GitHub, or another linked channel | Respond to and resolve your request | Handled through the channel you choose and retained as needed for the request, project history, security response, or applicable legal obligations |
| Ordinary web request metadata handled by the hosting provider | Serve, secure, and operate the website | Subject to the hosting provider's operational and privacy terms |
This page does not claim that the current landing site operates a newsletter signup, waitlist database, user account system, or GitHub OAuth login because those collection paths are not part of the checked-in public landing implementation.
Cookies and Analytics
The current static landing experience does not require cookies for its core navigation, documentation links, product discovery, Quickstart, or theme selection. Theme preference is stored locally in your browser.
Analytics are disabled unless the deployment explicitly sets the repository's analytics mode to events and provides the required analytics configuration. In that mode, the OpenCoven wrapper accepts only a fixed event allowlist and bounded property schema; session replay, heatmaps, exception capture, automatic page-view/page-leave capture, and general autocapture are disabled by the shipped configuration.
Third-party destinations linked from this site may set their own cookies or collect data after you navigate to them. Their policies govern that activity.
Third-Party Services
The public website and linked project workflows use or may direct you to the following services:
- Vercel — website hosting and server-side landing endpoints; subject to Vercel's Privacy Policy
- GitHub — source code, issues, security advisories, releases, and downloads; subject to GitHub's Privacy Statement
- Discord — an optional community destination; subject to Discord's Privacy Policy
- PostHog — supported only for the repository's explicitly enabled, bounded
eventsanalytics mode. The default build does not load the analytics client.
When you use OpenCoven locally with third-party AI providers (OpenAI, Anthropic, Google, etc.), communications with those providers are governed by the configuration you choose and those providers' terms. Visiting this landing site does not give the site access to those local prompts or responses.
How We Use Your Data
We use the limited data described above to:
- Operate, secure, and improve the OpenCoven website and documentation
- Respond to support, security, or other messages you deliberately send
- Measure approved website interactions only when bounded event analytics are explicitly enabled
We do not sell your data. We do not share landing-site data with advertisers. We do not use landing-site analytics to train AI models.
Data Storage and Security
Data deliberately sent to OpenCoven through support or security channels is handled through the service you use to send it. Website hosting and any explicitly enabled analytics are handled by their configured providers. We limit collection in the landing implementation rather than relying on broad collection followed by filtering.
If bounded analytics are enabled for a production deployment, the deployment record must state the provider, hosting region, sampling policy, and retention period before that mode is considered approved. The default configuration remains off.
Your Rights
Depending on your location and the data involved, you may have rights to:
- Access — request a copy of personal data we hold about you
- Correction — ask us to correct inaccurate personal data
- Deletion — request deletion where applicable
- Portability — request data in a portable form where applicable
- Object or restrict — object to or restrict certain processing where applicable
To make a request, email hello@opencoven.ai. We will respond as required by applicable law.
Children's Privacy
OpenCoven is not directed at children under 13. We do not knowingly collect personal data from children under 13 through the public landing site. If you believe we have inadvertently collected such data, please contact us so it can be reviewed and deleted where required.
Changes to This Policy
We may update this Privacy Policy when the website's actual data flows, providers, or legal obligations change. When we do, we will update the "Last updated" date above. Material changes should be reviewed together with the repository's analytics and deployment contracts so the policy and shipped behavior remain consistent.
Contact
Questions, concerns, or requests? Email us at hello@opencoven.ai. For security vulnerabilities, use the private reporting path described on the Security page rather than a public issue.