OA
open-assistant

Privacy Policy

Last updated: March 29, 2026

1. Information We Collect

The Open Assistant software itself does not collect any data. As a self-hosted solution, all data processed by your instance remains on your own infrastructure. We (the Project maintainers) do not receive any data from your use of the software.

If you use a managed instance provided by the Project or its partners, that instance operator may collect data as described in their separate privacy policy.

2. Self-Hosted Deployments

When you self-host Open Assistant:

  • All conversation history, email content, calendar data, files, and credentials are stored exclusively on your own servers
  • Your chosen LLM provider may log requests according to their own policies
  • No telemetry or analytics are sent from the software to the Project

3. Third-Party Services

When you configure Open Assistant to connect with third-party services (Gmail, Outlook, OneDrive, Notion, WhatsApp, etc.), those services may collect and process data under their own privacy policies. We encourage you to review the privacy policies of any services you connect.

4. Cookies

The web interface uses minimal session cookies for authentication. No tracking, analytics, or advertising cookies are used.

5. Data Retention

Data retention is entirely under your control when self-hosting. The software stores data in a local SQLite database. You may delete any or all data at any time.

6. Data Security

The software implements the following security measures:

  • All service credentials are encrypted at rest using Fernet symmetric encryption
  • OAuth2 is used for all third-party service integrations
  • Full audit logging of all tool invocations
  • No credentials are stored in plaintext

7. Children's Privacy

The Project is not intended for use by individuals under the age of 16. If you become aware that a child has provided us with personal information, please contact us at hello@open-assistant.org.

8. Your Rights

Because the Project does not collect personal data, most privacy rights (access, correction, deletion) apply to your own deployment rather than to the Project itself. For managed instances, contact the operator of that instance.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via the Project repository or project communications.

10. Contact

For privacy-related questions, contact us at hello@open-assistant.org.

Home Terms of Service hello@open-assistant.org