Your request is yours
The short version
- Your agent never types passwords or card numbers
- Your agent asks before it first shares your details with a business
- A delivery address is saved only when you choose, and used only at checkout
- Pictures of private browser steps are deleted after 30 days
- Delete your account in Settings; you have 30 days to change your mind
Requests and account history
Nothing is sent before you sign up: a request you write is kept in this browser tab until you join. Once you join, your account can hold your chats and tasks.
Rating replies
When you rate a reply, a copy of your question and the reply may be kept for up to 12 months to help us improve OpenMap. We take out the names and contact details we can detect, only OpenMap staff can see it, and it’s removed if you delete the chat or your account.
Location is a choice
Choose a place when local results matter. You can ask an online question without sharing your device location.
When you haven’t chosen a place, we use a rough area from your connection (for example Barnet) for that request; it’s kept in that chat and its task like any place you name, and never saved as your Home or area. It is used only in the UK and only to search: an order, a delivery or a booking always asks you where. Choose Anywhere to switch it off.
Your precise device location is used only when you tap “Use my location”, which the chat offers once on each device and never again after you say no. If you type a full postcode for your own home (such as “my flat, EN5 4BW”, or an order delivered to you), or share your location, and have no Home yet, only its postcode district (such as EN5) is saved as your area, with an Undo. Someone else’s postcode (“flowers to my mum at …”), somewhere that isn’t your home (an office or a hotel) or one you only ask about is never saved. If you already have a Home, the chat asks before changing it.
Food and takeaway: OpenMap finds places and hands the order to you on Deliveroo, Just Eat, Uber Eats or the place’s own website (or its phone number). You order and pay there; your agent doesn’t fill a food basket. Those searches use only your postcode district (such as EN5), never your street, your name or your full postcode.
A delivery address is saved only when you tap “Save this address”. It would be used only if your agent filled in a checkout on a shop’s own website (that is off for food orders), never in a web search or in your memories. See, change or remove your area and address in Settings → Places; both are included when you download your data and deleted with your account.
Model processing
Models run with zero data retention and no prompt training. This does not mean your OpenMap account history is immediately deleted.
Private browser tasks
When your agent uses a private browser, each step and a picture of the page are kept so you can see what it did. Before every picture, every box you can type or choose in is covered, and a page OpenMap can’t check fully, or a payment page, isn’t pictured at all. What a step says the agent typed comes only from what it typed itself, with passwords, card and bank details, codes, passport, licence, NHS and National Insurance numbers and dates of birth shown as ••••.
Pictures are deleted after 30 days. The steps (the sentences, without pictures) stay with the chat that started the task: deleting that chat stops the task if it’s still running and deletes its steps and what its checks held. A task started outside a chat keeps its steps until the task, its workspace or your account is deleted. If you delete your account, your own decisions on a team member’s task stay in their record, without your name.
Memory, and bringing your memory
OpenMap can remember facts about you that help it help you, such as where you live or that you’re vegetarian. You choose how it learns, and you can see, edit, delete or switch off everything it remembers on your Memory page.
If you bring your memory from another assistant, the text you paste, or the lines about you that we pick out of an export file on your device, are sent to our AI model to find facts. Card numbers, passwords and codes are taken out on your device first. We don’t keep that text, and the export file itself never leaves your device. Only the facts you tick are saved, each labelled with where it came from, and you can delete one or undo a whole import at any time. Health, religion, politics and other sensitive facts are kept only if you tick them.
For You and Share to OpenMap
For You is off until you turn it on. Until then OpenMap reads nothing, not even a link you add: it only checks that the link looks like a web address. Once it’s on, OpenMap reads the public feeds of the links you choose (blogs, YouTube channels, Substack, Medium, podcasts) a few times a day, and keeps only each new post’s title, link, date and a short summary, for 30 days, to suggest things to do. Your Useful and Not for me answers are kept to shape the next ideas. It never reads Instagram, X, TikTok, Facebook, Threads, LinkedIn, Snapchat or Pinterest, never signs in anywhere and never posts. Pause it or turn it off in Settings, Your links. Turning it off deletes what was read and suggested, the feed details found, your answers and the Inbox notice; your links stay until you remove them.
When you share something to OpenMap from another app, or paste a link, we see only what you shared. It’s kept in a private cookie for half an hour so you can use it (your browser sends it to OpenMap with each page, as it does your sign-in), and nothing is saved until you send a message about it. For a YouTube or Vimeo link, OpenMap asks YouTube or Vimeo for its public title and channel name. No other site is asked: for Instagram, X, TikTok and the rest we use only what the share contained.
Bookings and forms your agent fills in
Your name, email and mobile number are used for two things, each asked separately: bookings you ask for, and quote or contact forms you ask for. A venue gets them for a booking only if you said “Use my details” (asked in the chat or in Talk before your first booking, and changed any time in Settings, Personal details). They go on a quote or contact form only if you said “Ask them, with my details”. That answer is remembered for later quote and contact tasks, and you can change it or take it back in Settings, Personal details. Your agent types them into the business’s form and stops before sending: you check it and send it. Your agent never ticks a venue’s marketing boxes. Your mobile number is private: nobody else on OpenMap sees it. OpenMap keeps each booking (venue, time, service, price and reference) to remind you and so you can find it, until 12 months after the appointment, then deletes it; the venue’s link for managing the booking is kept encrypted and is never put in an email. Deleting a booking, or your account, deletes it and its reminders. One-time codes and card details are never kept.
A copy of your data
Signed in, go to Settings, Account, Your data, and choose Download my data (up to 3 times a day, after confirming it’s you; we email you each time). You get a zip of JSON files with what your account holds: your profile, settings and sign-in details, chats, memory, places, reminders, tasks and what they produced, what you gave your agent to know, connected apps, collections, For You links, feedback, the groups you’re in and the messages you wrote there, your side of requests and jobs, requests to businesses, partner records, business pages you run, Moments, your Inbox and a record of what you did, with the files you added as files. Other people’s data isn’t included: in a group, only your own messages; in a job, your side. Card details (held by Stripe) and our sign-in provider’s log of each sign-in aren’t included either; a note in the zip says exactly what isn’t.
Deleting your account
Go to Settings, Account, Delete account. First you’ll see anything still open: jobs or agreements with someone, a live business page or listing, or a subscription. Those need to be finished, cancelled or closed first. Then you type DELETE and confirm it’s you.
Straight away, your account is signed out everywhere, anything you shared publicly is hidden, and your standing instructions, schedules, For You and reminder emails are paused. You then have 30 days to change your mind: sign in and choose Keep my account. We’ll email you now and 3 days before. After 30 days your data is erased and you can’t sign in again; removing the sign-in itself can take a few days more. Messages and files you posted in groups, and jobs, payments and reviews with other people, stay for them and for our records, with your name shown as “Deleted user”. A group you run passes to its longest-standing member.
When your agent contacts businesses and their agents
When you ask your agent to enquire, get quotes, book or order, it sends the business what that task needs: usually what you want, where and when, and, once you agree, your name and how to reach you. Some businesses answer through their own AI agent or receptionist, run by OpenMap or by another provider; your request goes to that agent for the business. Messages say they come from your OpenMap agent. Before your details go to a business for the first time, your agent asks you.
Once a business has your details, it uses them as its own controller, under its own privacy notice. When a business uses OpenMap’s receptionist, we handle its callers’ and customers’ details for that business, on its instructions.
Calls and Talk
When you make a call in the app, we connect it through our telecoms provider and keep a record of the number called, the times and the length of the call for 90 days, for billing, safety and support. In-app calls aren’t recorded. When you use Talk, your voice is sent to our AI provider to turn it into words and a spoken reply, as it happens.
Places from Google
When you ask about a place that isn’t on OpenMap, we may ask Google Maps Platform for its details. We send Google the place’s name and the area you gave, with our own key and not your identity. Google handles that request under its own Privacy Policy, as an independent controller. We show you what Google sends back for that visit and don’t keep it: we keep only Google’s place identifier and the name you used for the place. We count how many times a day each person asks Google, with a code that can’t be traced back to you after two days.
If you tap “Request bookings here” on a place that isn’t on OpenMap, we record that you asked, which place (by Google’s identifier) and when. It tells no one: we don’t contact the business, and nothing is sent to anyone until a verified owner of that business joins OpenMap. It counts towards a total shown only to a verified owner, never with your name, once your account is a week old and has done one real thing. After 12 months your request is anonymised: we remove the link to you and keep only the count. You can choose “Stop counting my requests” on the card at any time: we then remove the link to you from your requests, keeping only the count, and count no new ones (asking again stays paused for 90 days, so the limits can’t be reset). If you delete your account, the same happens. If we offer “Get told when you can claim”, it will be a record that you asked, which you can withdraw (we then remove the link to you and keep only the count), and nothing is sent in the meantime. Our legal basis is carrying out what you asked for, and our legitimate interest in showing owners real demand.
Shopping from Shopify shops
When you ask for a product, we may search Shopify’s catalogue for shops that deliver to the UK. We send Shopify the product words only, not your identity. A product’s picture is loaded by your browser straight from Shopify’s image service, which sees your IP address and browser details like any website would (we send no referrer and no cookie of ours). You buy from the shop on Shopify’s own checkout, which opens separately from OpenMap: we never see your payment details, and the shop and Shopify handle your order under their own privacy notices.
When you tap Pay with Shopify, we keep a record in your account so you can find it later: the shop, the items, quantities and prices as we showed them, Shopify’s checkout number, our reference, and when the checkout opened and when you came back. We never keep payment details, your address or anything you type on Shopify’s checkout. If you tap Check with Shopify, we ask Shopify only whether that checkout became an order. The record is in your data download. After 13 months, or when you delete your account, it is anonymised: we keep only the shop, the day and the number of items. Our legal basis is carrying out what you asked for.
Records of what you agreed
When you agree to our terms, or confirm you’ve read this notice, we record which document and version, when, and where in OpenMap (for example at sign-up). We keep these records while you have an account, so we can show what was agreed; they are deleted with your account, and they are in your data download.
Connected apps (Google and Microsoft)
You can connect a Google or Microsoft account so your agent can do things for you. Each app is its own connection, asks for the least it needs, and does nothing until you connect it. This is what each one can do, in plain words:
- Google Calendar: create or edit the events you ask for, and check when you’re busy or free. We read busy and free times only, not the titles or details of your other events.
- Gmail: send emails you approve, only after you tap Send. We read your mail only when you ask us to find something, and never in the background. Reading Gmail isn’t available to everyone yet.
- Google Drive and Google Photos: only the files or photos you pick in Google’s own picker. We can’t see anything else in your Drive or your photo library.
- Outlook mail, Outlook Calendar and OneDrive: the equivalents from Microsoft: send emails you approve and read mail when you ask, create or edit the events you ask for and check when you’re free, and open only the files you pick.
We use this data only to do what you asked, in the chat where you asked. We keep only what the task needs: we don’t keep a copy of your mailbox, calendar or Drive, only a short record that an email was sent or an event added, and what you pick or ask us to read stays with the chat it was for (delete the chat and it goes). The sign-in tokens that let us act for you are encrypted.
You stay in control. Disconnect any app in You → Connected apps: we delete its token and, where the provider lets us, revoke our access straight away. You can also remove OpenMap from your Google or Microsoft account’s own permissions page at any time.
We do not use Google or Microsoft user data to train AI models, we do not sell it, and we do not use it for advertising. Our people don’t read it, except with your permission, where it’s needed for security or abuse, or where the law requires.
OpenMap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The early list
When you join the early list for a feature that hasn’t launched yet, we keep which feature it is and the email address you give, so we can email you once when it launches. If you are signed in, we keep a link to your account instead of the address. We send nothing else to it. Every launch email has a link that takes you off the list in one tap; when you leave, we delete the address and keep only a one-way code of it, so a later request to join again is recognised. Deleting your account removes these entries too.
The waitlist
When you join the waitlist we keep your email address, the first part of your postcode, your first name and whether you’re joining as a person or a business if you give them, whether you ticked product updates, and the page you joined from. We use them to email you when your invite is ready, and for product updates only if you ticked that box. We delete them 12 months after launch, or sooner if you ask at support@openmap.ai. When you join we send one confirmation email, and keep whether it was sent (or failed, with a short code), when, and whether you have unsubscribed from product updates. To stop repeat sign-ups we also keep a one-way code of your network address and of your email for about a day; neither is kept with your entry.
Who we are and your rights
OpenMap.AI LTD (company number 17493031, Clubhouse Holborn, 20 St Andrew Street, London, EC4A 3AG, United Kingdom) is the controller of your personal data. Contact us about your data at support@openmap.ai. OpenMap.AI LTD is registered with the Information Commissioner’s Office (registration number ZC277902).
We use your data to provide OpenMap at your request (our contract with you), with your consent where we ask for it (you can withdraw it at any time), for our legitimate interests in running, securing and improving OpenMap and preventing fraud, and where the law requires. We use trusted providers, such as hosting, AI model, email, telecoms and payment providers, who handle data on our behalf. Where data goes outside the UK, we use the safeguards UK law requires.
You can ask for a copy of your data, and to correct, delete, restrict or object to its use, or to move it. Most of this you can do yourself in Settings. If you’re unhappy with how we use your data, please tell us, and you can complain to the Information Commissioner’s Office (ico.org.uk).
Where this notice doesn’t give a period, we keep data only as long as the purpose needs, or longer where the law requires it (for example, payment records for tax). The full retention schedule is being finalised and will be added here.