Legal

Privacy Policy

Effective 28 August 2026.

Plain summary. We collect only what we need to run this website and the OpenVoy CRM service. We do not sell personal data. You have the rights set out in the GDPR and we honour them. Questions: hello@openvoy.com.

1. Who we are

"OpenVoy", "we", "us" refers to OpenVoy at Bergmannstrasse 57, 10961 Berlin, Germany. We are the controller of personal data submitted via this website and the processor of personal data your team enters into the OpenVoy CRM product.

2. What we collect and why

This website

  • Demo bookings. The booking calendar on our demo page is provided by Calendly. When you book, Calendly receives the details you give it — your name, email address, the time you chose and anything you write in the notes — and passes them to us so we can hold the meeting. We use them only for that and to follow up afterwards.
  • Server logs. Standard hosting logs (IP address, user agent, requested URL, timestamp) are kept short-term for security and abuse prevention.
  • Analytics and advertising measurement, only if you agree. If you accept when we ask, we use Google Analytics and Google Ads — both loaded through Google Tag Manager — to see which pages are read, which are ignored, and which adverts brought someone here. They set cookies and they are not anonymous, which is exactly why we ask first. Decline and none of it loads; nothing about the site changes. You can change your mind at any time in section 8.

The OpenVoy CRM service

If you are a customer or end-user of the OpenVoy CRM, the data your team enters about contacts, opportunities, trips, and similar records is processed by us on your behalf. Your contract with us — and any Data Processing Agreement signed with it — governs that processing. You remain the controller of that data; we are the processor.

3. Legal bases (GDPR Art. 6)

  • Contract. To provide the service you signed up for, including responding to demo and contact requests.
  • Legitimate interest. To keep the service secure, prevent abuse, and improve it based on aggregated usage.
  • Consent. Analytics cookies, which never load until you accept them, and any future marketing communications. You can withdraw consent at any time and it is as easy to withdraw as it was to give.
  • Legal obligation. Tax, accounting, and other statutory record-keeping.

4. Sharing your data

We share personal data only with service providers that help us run the website and the product. These providers process data on our instructions under written agreements. We do not sell personal data and we do not share it for third-party advertising.

For this website they are:

  • Cloudflare — hosting and content delivery.
  • Calendly — the demo booking calendar.
  • Google — Analytics, Ads and Tag Manager, and only once you have accepted.

5. International transfers

Calendly and Google are based in the United States, so using the booking calendar — or accepting analytics — involves a transfer outside the European Economic Area. Where data is transferred outside the EEA we rely on transfer mechanisms recognised under the GDPR, such as the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. Customers can request the current list of subprocessors and the safeguards we apply by emailing us.

6. Retention

Form submissions are retained while we follow up with you and for a reasonable period afterwards in case you re-engage. Customer account data is retained for the duration of the contract; after termination we provide an export and then delete or anonymise the data, except where statutory retention obligations (for example tax records) require us to keep specific items longer.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You can exercise any of these by emailing hello@openvoy.com. We respond as soon as possible and within the statutory time limits. You also have the right to lodge a complaint with a supervisory authority.

8. Cookies and your choice

Nothing that tracks you is set until you say yes. When you first arrive we ask one question — it names Google Analytics and Google Ads, because those are what it turns on — and until you answer it, both are switched off.

  • If you decline — no analytics cookies are set at all. We record your answer in your browser's local storage, under ov-consent, so we do not ask again on every page. That is stored on your device and never sent to us.
  • If you accept — Google Analytics sets _ga and _ga_<id>, which distinguish one browser from another so we can count visitors rather than page loads. They expire after two years, or sooner if you clear them. Accepting also lets Google Ads measure whether an advert led to a booking, and lets Google Analytics report aggregate demographics. We do not use any of it to build a profile of you as an individual, and we never sell it.

Changed your mind either way? — this clears your stored answer, switches analytics back off and brings the question back.

The OpenVoy CRM product is separate, and uses only the cookies strictly necessary to keep you logged in and to remember your preferences inside the application.

9. Security

We use industry-standard technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logs, and regular review of our security practices. No system is perfectly secure; if you discover a vulnerability please email hello@openvoy.com.

10. Children

The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy. The "Effective" date above shows when it was last changed. Material changes will be communicated to active customers.

12. Contact

For any privacy question: hello@openvoy.com.