Who we are
OC (also referred to as OpenChat) is a messaging and customer-support platform operated by Odixtec ("we", "us", or "our"). Our public service is available at oc.odixtec.net.
Information we collect
Depending on how you use OC, we may collect:
- Account data - name, email address, password (stored hashed), phone number, profile photo, and role within a business workspace.
- Authentication data - one-time verification codes sent by SMS, Google/Firebase sign-in tokens when you choose Google Sign-In, and OAuth authorizations you approve for third-party apps.
- Communications - messages, media files, reactions, replies, call metadata, and support-ticket content you send through OC or an embedded widget.
- Business / workspace data - company name, branding, widget settings, API keys, and integration configuration created by workspace owners.
- Technical data - IP address, device/browser type, approximate location derived from network data, cookies or session tokens, and diagnostic logs needed to operate the service.
How we use information
We use personal information to:
- Provide chat, calling, authentication, and support features
- Verify phone numbers via SMS one-time codes
- Secure accounts and prevent abuse or fraud
- Operate multi-tenant business workspaces and widgets
- Improve reliability, performance, and customer support
- Comply with legal obligations
We do not sell your personal information.
SMS and phone verification
When you request a phone verification code, we send an SMS through our SMS gateway provider (currently K2 Telecom). Your phone number and the message content needed to deliver the OTP are shared with that provider solely to send the verification message.
Google Sign-In
If you sign in with Google, we receive a verified identity token from Google/Firebase and use it to create or authenticate your OC account. Google's own privacy policy applies to data Google holds about your Google account.
OAuth and third-party apps
If you authorize a third-party application through OC OAuth, that app may receive the profile and email scopes you approve. You can revoke access by stopping use of that app or contacting us to revoke tokens. Third-party apps have their own privacy practices.
Business workspaces and widgets
When you chat with a business through OC (including embedded widgets), that business and its authorized agents can see the conversation and related customer details needed to provide support. Workspace owners control their agents, branding, and retention practices for their support channels.
Sharing
We share information only with:
- Service providers that help us run OC (hosting, SMS, auth, media)
- Businesses you choose to contact through OC
- Apps you explicitly authorize via OAuth
- Authorities when required by law or to protect safety and rights
Data retention
We keep account and message data while your account or the relevant business workspace remains active, and for a reasonable period afterward for backups, dispute resolution, security, and legal compliance. OTP codes are short-lived and expire automatically.
Security
We use industry-standard safeguards such as encrypted transport (HTTPS), hashed passwords, access controls, and restricted server credentials. No method of transmission or storage is 100% secure.
Your choices and rights
Depending on applicable law, you may request to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated personal data
- Export a copy of your data where technically feasible
- Withdraw consent for optional processing
To make a request, use the contact section below. We may need to verify your identity before fulfilling the request.
Children
OC is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
International processing
OC may process and store information on servers outside your country of residence. By using the service, you understand that your information may be transferred to jurisdictions with different data-protection laws.
Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of OC after an update means you accept the revised policy.
Contact
For privacy questions, data requests, or account deletion, contact Odixtec through the OC service at oc.odixtec.net or email privacy@odixtec.net.