Legal
Last updated: June 10, 2026
This Privacy Policy explains how OpenEng (“OpenEng”, “we”, “us”, or “our”) handles personal information across our products and services (collectively, the “Services”):
openeng command-line tool); andBy using the Services you agree to this Policy. If you do not agree, please do not use the Services.
Signing in is handled by Google Sign-In through Firebase Authentication (a Google service). When you choose to sign in, we receive from your Google account: your name, email address, profile picture, and a unique account identifier. We do not receive your Google password. We use this to create and secure your OpenEng account and to identify you across the Services.
If you are signed in to the desktop app, a limited set of preferences — such as your theme and accent settings, your plan status, and a device-session record — may be stored in Google Firestore so they can sync across your devices. This is tied to your account identifier and contains no content from your terminals, agents, or files.
This website uses Google Analytics for Firebase to understand usage — for example, which pages are viewed, the approximate region derived from your IP address, and your device and browser type. This is collected via cookies and similar identifiers and is used in aggregate to improve the site. It is separate from the desktop app and CLI, which contain no analytics.
If you subscribe to OpenEng Pro, payment is processed by Razorpay. We do not receive or store your card or bank details — Razorpay handles them under its own privacy policy. We receive and store your subscription status (plan, trial state, subscription identifier, and billing events) so we can unlock Pro features across your devices.
If you email us (for example, support or a security report), we receive your email address and the contents of your message.
OpenEng is designed to be local-first. The following live in your operating system’s application-data directory on your own machine and are never transmitted to or collected by us:
The desktop app and the engine ship no analytics SDKs, no crash beacons, and no telemetry. The engine stores its sign-in session only on your machine (under ~/.openeng/) and, once signed in, operates fully offline.
Where required by law (e.g., in the EEA/UK), we rely on the following legal bases: performance of a contract (to provide the Services you request), your consent (e.g., for analytics cookies, withdrawable at any time), and our legitimate interests (to secure and improve the Services).
We do not sell your personal information. We share it only as follows:
Some features connect to services you configure. When you use them, your data goes directly from your machine to that provider under their privacy terms — not through us:
We use industry-standard safeguards: encryption in transit (TLS), an encrypted vault with a hardware/OS-backed master key for secrets stored on your device, a restrictive Content Security Policy in the desktop app, least-privilege access controls, and input validation at every trust boundary. No method of storage or transmission is 100% secure, but we work to protect your information and to keep as much of it as possible on your own device.
We retain account information for as long as your account is active or as needed to provide the Services. You can delete your account and associated data at any time by contacting us (see below); we will delete or anonymize it within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes. On-device data is removed when you delete it or uninstall the app; signing out of the engine removes its local session.
Depending on where you live (including under the GDPR and the CCPA/CPRA), you may have the right to:
Because we sell no personal information and run no targeted advertising, there is no “sale” or “sharing” to opt out of under the CCPA. To exercise any right, email hello@openeng.ai. We will not discriminate against you for exercising your rights, and you may lodge a complaint with your local data-protection authority.
Our service providers (notably Google) operate globally, so your account and analytics information may be processed in countries other than your own, including the United States. Where required, such transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
This website uses cookies and similar technologies for analytics as described in section 2.3. You can control cookies through your browser settings. The desktop app and CLI do not use advertising or tracking cookies.
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.
For any privacy question, request, or security report, email hello@openeng.ai. We respond to security disclosures within 72 hours. See also our Terms of Service.