Privacy Policy

Effective date: February 6, 2023  ·  Last updated: May 4, 2026

OpenGraph.io ("we", "us", or "our") operates opengraph.io and the associated API platform (collectively, the "Service"). This Privacy Policy explains what information we collect when you use our Service, how we use it, who we share it with, and what rights you have over your data. By accessing or using the Service you agree to the terms described here. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Account & Profile Information

When you register for an account we collect your name, email address, and — when you subscribe to a paid plan — billing information (processed by our payment provider; we do not store full card numbers). You may optionally provide a company name or website URL.

Usage & Log Data

Our servers automatically record information when you interact with the Service, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages viewed, timestamps, and referring URLs
• API endpoints called, request parameters, and response codes
• Error logs and performance metrics

This data is used for operating, securing, and improving the Service. It does not, by itself, identify you as a specific individual.

Information You Provide Directly

When you contact support, submit feedback, or correspond with us by email you may provide additional personal information. We keep records of that correspondence.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — authenticate your account, process API requests, enforce rate limits, and deliver results.
• Billing and subscriptions — process payments, send invoices, and enforce plan limits.
• Analytics and improvement — understand how the Service is used, identify errors, and improve performance and features.
• Customer support — respond to your inquiries and resolve issues.
• Security and fraud prevention — detect and prevent abuse, unauthorized access, and other harmful activity.
• Legal obligations — comply with applicable laws, regulations, and court orders.
• Marketing communications — send product updates or promotional messages where permitted. You can opt out at any time.

3. Third-Party Service Providers

We work with third-party service providers to help operate and improve the Service. These providers only receive the data necessary to perform their specific function and are required to protect it in accordance with applicable privacy laws. The categories of providers we use include:

• Analytics providers — help us understand how visitors use the site in aggregate so we can improve performance and features. Analytics data collection is only enabled after you grant consent through the cookie banner.
• Infrastructure and hosting providers — store and process data needed to deliver the Service reliably and securely.
• Payment processors — handle billing and subscription payments. We do not store full card numbers; payment data is handled directly by PCI-compliant processors.
• Customer support platforms — enable our team to respond to your inquiries. When you contact us, your name, email, and conversation content may be stored by these providers.
• Spam and abuse prevention providers — help protect our forms and API from automated abuse by analysing request signals.
• Feature experimentation providers — allow us to test new features with a subset of users using anonymous session identifiers. No personally identifiable information is shared with these providers.

Each provider processes data under its own privacy policy. We review our providers periodically to ensure they maintain appropriate data protection standards.

4. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies. We categorise them as follows:

• Necessary — essential to operate the Service (e.g. session cookies, authentication tokens, consent preference storage). These cannot be disabled.
• Analytics — help us understand how visitors use the site. Only set after you grant analytics consent.
• Marketing — used to measure campaign effectiveness and show relevant advertisements. Only set after you grant marketing consent.

You can manage your preferences at any time through the cookie banner that appears on your first visit. You can also clear cookies through your browser settings; note that doing so may affect site functionality.

5. Sharing of Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

• Service providers — the categories of third parties described in Section 3 who process data on our behalf under data processing agreements.
• Legal requirements — when required by law, subpoena, or to protect the rights, property, or safety of OpenGraph.io, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
• With your consent — in any other case, only with your explicit consent.

6. Your Rights

Rights under GDPR (EU / EEA / UK users)

If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

Rights under CCPA (California users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, and how we use and share it.
• Right to delete — request deletion of personal information we have collected from you.
• Right to opt out of sale — we do not sell your personal information.
• Right to non-discrimination — we will not discriminate against you for exercising any CCPA rights.

How to Exercise Your Rights

To exercise any of the rights above, or to delete your account and associated data, you can:

• Go to your dashboard profile page and select the "Delete account" option; or
• Email us at support@opengraph.io with the subject line "Privacy Request". Please include your name and the email address associated with your account so we can verify your identity.

We will respond to all verifiable requests within 30 days. In complex cases we may extend this period by up to two additional months and will notify you of any such extension.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we will remove or anonymise your personal data within 30 days, except where we are required to retain it for longer to comply with legal obligations (e.g. tax or financial records) or to resolve disputes.

Server log data (IP addresses, API call records) is retained for up to 90 days before being purged or anonymised, except where extended retention is required for security investigations.

8. Security

We take the security of your personal information seriously and use commercially reasonable administrative, technical, and physical safeguards to protect it against unauthorised access, disclosure, alteration, and destruction. Sensitive data such as payment information is handled by PCI-compliant third-party processors and is never stored on our servers.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. If you believe your account has been compromised, please contact us immediately at support@opengraph.io.

9. Children's Privacy

The Service is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible. If you believe we may have collected information from a child under 13, please contact us at support@opengraph.io.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page with an updated "Last updated" date at the top. If we make material changes, we will notify you by email (to the address associated with your account) or by placing a prominent notice on our website prior to the change taking effect. We encourage you to review this page periodically.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us:

See also: Terms of Service · Acceptable Use Policy