Privacy Policy

OpenOpen ("OpenOpen", "we", "us") provides booking, payment and trust tools for small service businesses and their customers. This policy explains what information we collect, how we use it and the choices you have. It applies to startopenopen.com, isopenopen.com, oopo.day and the OpenOpen app.

Information we collect

• Account information: your mobile phone number, name, preferred language and, for businesses, business name, trade, service area, hours and services.
• Booking information: requests, appointments, notes, job addresses and photos you add to a request.
• Payment information: payments are processed by Stripe. We receive payment status and limited details (such as the last four digits of a card), not full card or bank numbers.
• Identity verification: if a business verifies its identity, Stripe Identity handles the ID and selfie. We receive only the result.
• Messages: chat messages and the texts we send about bookings.
• Device and usage information: IP address, browser type, pages viewed and security signals used to prevent fraud and abuse.

How we use information

• To create and secure your account, including sign-in codes sent by text.
• To run bookings, reminders, receipts, reviews and payments.
• To show business pages and verification badges.
• To prevent fraud, spam and abuse, and to enforce our Terms.
• To provide support and improve OpenOpen.
• To meet legal obligations.

Text messages

We text your mobile number for sign-in codes and booking messages such as confirmations, reminders and receipts. Message frequency varies. Message and data rates may apply. Reply STOP to opt out of booking texts, or HELP for help. Sign-in codes can't be turned off while you use phone sign-in. We do not sell or share mobile numbers or text opt-in information with third parties or affiliates for their marketing or promotional purposes.

How we share information

We do not sell your personal information. We share it only:

• Between a business and its customer, as needed for a booking (for example, a customer's name and job address with the business they booked).
• With service providers that run OpenOpen for us: Supabase (database and sign-in), Vercel (hosting), Stripe (payments and identity checks), Twilio (texts), Resend (email) and Cloudflare (bot protection).
• When required by law, or to protect the safety and rights of people and OpenOpen.
• As part of a merger or sale of the business, with notice to you.

How long we keep information

• Request photos are deleted 3 days after a request is declined or expires.
• Account and booking records are kept while your account is open, then deleted or anonymized unless the law requires us to keep them.
• Payment records are kept as long as tax and accounting rules require.

Your California privacy rights

California residents can ask to know, access, correct or delete their personal information, and can opt out of the sale or sharing of personal information (we do neither). We will not treat you differently for using these rights. To make a request, email legal@startopenopen.com from your account or contact us as below. We will verify your request using your phone number.

Security

We use encryption in transit, access controls on every database table, phone verification and fraud checks. No system is perfectly secure; please keep your phone and account safe.

Children

OpenOpen is for people 18 and older. We do not knowingly collect information from children.

Changes

We will post updates on this page and change the date above. For important changes, we will tell you in the app or by text.

Contact

OpenOpen · California · legal@startopenopen.com