1. Scope
This policy describes how OpenDistrict ("we", "us") handles personal data when you use our platform at opendistrict.org. It applies to account data and to Customer Data you ingest where that data contains personal information. It does not apply to third-party services you connect as sources, which have their own policies.
2. Data we collect
- Account data — name, email address, and a unique identifier, provided by our identity provider when you sign in (single sign-on). We do not receive or store your password.
- Customer Data — the events and payloads your tenant ingests, including any personal data those payloads contain. You control what is ingested.
- Operational telemetry — request logs, performance metrics, and traces used to operate, secure, and debug the Service. Log fields are limited to what operations require; we apply a documented PII/cardinality policy to telemetry.
3. How we use data
We use account data to authenticate you and administer your tenant. We use Customer Data only to provide the Service to your tenant: storage, indexing (including vector embeddings for search), query execution, and display to users of your tenant. We use operational telemetry to keep the Service reliable and secure. We do not sell personal data, and we do not use one tenant's data to train models for another tenant.
4. Legal bases (GDPR)
Where the GDPR applies, we process account data under contract performance (providing the Service you signed up for) and legitimate interests (security and operations), and we process Customer Data as a processor on behalf of your organization, which is the controller. A Data Processing Addendum is available on request ([email protected]).
5. Isolation and security
Tenant data is logically isolated at the database layer (row-level security enforced on every tenant-scoped query). Sessions use signed, expiring tokens stored in httpOnly cookies. The query surface is restricted to validated read-only SQL. Destructive operations (source clear, tenant erasure) are confirmation-gated and audit-logged. Traffic is encrypted in transit. Security reports: [email protected] (see also SECURITY.md).
6. Sharing and subprocessors
The platform stack is self-hosted; we do not share Customer Data with third parties except (a) subprocessors required to run the infrastructure (e.g. hosting and identity), under contractual protection, and (b) where required by law. We will not disclose Customer Data to authorities except under a valid legal obligation, and where lawful we will notify you.
7. Retention
Customer Data is retained while your tenant is active. You can delete a source's data at any time from the product UI, and request full tenant erasure (see Your rights). Backups are kept for disaster recovery and are overwritten as backup retention cycles roll forward; deleted data therefore disappears from backups within those cycles. Account data is removed within 30 days of account closure.
8. Your rights
Depending on your jurisdiction (GDPR, CCPA/CPRA, and similar), you may have the right to access, correct, export, restrict, object to processing of, and delete personal data, and to lodge a complaint with a supervisory authority. We support:
- Deletion — in-app source clear, plus full tenant erasure via the account data-deletion interface or by request.
- Export — query results can be exported at any time through the query interface.
- Requests — email [email protected]; we respond within 30 days.
We will not discriminate against you for exercising any privacy right.
9. International transfers
The Service is operated from infrastructure in the region(s) stated at launch. Where personal data crosses borders, we rely on appropriate safeguards (e.g. standard contractual clauses) as required.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We may update this policy; material changes are announced in-product at least 14 days before taking effect. The "Last updated" date above reflects the current version.
12. Contact
Privacy questions or requests: [email protected]. Security: [email protected].