Personal data

Updated: 15 October 2026. Entreprise-facile SAS / incwo, 16 rue de la Comète, 75007 Paris, is the data controller.

Account and projects

We keep your name, your email, your means of connection, your sessions and the projects that you enter: assumptions, texts, sources, versions and comments. This data allows the requested service to be performed. The technical connection information is used to secure access.

A project is private. You can give access to people identified by their email; they must connect with this address and accept the invitation. You can revoke this access. A reading guest can comment; an editor can modify the project according to the subscription rights.

Service providers

OVH hosts the database, its replica and its backups in France. Resend transmits connection emails. Stripe processes payments, subscriptions and invoices; open-bp does not store card numbers. Google and incwo only intervene if you choose their connection method.

Optional AI assistance

When you send a message in the writing assistant, your message, recent conversation, document, assumptions, sources and calculated results are sent to the OpenAI API. You then choose whether to insert the proposed text into your draft.

When you send a chat message, your message, the recent conversation and project data are sent to the OpenAI API. Responses are kept in the project. Changes that have been understood and checked are applied to the draft and recalculate the chart; you can undo the last change. Save keeps these changes in a new version of the project.

The calls ask not to store the response at OpenAI (store: false). This does not exclude its abuse control logs, which are normally kept for up to 30 days. The location in France of our servers does not extend to this processing. Check out the OpenAI API data rules. Do not send sensitive personal data on business plan.

Retention and deletion

Projects and their versions remain available as long as your account exists, including after termination. Expired sessions and login links are purged at least once per day. Processed billing event references are kept for 90 days.

In My Account you can upload your data and request account deletion. It is scheduled in seven days, can be canceled before its execution. Cancel the subscription first. Executing deletes your account, your projects, their versions, your comments and your shared access. Invoices and accounting documents subject to retention remain with Stripe and incwo according to their legal obligations.

Backups maintain four weekly full backups and seven daily differential backups. Deleted objects are retained for another 35 days in versioned storage; protection prevents deletion for their first 30 days. Old copies may therefore remain several weeks after account deletion. A marker without email or project content prevents reactivating a deleted account during a restore.

Your rights

To access your data, rectify it, request its erasure, limitation or exercise another applicable right, use the incwo privacy form or write to headquarters. Specify your open-bp account. You can also enter the CNIL.

Cookies

open-bp uses cookies required for sign-in, security and your language preference. Stripe payment pages and sign-in providers apply their own policies.

Journey analytics

Product analytics runs automatically, independently of aggregate audience measurement and Meta advertising. We record normalized pages, actions and their outcomes, language, device category and source category. Random identifiers link visits; after sign-in, a pseudonymized account identifier links usage. Workspaces are also pseudonymized.

PostHog receives these events on its European infrastructure. No email, name, forecast amount, message, document, link parameter or private business plan identifier is sent. Verified payment amounts may be sent in cents excluding VAT. No session recording or automatic capture of page contents is enabled.

A cookie identifies the browser for up to six months, without extending its lifetime on each visit. The analytics session expires after thirty minutes without a navigation event. Previously recorded refusals in this browser remain respected. You can request that tracking stop or that events be erased, including those sent to PostHog, through our privacy form.

Detailed events and payment measurement references are retained in our database for up to 90 days. Events sent to PostHog are retained for one year on its European infrastructure. Business totals from accounts, projects and payments remain separate from measured journeys; only events linked to an active analytics identifier are sent to PostHog.

Advertising cookies and registration measurement

Independent traffic measurement

To understand open-bp traffic, we count public page views and website entries independently of your choice regarding Meta. This measurement sets no cookies, reads no browser identifiers and uses no local storage. It cannot recognise a visitor or track their browsing on other websites.

Only counters by day, public page and source category are retained for 90 days in our database hosted in France. Template pages are grouped together. Link parameters, advertising identifiers, IP addresses, browser fingerprints and account data are not recorded in these counters. No data from this measurement is shared with Meta or used to target advertising.

Meta pixel subject to your consent

When advertising tracking is enabled, the Meta pixel remains disabled until you agree. It measures public page visits and newly confirmed accounts, and helps Meta target open-bp ads. Refusing does not limit use of the service. Your choice is retained for six months in this browser. To change it, use the buttons in this section.

Meta receives visit or registration events, browser and advertising click identifiers, the IP address and technical browser information. Our events do not include your email, name, or any assumptions, messages or documents from your projects. Sign-in links, tokens and private project URLs are not transmitted in these events.

After you consent, the _fbp and _fbc cookies are used for advertising measurement; Meta manages their lifetime, generally up to three months. A signed registration marker, valid for thirty minutes, links confirmation to the newly created account. Signing in again does not create this marker. Withdrawing consent stops the pixel from loading and deletes advertising cookies accessible to open-bp.

Meta describes its data processing in its privacy policy.