Most privacy policies are written to be unreadable. This one is written to be read, because if you cannot tell what happens to your data from reading it, it has not done its job.
This policy covers opendimension.ai and nothing else. It does not cover the sites we link out to, and it does not cover systems we build for clients inside their own environments, which are governed by the contract and the data processing agreement for that engagement.
If we change anything material here, the date above changes with it.
Open Dimension AI decides what is collected on this site and why, which makes us the controller of it. We are a small team working from Dhaka, Bangladesh, serving clients in the United States, United Kingdom, Europe and Australia. The fastest way to reach a person about anything on this page is to email hello@opendimension.ai, and a human will answer. There is no privacy department to route you through.
Four things, and the first three happen whether or not you interact with anything.
Our host receives your IP address, the page you asked for, your browser and operating system, and the time of the request. This is how any website works and it cannot be switched off without switching off the site. These records are short lived and we do not use them to build a picture of you.
We record which pages are viewed, which links and buttons are clicked, how far down a page you scroll, and which campaign or search brought you here. This is tied to a random identifier stored in your browser, not to your name. We use it to work out which pages are worth writing and which are wasting everyone's time.
We record a replay of how pages are used: mouse movement, clicks and scrolling, reconstructed as a video. Text you type into any form field is masked before it leaves your browser and is never recorded, and the chat messenger is blocked from recording entirely. Recordings are kept for thirty days and then deleted automatically. We say this plainly because most sites that do it do not.
If you start a chat, send an email, or book a call, we receive whatever you put into it. A booking gives us your name, email address and whatever you write in the booking form. That information exists because you sent it to us, and we use it to reply to you.
We use other companies to run parts of this site. Each one is named here, with what it actually receives. We do not sell personal data, and we do not share it with anyone outside this list.
| Service | What it does for us | What it receives |
|---|---|---|
| Vercel | Hosts and serves the site | Your IP address and request details, briefly, as server logs |
| Google Tag Manager | Loads the tags below without a code change | Page URL and browser details. It sets no cookies of its own |
| Mixpanel | Product analytics and session recordings | A random device identifier, pages viewed, clicks, scroll depth, campaign source, and the session recordings described above |
| Intercom | The chat messenger in the corner of the page | Whatever you type into a chat, plus your name and email address if you give them |
| Calendly | Booking a call | Your name, email address, chosen time and anything you write in the booking form. Calendly collects this on its own site under its own policy |
Under UK and EU data protection law we need a lawful basis for each thing we do. For replying to you when you make contact, it is that you asked us to. For understanding how the site is used, it is our legitimate interest in knowing whether what we publish is any use, balanced against the fact that the data is pseudonymous and is not used to make decisions about you.
The honest answer differs per item, so here it is per item rather than as a single reassuring sentence.
If you are in the UK or the EU these are rights you hold in law. If you are somewhere else, you can still ask, and we will do the same thing, because having two standards of behaviour depending on where someone lives is not a position we want to defend.
We work from Bangladesh, and the services listed above are operated by companies based mainly in the United States. That means personal data collected here is accessed from, and stored in, countries outside the UK and the European Economic Area. The providers we use offer standard contractual clauses for those transfers and we rely on them. We are telling you this rather than burying it, because it is the part of a privacy policy people most often want and least often find.
No. We have never sold personal data and there is no arrangement under which we would. The list of companies that receive anything is the table above, and each one is there because it runs a part of this site.