Privacy Policy

OpenExpert is a local-first operations dashboard for a single owner. It runs entirely on your machine and your data stays there by default. This policy explains what data OpenExpert accesses, stores and, when you explicitly opt in to a cloud service, transmits.

1. Data we do not collect

• No telemetry, analytics, cookies or tracking pixels.
• No servers operated by OpenExpert. There is no hosted edition.
• No user accounts. There is no login.

2. What lives on your machine

Everything lives under ~/.openexpert/ and never reaches OpenExpert or a third party unless you configure a cloud integration explicitly.

• openexpert.db (SQLite) — your workspace, Experts, integrations, invoices, campaigns, chat history and activity log.
• openexpert.json — your non-secret preferences (model, sampling, chat limits, Google OAuth client id).
• secrets.json (mode 0600) — API keys. Stored encrypted at rest and never sent by OpenExpert.
• credentials.json (mode 0600) — Google Drive OAuth tokens, encrypted at rest and used only to call Google APIs with your consent.
• drive-grants.json — the list of Drive files you chose to share, encrypted at rest. Remove them any time from Integrations → Sources.
• local-roots.json — the local folders you granted OpenExpert access to, encrypted at rest. Remove them any time from Integrations → Sources.
• notion.json — the Notion OAuth token, encrypted at rest and used only to call the Notion API with your consent.
• state-secret and secret.key (mode 0600) — local keys used to sign the OAuth state and to encrypt the files above.

3. The AI model

You choose the model provider.

• Default and recommended: Ollama. Runs locally. Your prompts and the content of files you choose from Google Drive, local folders and Notion never leave your machine.
• Optional: Google Gemini or any OpenAI-compatible endpoint. You provide your own key. In that case, the text of the conversation and the content of the files you chose from Google Drive, local folders and Notion are sent to that provider so it can respond. OpenExpert is not party to those exchanges.

OpenExpert does not use any of this data to train, fine-tune or improve a model. Third-party providers have their own terms.

4. Google Drive (optional)

OpenExpert connects to Google Drive only if you choose to.

• What it asks for. The minimum scope https://www.googleapis.com/auth/drive.file. This is non-sensitive: it grants access only to the files you select with the Google Picker and to the files OpenExpert creates on your behalf. It cannot read or list the rest of your Drive.
• What it does. Search, summarise, create and edit the files you picked.
• What it does not do. It does not read, index or transmit the rest of your Drive, and does not use Drive as storage for OpenExpert's own data.
• Human approval. Every write is proposed by the assistant and shown as a confirmation card. Nothing changes until you approve it.
• How to disconnect. Integrations → Sources → Disconnect. The refresh token is also revoked on Google's side.

Limited Use acknowledgement

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

• Data is used only to provide the user-facing features visible in OpenExpert (the chat, the source list, the audit log).
• No transfer to advertising platforms, no resale, and no use to determine creditworthiness or for lending.
• No use to create, train or improve a machine learning or artificial intelligence model beyond that specific user's personalised model.
• Humans do not read your files unless you ask for support and grant explicit additional consent for the specific file.

5. Backups

Backups bundle the database, openexpert.json, secrets.json and credentials.json into one file on your machine. They never leave it. Cross-origin downloads are rejected by the server.

6. Activity log and revert

OpenExpert records a local activity log of every change and exposes a Revert action that restores them. You can wipe the chat history and reset the workspace from Settings → Data.

7. Children

OpenExpert is a general-audience business tool. It is not directed at children under the age of 13.

8. Security incidents

If you suspect a security incident involving Google user data, report the data to security@google.com and to the OpenExpert maintainers via the channel listed in SECURITY.md.

9. Changes to this policy

Material changes will be described in the repository changelog. The canonical version is PRIVACY.md.

10. License

OpenExpert is distributed under the MIT License. This policy is informational.