Privacy Policy

Privacy Policy

Effective as of November 4, 2026

Last updated November 4, 2026

OpenCommo ("OpenCommo," "we," "us" or "our") provides Basil, an AI sourcing agent that runs raw-material sourcing jobs for importers, distributors and ingredient manufacturers: sourcing new materials, buying orders, adding suppliers and benchmarking prices. This Privacy Policy describes how we process personal information collected through our website at opencommo.com, by email, and through the other channels you use to send us sourcing jobs (collectively, the "Service").

Personal information we collect

Information you provide. When you send Basil a job or contact us, we collect your name, email address, company, and the contents of your message, including the sourcing requirements you share.

Payment information. Jobs are invoiced per job. We receive billing contact details; we never store full payment card numbers.

Sourcing jobs. To run a job, we share the requirement, such as product, specification, volume, and delivery terms, with the suppliers we contact on your behalf, limited to what is needed to request offers.

Usage data. We collect log data about visits to our website: IP address, timestamps, and pages viewed. This is used for security and abuse prevention.

Cookies. Our website sets no authentication cookies, and our website statistics use no cookies and no local storage. See our Cookie Notice for details.

How we use personal information

We use personal information to:

• provide, operate, and secure the Service;
• run the sourcing jobs you send us and contact suppliers on your behalf;
• invoice jobs;
• respond to support requests;
• comply with law and enforce our Terms of Use.

We do not sell personal information, and we do not use the data from your sourcing jobs to train generalized AI/ML models.

Legal bases (EEA/UK)

Where the GDPR applies, we process personal information on the following bases: performance of a contract (providing the Service), legitimate interests (security, abuse prevention, service improvement), and consent where required (e.g., optional analytics cookies).

Sharing

We share personal information only with:

• Suppliers we contact on your behalf, limited to the job requirement needed to request offers;
• Service providers bound by contract to process data on our behalf (hosting, email delivery, invoicing, analytics);
• Professional advisers and counterparties in connection with a merger, acquisition, or sale of assets, under confidentiality protections;
• Authorities where required by applicable law.

International transfers

We are established in France. Where personal information is transferred out of the EEA or UK, we rely on an adequacy decision or Standard Contractual Clauses.

Retention

We retain sourcing job records and correspondence for as long as needed to run the job and our business relationship, and website logs for up to 12 months, after which data is deleted or anonymized, unless a longer period is required by law.

Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. EEA/UK users may lodge a complaint with their supervisory authority. To exercise any right, contact hello@opencommo.com. We verify requests before responding and respond within the time required by law.

Security

We use encryption in transit (TLS) and at rest, access controls, and audit logging designed to protect personal information. No method of transmission or storage is completely secure.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes

We will post any changes to this Privacy Policy on this page and update the effective date above. If changes are material, we will provide more prominent notice (e.g., email to the address you use with us).

Contact

OpenCommo, hello@opencommo.com.