Trust center

How we handle
your data.

Who runs openProd, how we process personal data and who to contact. Roles, the audit log and version history inside the app are on the Security page.

openProd at a glance

Company and privacy facts

Operated by
Lemonmind sp. z o.o.
Registered in
Gdańsk, Poland (EU)
Data protection law
GDPR
Requests about your data
Answered within 30 days
Workspace access
By invitation only

Company

One company, based in the EU.

openProd is built and run by Lemonmind sp. z o.o., a company registered in Poland. We apply European data protection standards to every user, wherever they are.

Company
Lemonmind sp. z o.o.
Address
ul. Azymutalna 9, 80-298 Gdańsk, Poland
NIP
9571141336
REGON
521268736

Privacy

Personal data, under the GDPR.

The Privacy Policy explains what we collect, why we collect it and how long we keep it.

What we collect and why

Contact and account details, usage data from the platform and technical data such as IP address and browser. Every purpose has a legal basis under Article 6 GDPR.

Your rights

Access, correction, erasure, restriction, portability and objection. Write to hello@openprod.io and we reply within 30 days. You can also complain to the Polish supervisory authority, UODO.

How long we keep it

Account data for the life of the account and up to 12 months after deletion. Usage and technical data for up to 26 months.

Records and a contact point

We keep records of processing activities under Article 30 GDPR and have an internal data protection point of contact.

Data processing

Vendors under agreement. Cookies only after consent.

Vendors with access to personal data work under data processing agreements, with Standard Contractual Clauses where data leaves the European Economic Area.

Vercel Web Analytics and Speed Insights No cookies
Counts visits and measures page speed for this website, without cookies. A visit is recognised by a hash that is discarded after a day.
Google Analytics via Google Tag Manager After consent
Anonymous statistics about how visitors use this website. Google may process data in the United States.
OpenAI Ads Measurement Pixel After consent
Measures page views and received demo and ROI report requests from ads. Your email is hashed in your browser first; your name, company and message are never sent.

Your openProd workspace runs in a private cloud: the hosting provider and region are agreed with you for each installation. Processors and hosting details for your setup: ask us at hello@openprod.io.

Access to your workspace

Your workspace, by invitation only.

How people sign in to openProd. What each person may change is set by roles, described on the Security page.

Invitation only

Nobody can sign up on their own. An administrator invites every user.

Long, hashed passwords

Passwords have at least 12 characters and are stored as salted scrypt hashes, never as plain text.

Limited attempts

Sign-in, password reset and password change are limited to five attempts a minute.

Reset links that expire

A password reset link works for 30 minutes, and a reset signs out every open session.

Questions about security or your data?

Write to hello@openprod.io. Use the same address to report a vulnerability.