Privacy Policy
Effective [DATE OF LAUNCH] · Draft prepared 2026-10-25 for legal review
Opensign is a fully integrated business operating system: website, online store and booking, payments, listings, customer messages and the back office on one login. Opensign is a product of Carmotive LLC, a Michigan limited liability company, 4675 E Grand River Ave, Howell, MI 48843 ("Opensign", "we", "us"). This policy explains what personal information we handle, why, and the choices you have.
Two different roles
When you visit this website or talk to us about Opensign, we decide what happens to your information: we are the controller.
When a business uses Opensign (our customer, the "Business"), the Business decides what happens to the information about its own customers, staff and contacts that it keeps in Opensign. For that information we are a processor: we hold and process it only to run the service for the Business, under our Data Processing Addendum. If you are a customer of a business that uses Opensign, contact that business about your data; we will help them answer you.
Information we collect about website visitors and prospects
- What you send us: name, work email, phone, business name, city and state, what you sell and any message, when you start a demo, book a call, request access or leave a review.
- Demo activity: if you use your own demo login, which screens you open and how long, and how far you get in the guided tour, so we can follow up usefully.
- Booking details: the time you pick and your time zone, used to create the calendar event and send reminders.
- Technical and marketing data: IP address, browser, the page you came from, and the ad or link tags in the address (for example utm parameters, gclid, fbclid). We set a first-party visitor id in your browser's local storage to connect visits to a later request.
- Advertising tags: this site uses the Meta Pixel and the Google Ads tag to measure which ads lead to demo requests. When you send a form we may also send the same event to Meta and Google from our server, with your email and phone hashed so they can match it to an ad click. [CONFIRM consent banner requirement per market before launch.]
Information we process for Businesses
Depending on what a Business turns on: its customers' contact details, orders, bookings, invoices and payment records (card and bank numbers are held by the payment processor, not by Opensign), messages and call records, vehicle and unit records (VIN, stock number), service and work orders, reviews, and staff accounts. Each Business's data is kept separate from every other Business's data.
How we use information
- To give you a demo, book and run a call, and answer your questions.
- To follow up about Opensign by email (you can unsubscribe from any follow-up email with one click).
- To run, secure, support and improve the service for Businesses.
- To measure and improve our advertising.
- To meet legal, tax and accounting obligations and to prevent fraud and abuse (for example, screening automated or abusive form submissions).
We do not sell personal information, and we do not use a Business's customer data to market Opensign.
AI features
Some features draft replies, estimates or listings with an AI model. Drafts are reviewed before anything is sent unless a Business turns on automatic sending. Content sent to the model provider is used only to produce the draft and is not used to train its models under our agreement. [CONFIRM current provider terms.]
Who we share information with
Only the service providers that run Opensign, under contracts that limit their use of the data (our sub-processors, listed in the DPA): hosting and storage, email delivery, text messaging and calls, payments, maps and business lookup, calendar, sign-in, AI drafting, advertising measurement and backups. We may also disclose information when the law requires it, or as part of a sale or merger of the business, under this policy's protections.
How long we keep it
- Demo requests and booking records: up to 24 months after the last contact, then deleted or anonymised. [CONFIRM]
- Business data: for as long as the Business uses Opensign, then returned or deleted as set out in the DPA.
- Records we must keep by law (for example billing and tax records): for the period the law requires.
Security
Opensign runs on Cloudflare's network with encryption in transit, per-Business separation of data, role-based staff access, sign-in with Google and a second factor (authenticator app) for administrators, and audit logs of changes. No system is perfectly secure; if a breach affects your information we will notify you and the relevant authorities as the law requires.
Your choices and rights
- Unsubscribe from follow-up emails with the link in any of them.
- Ask us for a copy of your information, to correct it, or to delete it, by emailing [email protected].
- Residents of states with privacy laws (for example California) have the rights those laws give, including to know, correct, delete and opt out of the "sharing" of personal information for cross-context advertising. We honour the Global Privacy Control signal as an opt-out. [CONFIRM state list and GPC handling with counsel.]
- We will not discriminate against you for using these rights.
Children
Opensign is a business service and is not directed at children under 16. We do not knowingly collect their information.
Changes
We will post any change here with a new effective date, and tell Businesses by email before a material change takes effect.
Contact
Carmotive LLC (Opensign), 4675 E Grand River Ave, Howell, MI 48843 · [email protected]