OpenMerch Privacy Policy

Last Updated: May 2026

1. Overview

OpenMerch is operated by One Kernel, Inc., a Delaware corporation doing business as OpenMerch (“OpenMerch,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the OpenMerch website, app, APIs, developer tools, agent integrations, and related services (the “Service”).

2. Information We Collect

2.1 Account & Identity Information

We collect email address, authentication credentials, organization or agent identifiers, API keys or credentials generated for your account, and billing-related account metadata.

2.2 Usage & Technical Information

We collect job requests, job configuration, routing metadata, execution status, costs, timestamps, logs, IP addresses, device and browser metadata, and interactions with the Service.

2.3 Job Content

When you submit jobs or agent requests, we process the inputs, parameters, files, URLs, prompts, or other data you provide, as well as outputs returned by third-party providers. Do not submit data you are not authorized to process or share for the requested job.

3. Payment Information

Payments are processed by Stripe or other payment processors. OpenMerch does not store full card numbers or bank account details. We may store payment processor customer IDs, payment method references, billing status, receipt URLs, transaction amounts, processing-fee metadata, and related payment records needed to operate prepaid wallet funding, billing, refunds, reconciliation, fraud prevention, and accounting.

4. How We Use Information

We use information to provide and secure the Service, authenticate users and agents, execute and route jobs, maintain prepaid wallet balances and transaction records, process payments, generate receipts, monitor usage and costs, prevent abuse, debug errors, improve reliability, communicate with users, comply with legal obligations, and enforce our Terms of Service.

5. Job Data and Third-Party Providers

OpenMerch is an execution and routing platform. Jobs may be routed to third-party APIs, models, infrastructure providers, and data providers that perform the requested work. We share job inputs and related metadata with providers only as needed to execute, validate, route, meter, secure, or settle jobs. Provider processing is governed by the provider's own systems and obligations.

6. AI and Model Processing

Some jobs may involve AI models or automated systems. OpenMerch does not use customer job inputs or outputs to train OpenMerch-owned foundation models. Third-party providers may have their own processing terms. We use logs, metadata, and aggregated or de-identified information to operate, monitor, secure, and improve the Service.

7. How We Share Information

We may share information with:

  • service providers that help us operate the Service, including cloud hosting, database, analytics, security, email, payment processing, fraud prevention, logging, and customer support providers;
  • job providers selected to execute customer jobs;
  • professional advisors such as attorneys and accountants;
  • authorities when required by law, regulation, or legal process;
  • parties involved in fraud or abuse investigations; or
  • acquirers or successors in connection with a merger, acquisition, financing, or sale of assets.

8. Data Retention

We retain information for as long as needed to provide the Service, maintain transaction and audit records, comply with legal and accounting obligations, resolve disputes, enforce agreements, prevent abuse, and operate backups. Job data, logs, and outputs may be retained for debugging, reconciliation, security, and compliance purposes unless a shorter retention period is required by a written agreement.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. Customers are responsible for securing their own credentials, API keys, agents, workflows, and systems connected to OpenMerch.

10. International Processing

Information may be processed in the United States and other locations where OpenMerch, its providers, or its infrastructure partners operate. By using the Service, you understand that information may be transferred to and processed in jurisdictions outside your location.

11. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict certain personal information. You may contact us to request assistance. We may need to verify your identity and may retain information where required for security, legal, accounting, dispute, or operational reasons.

12. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after updates means the revised policy applies to future use.

14. Contact

The Service is operated by One Kernel, Inc., a Delaware corporation doing business as OpenMerch. For privacy questions or requests, contact us at [email protected].