California privacy notice

What we collect

OpenVLAN is built to need very little: account identifiers (name, email), device metadata (hostnames, IP addresses, OS versions), network coordination metadata (which nodes connect to which), and billing details for paid plans. We do not collect payload traffic or browsing history.

Why we collect it

• Operating the service: connecting your devices, enforcing your ACLs
• Security and abuse prevention
• Billing and account management
• Service communications (security notices, admin announcements)

We don't sell personal information

We do not sell or share personal information as defined by the CCPA/CPRA. We don't run ad trackers on our services.

Your rights

California residents may request:

• Access — a copy of the personal information we hold about you
• Deletion — deletion of personal information, subject to retention obligations
• Correction — correction of inaccurate personal information
• Information — details about categories collected and their purposes

Requests can be made by email to privacy@openvlan.com. We verify requests by matching your account email. Authorized agents may submit requests with written permission.

Non-discrimination

We won't discriminate against you for exercising these rights, and we won't deny or degrade service because of a privacy request.

Retention

Account data is kept while your tailnet is active. Coordination metadata retention follows the schedule in the privacy policy; deleted-account data is removed within 30 days except where law requires longer.

Contact

privacy@openvlan.com

This document is an illustrative template for a demo site and is not legal advice.