PRIVACY POLICY

Open Auto, Inc. is an independent, neutral standards initiative building a shared foundation for AI-native automotive retail. We respect your privacy. This policy explains what information we collect through OpenAutoForum.org, why we collect it, and the choices you have.

In this policy, "Open Auto," "we," "us," and "our" mean Open Auto, Inc.. "Site" means OpenAutoForum.org and any page that links to this policy.

Information you give us. We collect information when you fill out a form on the Site:

- Request a Briefing: name, work email, company or affiliation, title, stakeholder type, primary area of interest, and any message you add.
- Contact: name, email, company or affiliation, inquiry type, and your message.
- Other communications: anything you share when you email us or speak with our team.

‍Information collected automatically. When you visit the Site, we and our service providers may collect basic technical information. This can include your IP address, browser and device type, pages visited, referring website, and the date and time of your visit. We collect this through cookies and similar tools.

We do not ask for sensitive personal information through the Site. Please do not send it to us.

We use the information we collect to:

- Respond to your inquiry and route it to the right team.
- Review briefing requests and follow up.
- Share updates about Open Auto's standards work, events, and participation opportunities, where you have agreed or where the law allows. You can opt out at any time.
- Understand how visitors use the Site so we can improve it.
- Keep the Site secure and prevent misuse.
- Meet legal obligations.

We do not sell your personal information, nor do we "share" or process it for cross-context behavioral advertising or targeted advertising under applicable state privacy laws. We do not use it to train AI models.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following legal bases pursuant to Article 6 of the General Data Protection Regulation (GDPR):

-Legitimate Interests: To evaluate briefing inquiries, respond to communications, manage day-to-day operations, protect the security and integrity of our Site, and advance our standards development mission.
- Consent: To set non-essential (analytics) cookies on your device and to send you direct marketing or newsletter communications where affirmative consent is required by local law. You may withdraw consent at any time.
- Legal Obligation: To comply with applicable laws, judicial proceedings, or regulatory inquiries.

We share personal information only in these cases:

- Service providers. Companies that help us run the Site, manage forms and contacts, send email, and measure Site use. For example: Google , Webflow. They may use the information only to provide services to us.
- Legal reasons. When required by law, or to protect the rights, safety, or property of Open Auto, Site visitors, or others.
- Organizational change. If Open Auto undergoes a reorganization or similar organizational change, your information may be transferred to the relevant successor organization, subject to applicable law and this policy.
- With your consent. In any other case where you ask us to or agree.

We do not share your information with Open Auto participants or partners for their own marketing.

Cookies are small files stored on your device. We use:

- Essential cookies that make the Site work. These are always on.
- Analytics cookies that help us understand how the Site is used. These are on only if you allow them, where the law requires consent.

You can change your choices at any time through the Cookie Preferences link in the Site footer. You can also block cookies in your browser settings, though some parts of the Site may not work as intended.

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. Briefing and contact records are kept for 24 months after our last interaction, then deleted or anonymized. Technical logs collected automatically for security and monitoring are retained for up to 15 days. Analytics cookies expire after 12 months unless deleted sooner by you.

We use reasonable technical and organizational safeguards to protect personal information. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

- Access the personal information we hold about you.
- Correct information that is wrong or out of date.
- Delete your information.
- Object to or limit how we use it.
- Receive a copy in a portable format.
- Withdraw consent you have given.

To make a request, email [privacy@openautoforum.org]. We may need to confirm your identity first. We will not treat you differently for using these rights. You can stop marketing emails at any time with the unsubscribe link in each email.

If you are in the European Economic Area or the United Kingdom, you may also file a complaint with your local data protection authority.

Open Auto is based in the United States. Our service providers may process information in other countries. When we transfer personal information across borders, we use appropriate safeguards required by law.

The Site is for business and professional audiences. It is not directed to anyone under 16, and we do not knowingly collect their personal information.

The Site may link to websites we do not control, including LinkedIn and partner sites such as STAR. Their privacy practices are their own. Please review their policies.

We may update this policy as Open Auto and the Site evolve. We will post the updated version here and change the effective date. If changes are significant, we will give notice on the Site.

Questions about this policy or your information: contact@openautoforum.org

Mailing address: 630 Freedom Business Center Dr, 3rd floor, 181, King of Prussia, PA, 19406