Privacy Policy

Last updated October 24, 2026

What we collect

• Contact inquiries: the name, reply email address, subject and message you submit, used to respond to your inquiry.
• Optional mailing-list signup: your email, the product you selected, the consent wording and when you agreed. We use these to send Open Painter product updates, tutorials and news. Downloading alone does not subscribe you.
• Account data: email address, display name, password hash.
• Billing data: handled by Stripe; we store your Stripe customer id, subscription status and your card's brand and last four digits.
• Signed-in devices: when Open Painter signs in (Connect in Blender, or Open Painter Studio), the device name the app reports (your computer's name and the app version), the app, Open Painter, Blender and extension versions, the operating system, and the IP addresses of the sign-in and of later requests.
• Download logs: which pack versions your account downloaded and when, with the IP address and app that asked. Used for abuse prevention and support.
• Teams: the materials members share with a team and their previews, and the team's members and invitations.

What the software sends

Open Painter, the Blender extension, works offline. The one exception is the optional Material Director (the Assistant): only when you connect it, it downloads the OpenAI Codex command-line tool from the npm registry and sends your instructions, with the material context and images you choose to share, to OpenAI under your own ChatGPT account. That exchange is between you and OpenAI, under OpenAI's terms; it does not pass through openpainter.dev.

Open Painter Connect contacts openpainter.dev when you sign in, check for updates (when you ask, and every six hours while Blender is open if automatic sync is on), install packs or share with a team, and downloads packs from the signed storage links it is given. Open Painter Studio contacts openpainter.dev for sign-in and your libraries in the same way.

None of them include telemetry or analytics, and none read or upload your projects. Sharing with a team uploads the material you choose, with a picture of the viewport as its preview.

The website

The website uses a session cookie and a CSRF cookie, both required for signing in. Every page also loads the Tidio chat widget from Tidio's servers so you can message us: Tidio receives information about your visit, such as your IP address and browser details, stores data in your browser to keep a conversation going, and processes what you write in the chat. There are no advertising cookies and no analytics scripts.

Mailing-list preferences

Signing up is optional and separate from downloading or creating an account. You can unsubscribe using the link in a mailing-list email, or email privacy@openpainter.dev. We keep your subscription while it is active and retain an unsubscribe record to prevent further mailing-list messages; you can ask us to delete the record.

Service providers

Stripe processes payments, Resend delivers account, team and contact emails, Railway hosts the website, database and file storage, and Tidio provides the website chat. Each receives the data needed for its part of the service.

Retention and deletion

Account data is kept while your account exists. Download logs are deleted after 90 days. When you ask us to delete your account, we remove your personal data within 30 days, except invoices we must retain for tax purposes.

Your rights

To get a copy of your data, correct it or delete your account, use our contact form with the email address on your account. You can revoke signed-in devices yourself under Account › Devices, and change your display name and password under Account.