Privacy Policy
OpenWeb Ninja Privacy Policy
Updated: Oct 14, 2026
1. Who we are
OpenWeb Ninja is a product of Whats Next Labs LLC ("Company," "we," "us," "our"), a company registered in California, United States. This Privacy Policy explains how we collect, use, and share personal data in connection with the OpenWeb Ninja website at https://openwebninja.com and its APIs (the "Services").
For the personal data described in this policy, Whats Next Labs LLC is the controller under the EU and UK General Data Protection Regulation ("GDPR").
Contact: Whats Next Labs LLC, 1443 Belleville Way, Sunnyvale, CA 94087, United States. Email: support@openwebninja.com.
2. Scope
This policy covers personal data about our customers, account holders, and website visitors, and personal data contained in the public web data we collect to operate the Services.
It does not cover personal data that our customers submit to the API in their requests. For that data, we act as a processor on our customer's behalf under our Data Processing Agreement ("DPA"), and the customer's own privacy policy applies. It also does not cover what our customers do with data they receive from the Services, since they are independent controllers of that data.
3. Personal data we collect and why
We collect the following personal data from you directly and through your use of the Services.
| Data | Purpose | GDPR lawful basis |
|---|---|---|
| Email address and username | Creating and managing your account, signing you in, and contacting you about the Services | Performance of our contract with you (Art. 6(1)(b)) |
| Payment card and billing details | Processing subscription payments. Card details are collected and stored by our payment processor, Stripe; we do not store full card numbers. | Performance of contract (Art. 6(1)(b)); legal obligations such as tax records (Art. 6(1)(c)) |
| API usage data: API key, request counts, timestamps, IP addresses | Metering usage for billing, enforcing rate limits, preventing abuse, and keeping the Services secure | Performance of contract (Art. 6(1)(b)); our legitimate interest in securing the Services (Art. 6(1)(f)) |
| Support messages and feedback | Responding to your requests and improving the Services | Legitimate interests (Art. 6(1)(f)) |
| Website usage data collected by Google Analytics cookies: pages visited, device and browser type, approximate location, and referring site | Understanding how visitors use the website so we can improve it | Consent (Art. 6(1)(a)), for visitors in the EEA, UK, and Switzerland |
Providing your email address, username, and payment details is required to create a paid account. Without them we cannot provide the Services. We do not use your personal data for automated decision-making that has legal or similarly significant effects on you.
Cookies and analytics. We use Google Analytics, provided by Google LLC, to measure how our website is used. It sets cookies (such as _ga) that collect the website usage data above. For visitors in the EEA, UK, and Switzerland, we set these cookies only after you consent through our cookie banner, and you can withdraw consent at any time through navigating to our Cookie preferences page on our site. We have configured Google Analytics to retain data for 14 months. You can also opt out of Google Analytics everywhere with Google's browser add-on, available at https://tools.google.com/dlpage/gaoptout.
4. Data collected from public websites
OpenWeb Ninja provides API access to publicly available information on popular websites. That information can include personal data about people who are not our customers, such as names, usernames, public profile details, and content they have published, as well as business listings that identify individuals.
Source and categories. We collect this data only from publicly accessible web pages, [such as search results, business listings, and public profiles]. We do not intentionally collect special categories of personal data, such as health or political opinions, and we do not collect data from behind logins or paywalls.
Purpose and lawful basis. We process this data to return it to customers who request it through the API. Our lawful basis is legitimate interests (Art. 6(1)(f)): providing access to public information for uses such as research, market analysis, and building products. We have assessed that these interests are not overridden by the rights of the individuals concerned, given that the data is already public.
Recipients. This data is provided to our customers, who become independent controllers of it and are responsible for their own lawful use.
Your right to object. If your personal data is in public web data we have collected, you can object to our processing at any time by emailing support@openwebninja.com. We will stop processing it unless we have compelling legitimate grounds that override your interests, or need it for legal claims. You also have the other rights described in Section 8.
5. Who we share data with
We do not sell your personal data. We share it only with the service providers below, who process it on our behalf under written contracts.
| Provider | Purpose | Data |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Hosting and compute | All data processed by the Services |
| OpenMeter | Usage metering for billing | API usage events linked to your account |
| Stripe, Inc. | Payment processing | Billing details and payment card information |
| Auth0 (Okta, Inc.) | Sign-in and account management | Email address, username, and login data |
| Google LLC (Google Analytics) | Website analytics | Website usage data and cookie identifiers |
We may also disclose personal data when required by law or legal process, to protect our rights or the safety of others, or to a successor in a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the data transferred.
6. International transfers
We are based in the United States, and the Services are hosted there. If you are in the European Economic Area, the United Kingdom, or Switzerland, your personal data will be transferred to the United States, which does not have an adequacy decision covering us.
We protect these transfers with the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments where applicable), together with the safeguards described in Section 10. You can request a copy of the relevant safeguards by emailing support@openwebninja.com.
7. How long we keep data
We keep personal data only as long as needed for the purposes above, then delete or anonymize it.
| Data | Retention |
|---|---|
| Account data (email, username) | For the life of your account, then 1 year after closure |
| Billing records | [7] years, to meet tax and accounting obligations |
| API request logs and IP addresses | 1 year, longer only to investigate abuse or security incidents |
| Support messages | 1 year after the conversation ends |
| Public web data | Until refreshed or no longer needed to serve requests, and no longer than 1 year |
8. Your rights under GDPR
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data, in the circumstances set out in the GDPR.
- Restrict our processing while a concern is resolved.
- Port data you provided to us, in a machine-readable format.
- Object to processing based on legitimate interests, including the public web data described in Section 4.
- Withdraw consent at any time, where we rely on consent, without affecting earlier processing.
To exercise these rights, email support@openwebninja.com. We will respond within one month, and may ask you to verify your identity first. If a request concerns data a customer submitted to the API, we will forward it to that customer.
You also have the right to complain to the data protection authority where you live or work. We would welcome the chance to address your concern first.
9. California residents
If you are a California resident, you have the right to know what personal data we collect and how we use and disclose it, to request access to or deletion or correction of your personal data, and not to be discriminated against for exercising these rights. The categories we collect and their sources and purposes are described in Sections 3 and 4.
We do not sell or share personal data for cross-context behavioral advertising, and we do not use sensitive personal information for purposes that would require offering a right to limit. To make a request, email support@openwebninja.com. You may use an authorized agent, and we will verify requests before acting on them.
10. Security, children, and changes
Security. We protect personal data with measures including encryption in transit and at rest, access controls with multi-factor authentication, and monitoring of our systems. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where required by law.
Children. The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.
Changes. We may update this policy. We will post the new version with a revised "Last updated" date and, for material changes, notify account holders by email before they take effect.
Contact us. Whats Next Labs LLC, 1443 Belleville Way, Sunnyvale, CA 94087, United States, support@openwebninja.com.