OpenText

OpenText Privacy Center — User Overview

> Scope warning: This page is a high-level description of OpenText’s global privacy program. It repeatedly directs users to the separate OpenText Privacy Policy, Cookie Policy, customer contracts, and Data Processing Addendum (DPA) for the detailed rules. The document does not provide a complete list of data categories, processing purposes, liability terms, or dispute procedures.

1. Data Collection & Usage

OpenText may process personal information collected:

• Through its websites and portals
• Through OpenText products and services
• Directly from individuals, including in person, by phone, or email
• Indirectly through third parties in the course of business
• In recruiting activities, under a separate Candidate Privacy Policy
• Through cookies and similar technologies, under a separate Cookie Policy

The information may be processed when OpenText acts as:

• Controller: OpenText decides why and how the information is used.
• Processor: OpenText handles customer-controlled data under the customer’s written instructions, typically through a customer agreement or DPA.

The stated purposes include operating and improving products and services, providing personalized experiences, communicating with users, conducting marketing, maintaining security and compliance, and supporting business operations. However, the specific data categories—such as identifiers, usage data, contact details, or sensitive information—and legal bases for processing are not listed here.

OpenText generally follows retention guidelines. For customer data processed as a processor, it says data will be returned or deleted at the end of services upon the customer’s written instruction, unless law or the contract requires retention.

2. User Rights

Subject to applicable law, individuals may request:

• Access to their personal information
• Correction or updating
• Deletion
• Objection to certain uses or sharing
• Other legally available data-subject rights

Marketing communications reportedly include opt-out mechanisms. The page does not explain verification procedures, response deadlines, appeal rights, portability, or how rights differ by location. Users should consult the separate Privacy Policy or contact OpenText’s privacy function/DPO at DPO@opentext.com.

3. Third-Party Sharing and International Transfers

OpenText may share personal information with:

• Vendors and service providers acting on its behalf
• OpenText affiliates
• Subprocessors supporting products and services
• Other recipients identified in applicable records, policies, or contracts
• Authorities where legally required

OpenText states that it conducts vendor due diligence and uses contractual privacy and security protections. Data may be processed in countries including Canada, the United States, India, and the Philippines. For transfers from the EEA, UK, or Switzerland, OpenText says it relies on adequacy decisions or EU Model Clauses and other legally required safeguards.

Practical risk: Data may leave your country, and the precise vendors, locations, and government-access rules may depend on the specific service and contract.

4. AI/ML Training

This Privacy Center page does not say whether personal information or customer content is used to train, fine-tune, or improve AI models. OpenText markets numerous AI products, but marketing references to AI are not a disclosure of training practices.

Users should review the applicable product terms, AI terms, Privacy Policy, and DPA for explicit rules on model training, human review, prompt retention, and use of customer content.

5. Key Obligations and Restrictions

The document imposes few direct obligations on individual users. Important practical points are:

• Marketing consent may be required in some jurisdictions, but opt-out options are provided.
• Customer organizations may control processing through written instructions and contractual terms.
• Users should avoid submitting unnecessary or sensitive information unless the relevant service is designed to handle it.
• Customers should review retention, deletion, subprocessors, and international-transfer terms in their agreement.

6. Liability and Disputes

This page contains no liability cap, warranty disclaimer, indemnity, arbitration clause, governing-law provision, or dispute-resolution procedure. Those terms likely appear in the applicable Terms of Use, service agreement, order form, or DPA.

The page describes security frameworks and audits, but these statements should not be treated as an absolute guarantee against breaches or misuse.

7. Changes

OpenText may update the Privacy Statement without prior consent or notice to reflect changes in practices, technology, or legal commitments. It recommends periodic review.

The page states it was last reviewed in September 2023, although the surrounding website displays a later copyright/update context. Users should verify the current Privacy Policy and contractual version before relying on it.

OpenText Privacy Policy: User-Focused Overview

*Policy last updated: June 30, 2026.* This summary is informational and not a substitute for legal advice.

1. Data Collection & Usage

OpenText may collect information depending on how you interact with its websites, products, services, events, and communications.

Categories collected

• Account/contact data: Name, address, email, phone number, username, password, country, and language.
• Financial data: Payment-card, banking, and transaction information.
• Device identifiers: IP address, browser, operating system, device type, software/hardware details, and unique device or application identifiers.
• Usage and connection data: Pages viewed, searches, downloads/uploads, files accessed, timestamps, forms started or completed, email engagement, URLs, and error logs.
• Communications and other information: Information you provide, customer-support records, call recordings, chat transcripts, survey responses, event participation, CCTV/logbook information at OpenText premises, and information obtained from employers, partners, resellers, public sources, or data brokers.

Main purposes

OpenText uses data to:

• Provide, administer, authenticate, bill, and support products and services.
• Personalize content and user experiences.
• Analyze usage, conduct research, improve products, and troubleshoot systems.
• Send service notices, product updates, surveys, and—where legally permitted—marketing.
• Deliver or measure targeted/interest-based advertising.
• Detect fraud, spam, malware, unauthorized access, and security threats.
• Comply with law and establish, enforce, or defend legal rights.
• Use AI to automate service delivery, analyze usage patterns, personalize recommendations/search results, and detect security risks.

Potential risk: The purposes are broad, particularly “internal research and development,” personalization, analytics, advertising, and AI-related processing. The policy does not give detailed product-by-product limits on these activities.

2. User Rights

Depending on your location, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete data.
• Delete data in certain circumstances.
• Restrict or object to processing.
• Receive or transfer certain data in portable form.
• Withdraw consent where processing relies on consent.
• Opt out of marketing communications.
• In some U.S. states, opt out of sale/sharing for targeted advertising or profiling and request information about disclosures.

Requests can be made through OpenText’s Data Subject Request Form, DPO@opentext.com, or 1-866-397-0207. OpenText may verify your identity. California residents may use an authorized agent, and OpenText states it honors Global Privacy Control signals.

If OpenText processes data for an OpenText customer as a processor, users generally must exercise rights through that customer rather than OpenText.

3. Third-Party Sharing

Data may be shared with:

• OpenText affiliates and subsidiaries.
• Resellers, distributors, business partners, and marketplace participants.
• Cloud hosts, software/infrastructure providers, payment processors, analytics and email providers, marketing agencies, advertisers, backup providers, and professional advisers.
• Credit-reference and debt-collection agencies where relevant.
• Authorities when legally required, for law enforcement, national security, emergencies, or protection of rights.
• A buyer or successor in a merger, sale, reorganization, or joint venture.

Data may be transferred internationally, including to the United States, Canada, India, Europe, and other countries. OpenText cites mechanisms such as adequacy decisions, Standard Contractual Clauses, and the EU-U.S./UK/Swiss Data Privacy Framework.

Potential risk: The policy generally identifies categories of recipients rather than naming every recipient. Third-party services, including Google, YouTube, cookies, and data brokers, may have their own terms and policies.

4. AI/ML Training

The policy expressly states that data obtained through Google APIs is not used to develop, improve, or train generalized/non-personalized AI or ML models.

However, the policy allows broad AI use for service improvement, research and development, personalization, usage analytics, security, and new features. It does not clearly state that all other personal information is excluded from AI-model training. Users should check product-specific terms or contractual assurances, especially for confidential business content.

5. Key User Obligations

The policy itself imposes few direct obligations. Practically, users should:

• Provide information needed to receive services or satisfy legal requirements.
• Manage marketing, cookie, advertising, and device privacy settings.
• Review third-party platform policies when connecting accounts or APIs.
• Avoid submitting unnecessary sensitive or confidential information unless appropriate safeguards and contractual terms apply.
• Understand that rejecting cookies may limit website functionality.

6. Liability & Disputes

This privacy policy contains no detailed warranty disclaimer, damages cap, governing-law clause, or general liability limitation. Those terms may appear in OpenText’s Terms of Use, customer agreement, or product contract.

Users are encouraged to contact OpenText first about complaints and may then complain to their applicable privacy regulator. For data handled under the Data Privacy Framework, unresolved matters may, in certain circumstances, proceed to binding arbitration after other avenues are exhausted.

7. Policy Changes

OpenText may revise the policy by posting an updated version on the same webpage and advises users to check periodically. For changes materially affecting rights or how/why data is used, OpenText says it will provide a prominent website notice, pop-up, or other appropriate notice. The policy does not promise advance notice for every change.