Privacy Policy

1. Information we collect

We collect three categories of information:

a. Information you give us directly. When you submit a form (contact, consultation request, workshop registration, waitlist, live chat) or buy from us, we collect: name, email, phone number, company name, billing address (via Stripe), the message or problem you wrote, your preferred meeting times, the number of attendees, and your plan choice.

b. Information collected automatically. When you visit the site we receive standard server logs (IP address, user-agent, requested URL, referring URL, timestamp) and device or browser characteristics (screen size, language, operating system, approximate location derived from IP). We use first-party storage (localStorage and cookies) to remember which marketing campaign or referring website brought you here so we can measure which channels work and follow up with you in context.

c. Information from third parties. Stripe shares payment, dispute, and refund data with us. Email providers report delivery, bounce, open, and click events for messages we send you. We do not buy contact lists.

2. How we use it

• Respond to your inquiry, schedule your consultation, deliver your workshop seat, and run the live-chat conversation.
• Process payments and prevent fraud (handled by Stripe).
• Send transactional email (booking confirmations, payment receipts, calendar invites, NDAs, reschedules, refunds).
• Measure aggregate site performance and which marketing channels generate qualified leads, so we can decide where to spend time and budget.
• Diagnose user-experience issues (heatmaps and anonymized session replays via Microsoft Clarity, where applicable).
• Comply with legal obligations (tax records, dispute response).

We do not sell personal information. We do not share your data with advertising networks for cross-context behavioral advertising without your consent.

3. Service providers (sub-processors)

The following third parties process personal data on our behalf, each under their own privacy policy and a data processing agreement with us where applicable:

• Vercel, hosting and request logs (US).
• Supabase, application database and storage (US).
• Stripe, payment processing, billing, and fraud detection (US).
• Email backend (one of: ZeptoMail, Amazon SES, or Resend) for transactional email delivery.
• Microsoft Clarity, heatmaps and session replay (where enabled). Replays mask form values; we never see typed-in passwords or full payment details.
• Google Analytics and Google Search Console (where enabled), aggregate traffic measurement.
• Vercel Web Analytics and Vercel Speed Insights, first-party, cookieless aggregate metrics.

4. Cookies and similar technologies

We use a small number of first-party cookies and browser-storage items:

• op_session, admin authentication cookie. 30 days. Set only after admin login. Strictly necessary.
• op_attribution (localStorage), records the marketing campaign or referring site that brought you to us. Persists until you clear browser storage.
• Microsoft Clarity, where enabled, sets _clck and _clsk cookies for session replay (~1 year and 1 day respectively).

You can clear these at any time using your browser settings; doing so will not affect your ability to use the site.

5. Payment processing

Payments are processed by Stripe, which is PCI-DSS compliant. We never receive or store full card numbers, CVCs, or bank account details. Stripe stores the last four digits and brand of your card so we can reference the transaction.

6. Email and SMS

Transactional email (booking confirmations, receipts, refunds, workshop logistics) is sent automatically when you submit a form, register, or pay. We do not add you to marketing email without your explicit opt-in. You can unsubscribe from any marketing message via the link at the bottom of the email; your request is honored within ten business days as required by CAN-SPAM.

We do not send marketing SMS at this time. If we ever do, it will be only with your express prior written consent under TCPA, and you can opt out by replying STOP at any time.

7. Retention

• Form submissions, consultation records, and workshop registrations: kept for the life of the customer relationship and for at least seven years after the last interaction for tax and dispute records.
• Server access logs: kept for up to ninety days.
• Analytics data: retained per the third-party service's default (typically 14 to 26 months).
• Live chat conversations: kept for the life of the customer relationship; you can request deletion at any time.

8. Your rights

Depending on where you live, you have rights over the personal information we hold about you. These typically include:

• The right to know what we have collected.
• The right to a copy of your data in a portable format.
• The right to correct inaccurate information.
• The right to delete your data (with limited exceptions where we are required by law to retain it).
• The right to opt out of the sale or sharing of your personal information (we do not sell, but if you live in California you can exercise this right anyway and we will confirm).
• The right to non-discrimination for exercising these rights.

To make a request, email privacy@opportunisee.com. We respond within 30 days (45 days for California requests, as permitted by CCPA/CPRA).

9. Children's privacy

Our services are intended for adults. We do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information to us, email privacy@opportunisee.com and we will delete it promptly.

10. International transfers

Our hosting and most service providers are based in the United States. If you visit from outside the US, your data is transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms with our sub-processors.

11. Security

We use industry-standard safeguards: TLS for transit, encryption at rest for our database and secrets, role-scoped access controls, and JWT-based admin authentication. No system is perfectly secure, but we work to keep your data safe and will notify affected users promptly in the event of a breach that legally requires disclosure.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new “last updated” date. For substantial changes that affect how we use your data, we will email registered customers in advance.

13. Contact

Questions or requests: privacy@opportunisee.com.