Privacy Policy

01

Data Controller

The data controller for information collected through opulion.dev is:

02

Information We Collect

Information you provide directly:

• Name, email address, and company name when you submit a contact or application form
• Project details and technical information shared during discovery calls or intake forms
• Payment information processed through PayPal (we do not store card numbers)
• Any other information you voluntarily provide in communications with us

Information collected automatically:

• Usage data via Google Analytics (property ID: G-W59KRS39Q6), including pages visited, session duration, referral source, and general geographic region
• Device and browser information (type, operating system, screen resolution)
• IP address (anonymized in analytics where supported)
• Cookies and similar tracking technologies (see our Cookie Policy)

03

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and deliver consulting services
• Process payments and send engagement-related communications
• Improve our website, content, and service offerings
• Analyze site traffic and user behavior in aggregate
• Send occasional updates or newsletters (only if you opt in)
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

04

Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your personal data under the following legal bases:

• Contractual necessity: To deliver services you have engaged us for
• Legitimate interest: To improve our website, analyze usage patterns, and communicate about our services
• Consent: For analytics cookies and optional marketing communications (you can withdraw consent at any time)
• Legal obligation: To comply with applicable laws and regulations

05

Third-Party Services

We use a limited number of third-party services to operate the site and deliver our services:

• Web3Forms — Processes form submissions (contact, application). Data is transmitted to Web3Forms servers for delivery to our inbox.
• Google Analytics — Collects anonymized usage data to help us understand how visitors interact with our site. Google’s privacy policy applies to their handling of this data.
• PayPal — Processes payments. We do not store your payment card details; PayPal handles all payment data under their own privacy policy.
• Vercel — Hosts our website. Vercel may collect basic server logs (IP address, request data) as part of hosting.

06

International Data Transfers

Opulion Systems LLC is based in the United States and our third-party service providers may process data in the United States and other countries. If you are located in the EU/EEA, this means your data may be transferred outside the European Economic Area.

We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

07

Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Contact form submissions: 2 years from the date of submission
• Client engagement records: 5 years after the engagement ends (for legal and accounting purposes)
• Analytics data: Governed by Google Analytics retention settings (currently 14 months)
• Payment records: As required by applicable tax and financial regulations

08

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data (“right to be forgotten”)
• Restriction: Request that we limit how we process your data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at mostafa@opulion.dev. We will respond within 30 days (or within the timeframe required by applicable law).

If you are in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

09

Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

10

Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. This includes using HTTPS encryption, secure hosting infrastructure, and limiting access to personal data to those who need it.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

11

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12

Contact

For any questions about this Privacy Policy or how we handle your data, contact us at mostafa@opulion.dev.