Privacy Policy

1. Introduction

Welcome to Opla ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our unified social inbox service.

Opla is a platform designed for community managers and social media professionals who need to manage direct messages from multiple social media platforms in one place. Our application consolidates messages from Instagram DMs, Facebook Messenger, and WhatsApp into a single, unified inbox.

2. Data We Collect

We collect and process the following categories of information:

2.1 Information You Provide

• Account information: name, email address, and password (through our authentication provider)
• Organization details: organization name, billing information
• Client information: client names, logo URLs, contact information
• Message templates and conversation data you create in our system

2.2 Information From Connected Platforms

• Access tokens and connection data for the social media platforms you connect (Instagram, Facebook, WhatsApp)
• Message content, conversation history, and media attachments from connected platforms
• Profile information of users you communicate with through these platforms

2.3 Automatically Collected Information

• Usage data: how you interact with our service
• Device information: IP address, browser type, device type
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our service
• To process and complete transactions
• To connect to social media platforms on your behalf based on your authorization
• To retrieve and display messages from connected platforms
• To send messages to users on connected platforms on your behalf
• To provide customer support
• To gather analysis or valuable information to improve our service
• To monitor the usage of our service
• To detect, prevent and address technical issues
• To communicate with you about service-related announcements

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

We maintain strict data segregation between different clients and organizations using our platform. Your data is stored in our secure database hosted by our backend provider, Convex.

Access tokens for social media platforms are encrypted and stored securely to prevent unauthorized access.

5. Data Sharing and Disclosure

We may share your information with:

• Social media platforms: To connect and interact with their services on your behalf
• Service providers: Who help us provide our service (authentication, hosting, database)
• Business partners: Only with your consent and as necessary for providing the service
• Legal requirements: When required by law, court order, or governmental regulation
• Business transfers: In connection with a merger, acquisition, or sale of business assets

We do not sell your data to third parties for marketing or advertising purposes.

6. Your Data Protection Rights

Depending on your location, you may have the following rights:

• Right to access your personal data
• Right to rectify inaccurate or incomplete data
• Right to erase your personal data
• Right to restrict processing of your data
• Right to data portability
• Right to object to processing of your data
• Right to withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Message data from connected platforms will be retained according to our data retention policy and can be deleted at your request, subject to any legal requirements to maintain certain records.

8. Children's Privacy

Our service is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we learn we have collected personal data from a child under 16, we will delete that information promptly.

9. Third-Party Services

Our service integrates with third-party social media platforms (Instagram, Facebook, and WhatsApp). When you connect these platforms to our service, you are subject to their privacy policies and terms in addition to ours. We encourage you to review the privacy policies of these platforms.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We will take appropriate measures to ensure your data remains protected according to this privacy policy.

11. Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

12. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: privacy@opla.io