Privacy Policy

This Privacy Policy explains how OpaqAI, Inc. (“OpaqAI,” “we,” “us”) collects, uses, discloses and protects personal information through our website at opaq.ai (the “Site”) and when you contact us by email. It also describes the rights California residents have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), and how to exercise them. This policy is our notice at collection.

1. Scope

This policy applies to personal information we collect through the Site and through email correspondence with us, such as inquiries and demo requests. It does not apply to information we process on behalf of our customers when they use OpaqAI products; that processing is governed by our agreements with those customers. It also does not apply to third-party websites or services.

2. Information we collect

Information you give us

The Site has no forms or accounts. When you email us, including through the “Request a demo” links, which open your own email application, we receive:

• your name and email address, and any phone number you include;
• professional information you include, such as your company and job title; and
• the contents of your message and any attachments.

Information collected automatically

When you visit the Site, your browser sends technical information to the servers of our hosting provider: your IP address, browser type and version, device and operating system, the page requested, the referring page, and the date and time of the request. This information is used to deliver pages, keep the Site secure and diagnose problems.

Fonts

The Site loads typefaces from Google Fonts. When your browser requests them, Google receives your IP address and browser information. Google Fonts requests are not authenticated and do not send cookies. See Google’s Fonts privacy FAQ for how Google handles this information.

Analytics

We use Cloudflare Web Analytics to understand, in aggregate, how the Site is used: which pages are viewed, which pages referred visitors, approximate country, browser and device type, and how quickly pages load. When a page loads, a script from Cloudflare sends this information to Cloudflare, which receives your IP address as part of that connection. Cloudflare Web Analytics does not use cookies or local storage, does not fingerprint visitors and does not record page query strings. Cloudflare processes this information on our behalf as a service provider; see Cloudflare’s privacy policy.

Cookies and tracking

We do not use cookies, advertising, session-replay or cross-site tracking technologies on the Site. Our only analytics tool is the cookie-free Cloudflare Web Analytics described above. Because we do not track visitors over time or across third-party websites, the Site does not respond differently to “Do Not Track” browser signals. We treat a Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information, although we do not sell or share it.

Sensitive personal information

We do not ask for or intentionally collect sensitive personal information, such as government identification numbers, financial account details, health information or precise geolocation. Please do not include it in emails to us. If you send it anyway, we use it only to respond to you and for the other purposes the CCPA permits, and never to infer characteristics about you.

3. Categories of personal information

In the past 12 months we have collected the following categories of personal information, as defined by the CCPA. We have not sold or shared any of them.

We do not collect biometric information, precise geolocation, or inferences drawn to create a profile about you. Your IP address may indicate your approximate location.

4. How we use personal information

We use personal information to:

• respond to your inquiries and demo requests, and communicate with you about the products and services you asked about;
• operate, maintain and secure the Site, and understand in aggregate how it is used so we can improve it;
• detect, prevent and investigate fraud, abuse and security incidents; and
• comply with legal obligations and enforce our Terms of Use.

We do not use personal information for targeted advertising, and we do not use it to make decisions about you by automated means that produce legal or similarly significant effects.

5. How we disclose personal information

We disclose personal information only in these circumstances:

• Service providers. We use vendors that process personal information on our behalf, such as our website hosting provider, our web analytics provider (Cloudflare) and our email and productivity service providers. Their contracts limit their use of the information to providing services to us.
• Font delivery. Google receives the technical information described in section 2 when it serves the Site’s typefaces.
• Legal requirements. We may disclose information when we believe in good faith that the law, a subpoena or another legal process requires it, or that disclosure is necessary to protect the rights, property or safety of OpaqAI, our users or others.
• Business transfers. If OpaqAI is involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
• With your consent. We may disclose information for any other purpose with your permission.

We do not sell personal information or share it for cross-context behavioral advertising, as those terms are defined by the CCPA, and we have not done so in the past 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not disclose personal information to third parties for their own direct marketing purposes (Cal. Civ. Code § 1798.83).

6. How long we keep it

We keep personal information only for as long as reasonably necessary for the purposes described in this policy:

• Email correspondence is kept for as long as needed to respond to you and maintain our business relationship, and longer only where legal, tax, accounting or contractual obligations require it, or to establish or defend legal claims.
• Server logs are kept by our hosting provider for a limited period for security and troubleshooting, in line with its standard retention practices.
• Analytics data is kept by Cloudflare in aggregated form and is available to us for up to six months.

When personal information is no longer needed, we delete it or de-identify it.

7. Your California privacy rights

If you are a California resident, you have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we have disclosed it;
• Delete personal information we have collected from you, subject to certain exceptions;
• Correct inaccurate personal information we hold about you;
• Opt out of the sale or sharing of your personal information (we do not sell or share it);
• Limit the use and disclosure of sensitive personal information (we do not use or disclose it for purposes that give rise to this right); and
• Not be discriminated or retaliated against for exercising any of these rights.

Residents of other U.S. states may have similar rights under their state’s law. Contact us and we will respond in accordance with the law that applies to you.

8. How to make a request

To exercise your rights, email info@opaq.ai with the subject line “Privacy request” and tell us which right you want to exercise.

• Verification. To protect your information, we verify requests by matching the details you give us with the information we hold, for example by confirming that you control the email address you used to correspond with us. We will ask only for what we need to verify you, and use it only for that purpose.
• Authorized agents. You may use an authorized agent to make a request on your behalf. We will ask the agent for proof of your signed permission and may ask you to verify your identity directly with us.
• Timing. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, up to a further 45 days, we will tell you why.
• Cost. Requests are free. You may ask to know or access your information up to twice in any 12-month period.

9. Security

We use reasonable administrative, technical and physical safeguards to protect personal information, and the Site is served only over encrypted HTTPS connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

11. Where information is processed

OpaqAI is based in the United States. Information we collect is processed in the United States, and our hosting provider may deliver the Site from servers in other countries. By using the Site or contacting us, you understand that your information may be processed outside your country of residence.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page. If we make material changes, we will give notice on the Site before they take effect.

13. Contact us

If you have questions about this policy or our privacy practices, or need this policy in an alternative format, contact us at info@opaq.ai.

OpaqAI, Inc.
Sterling, Virginia, United States