Privacy Policy

We collect the minimum information needed to operate and improve the Service. This includes:

• Account information. If you create an account, we store the email address and profile data you provide, plus authentication credentials managed by our auth provider. Sign-in via Google or Apple shares only the profile data their consent screen authorises.
• Session and usage data. Standard server logs (IP address, user agent, referrer, requested URL) and aggregate product analytics so we can debug issues and understand how the Service is used. We do not sell this data.
• User-submitted content. Submissions you run through the AI analysis engine (URLs, company names, PDF text, job postings, etc.) and the review reports generated from them. These are stored against your account so you can return to them.
• Payment information. Payments are processed by Stripe; we receive a Stripe customer identifier and subscription status but do not see or store full card numbers.

We use the information above to:

• Provide the Service and generate the analysis reports you request.
• Authenticate you, sync your watchlist and reviews across devices, and send the service notifications you opt into (review completion, score changes, billing).
• Detect abuse, prevent fraud, and respond to support requests. Aggregate, de-identified usage data informs product decisions.

We do not sell your personal information and we do not share your analysis submissions with the companies or programs being reviewed.

When you click “Share” on a review, you create a unique public URL tied to that review. Anyone with the URL can view the full report. You can revoke the URL at any time from your dashboard, which immediately hides the public page. We do not index the URL in our sitemap or share it with the public program being reviewed.

We use cookies and local storage to keep you signed in, remember your theme preference, and store cart contents if you have one. We currently do not use marketing or cross-site advertising cookies.

Account data is retained while your account is active. You can delete your account at any time from Settings, which removes your account, profile, and review records. Stripe billing history and transaction records we are legally required to retain are kept for the period required by applicable tax and accounting law.

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, email optera-2@polsia.app. We respond within the timeframes required by applicable law.

We use industry-standard safeguards: HTTPS in transit, hashed authentication credentials, scoped access tokens, and tenant isolation between sessions. AI provider calls transmit only the content you submit and are governed by our processing agreement with the provider. No system is perfectly secure; if we discover a breach affecting your data, we will notify you without undue delay.

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact optera-2@polsia.app and we will delete it.

We may update this policy as the Service evolves. When we make a material change, we will post the updated policy here with a revised “Last updated” date and, where appropriate, notify active accounts by email.

Questions about this policy or our data practices? Email optera-2@polsia.app.

This policy is placeholder copy pending formal legal review. It reflects current operational practice and is meant to be informative rather than legal advice.