Privacy Policy — Online Profile Rescue (OPR)

1) Scope

This Privacy Policy applies to:

• Visitors to our website
• Users who start a scan, create an account, or purchase a plan
• Users who submit business/profile information or evidence documents through our tools

This Privacy Policy does not cover Google's services (including Google Business Profile). Google's processing is governed by Google's own policies.

2) Information We Collect

A. Information you provide to us

Depending on how you use OPR, you may provide:

• Contact and account information: name, email address, password (stored in hashed form), account preferences
• Business/profile details you input: business name, address, phone, category, website, operating area, profile URL(s), and any other details you submit in forms
• Support communications: messages you send us, including emails or chat/support requests
• Evidence and documentation (if uploaded): screenshots, photos (e.g., storefront/signage), utility bills, licenses, and other files you choose to upload
• Payment information (if you buy a plan): we typically receive limited payment metadata (e.g., payment status, plan type). We do not intend to store full card details; payments are handled by third-party payment processors.

B. Information collected automatically

When you visit the website, we may collect:

• Device and usage data: IP address, browser type, device identifiers, pages viewed, time spent, referring URLs, and interaction events
• Cookies and similar technologies: used for authentication, security, preferences, and analytics (see Section 7)

C. Information from third parties (optional/limited)

If you connect or reference third-party services (for example, by providing a link to a business profile), we may process information you make available to us via that link only to provide the service you requested.

3) How We Use Your Information

We use personal information to:

• Provide, operate, and maintain OPR tools (e.g., run scans, generate risk results, produce guidance)
• Create and manage accounts, authenticate users, and secure access
• Process payments and manage subscriptions
• Communicate with you about your account, scans, updates, and support requests
• Monitor, prevent, and investigate fraud, abuse, and security incidents
• Improve our product, UX, and performance (including debugging and analytics)
• Comply with legal obligations and enforce our Terms of Service

4) AI and Automated Processing

OPR uses automated systems (including AI/LLM components) to help analyze the information you submit and to generate guidance, checklists, and draft materials.

Important notes:

• Outputs are generated from the inputs you provide and our internal logic/models.
• Do not upload sensitive personal information unless it is necessary for your intended use.
• Our tools provide guidance only and are not legal advice.

5) Legal Bases (where applicable)

Depending on your jurisdiction, we process personal information under one or more of the following bases:

• Contract: to deliver the services you request
• Legitimate interests: to secure, maintain, and improve our service (balanced against your rights)
• Consent: for certain cookies/marketing communications where required by law
• Legal obligation: to comply with applicable laws and lawful requests

6) How We Share Information

We do not sell your personal information.

We may share information in the following situations:

A. Service providers (processors)

We use vetted third parties to help run OPR, such as:

• Hosting and infrastructure (servers, storage, CDN)
• Analytics and logging
• Payment processing
• Email delivery and customer support tooling
• Security and fraud prevention

These providers may access personal information only as needed to perform services for us and are contractually required to protect it.

B. Legal and safety

We may disclose information if required to do so by law or if we believe disclosure is necessary to:

• Comply with legal process
• Protect rights, safety, and security of users, the public, or OPR
• Investigate fraud or enforce our agreements

C. Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

7) Cookies and Analytics

We may use cookies and similar technologies for:

• Essential functions: login sessions, security, load balancing
• Preferences: saving settings and user choices
• Analytics: understanding site usage and improving performance

Where required by law, we will request consent for non-essential cookies. You can also control cookies through your browser settings, but disabling certain cookies may break site functionality.

8) Data Retention

We retain personal information only as long as reasonably necessary for:

• Providing the service
• Meeting legal and accounting obligations
• Resolving disputes
• Enforcing agreements
• Maintaining security and preventing abuse

Typical retention approach:

• Account data: retained while your account is active, and for a reasonable period afterward
• Scan inputs/results: retained to provide history and continuity (you may request deletion where applicable)
• Support records: retained for operational continuity and quality control
• Security logs: retained for a limited period consistent with security needs

9) Security

We implement administrative, technical, and organizational safeguards designed to protect personal information, such as access controls, encryption in transit, and secure authentication practices.

No system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your login credentials and using strong passwords.

10) Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion (subject to legal/operational exceptions)
• Withdraw consent (where processing is based on consent)
• Object to or restrict certain processing
• Receive a copy of your information in a portable format (where applicable)
• Appeal or complain to a privacy regulator

To exercise these rights, contact us using the information in Section 14.

11) International Transfers

Your information may be processed in countries other than where you live (for example, where our service providers operate). When we transfer personal information across borders, we use reasonable safeguards consistent with applicable law.

12) Children's Privacy

OPR is not intended for children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to request deletion.

13) Third-Party Links

Our website may include links to third-party sites (including Google resources). We are not responsible for the privacy practices of those third parties. Review their policies before providing information.

14) Contact Us

For privacy questions or requests, contact:

15) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the "Effective date" at the top. Material changes may also be communicated via the website or email (if you have an account).

16) Key Disclosures (Plain-English Summary)