Privacy Policy
Last updated: — · Draft
Structural draft. Every statement marked [TO CONFIRM] is a factual claim about our data practices that has not yet been verified. These must be filled in and the whole page reviewed by qualified counsel before launch.
1. Who we are
Opstronic [TO CONFIRM] is the legal entity responsible for the information described on this page. Registered address: [TO CONFIRM].
2. What we collect
When you submit the demo form we collect the details you enter: first name, last name, work email, company, company website, phone number, monthly lead volume, and whether you opted in to marketing.
We also collect basic, aggregated usage data about your visit through Vercel Web Analytics. Any additional categories of data collected — cookies, IP address, device identifiers, session recordings — are [TO CONFIRM].
3. How we use it
To respond to your enquiry, arrange and run your demo, and — only where you ticked the opt-in box — to send you occasional product updates. The legal basis we rely on for each purpose is [TO CONFIRM].
4. Where your data is stored
Demo form submissions are delivered to us by email through Resend. Product data is held in a managed PostgreSQL database. The hosting provider and the region in which that database and any backups are stored are [TO CONFIRM]. Whether data is transferred outside that region, and the safeguards applied to any such transfer, are [TO CONFIRM].
5. Third parties that process your data
The following sub-processors are known:
- Resend — delivers demo-request emails
- Vercel — website hosting and Web Analytics
- Managed PostgreSQL provider — [TO CONFIRM]
- Any further sub-processors — [TO CONFIRM]
Whether we sell or share personal information for advertising purposes is [TO CONFIRM].
6. How long we keep it
Retention period for demo-request submissions: [TO CONFIRM]. Retention period for analytics data: [TO CONFIRM]. What happens to your data if you do not become a customer: [TO CONFIRM].
7. Security
Encryption in transit and at rest: [TO CONFIRM] — state the confirmed position here; the product enforces TLS on its database connection and encryption at rest is the hosting provider's default, but both need verifying before this page asserts them.
Other technical and organisational measures — access controls, breach-notification process, penetration testing — are [TO CONFIRM].
8. Your rights
Subject to the law that applies to you, you may be able to request access to, correction of, or deletion of your information, object to processing, or withdraw marketing consent. The exact rights available depend on your jurisdiction: [TO CONFIRM].
To make a request, contact us at [TO CONFIRM]. We will respond within [TO CONFIRM].
9. Marketing communications
Marketing emails are sent only if you ticked the opt-in box on the demo form. Every message includes an unsubscribe link, and you can withdraw consent at any time.
10. Changes to this policy
We may update this policy. How we notify you of material changes is [TO CONFIRM].
11. Contact
Questions about this policy: [TO CONFIRM] (email address). Data protection officer or EU/UK representative, if one is appointed: [TO CONFIRM].