Privacy Policy

In plain words

We collect only what the service needs to work: account details and production-organisation data. Your CAD files stay on your network. We do not sell data and we do not do ad tracking.

1. Data controller

The controller for the personal data described here is the business operating OpifexHQ (full details will be posted here before online sales open). Contact: support@opifexhq.com.

2. What we collect — site visitors

If you submit the demo form: name, company, email, phone and your message — solely so we can get in touch (legal basis: pre-contractual steps at your request). The site uses only anonymous traffic statistics (Vercel Analytics) — no advertising cookies, no third-party trackers.

3. What we collect — application users

Accounts: full name, email, role, hashed password, sign-in details (last seen, a device identifier used to bind the desktop seat).

Operational data: which production actions were taken (e.g. who advanced a part and when) — this is a core product feature (traceability) and is visible only inside your company.

Optionally: if you send a problem report from the app, technical log files are included for diagnosis.

Legal basis: performance of the contract and our legitimate interest in keeping the service secure.

4. Your production data

The cloud stores organisation data (BOMs, flows, orders, stock, history, small preview images). CAD files (SolidWorks, DXF, STEP, Pack and Go) stay on your own file server — they are not uploaded to the cloud. For your users’ personal data (e.g. names, actions) we act as a processor on behalf of your company; a Data Processing Agreement (DPA) is available on request.

5. Where it is hosted

The database and API are hosted in a DigitalOcean data center in Frankfurt (EU). The web app is hosted on Vercel. We use these providers as processors; we do not share data with third parties for advertising and we never sell data.

6. How long we keep it

Demo-form contact details: up to 12 months from last contact. Account and production data: for as long as your company’s subscription is active and up to 30 days after (export window) — then permanently deleted. Technical logs: up to 90 days.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Email support@opifexhq.com and we will respond within the GDPR deadlines. If you feel we have not helped, you may contact the Hellenic Data Protection Authority (dpa.gr).

8. Changes

If this policy changes materially, we will announce it on the site and — for application users — in the app.