Back to home

Privacy Policy

Last updated · September 2026

In plain words

We collect only what the service needs to work: account details and production-organisation data. Your CAD files stay on your network. We do not sell data and we do not do ad tracking.

1. Data controller

The controller for the personal data described here is OpifexHQ (a business being incorporated; full company details will be posted here once incorporation is complete, before online sales open). Contact: support@opifexhq.com.

2. What we collect — site visitors

If you submit the demo form: name, company, email, phone and your message — solely so we can get in touch (legal basis: pre-contractual steps at your request). The site uses only anonymous traffic statistics (Vercel Analytics) — no advertising cookies, no third-party trackers.

3. What we collect — application users

Accounts: full name, email, role, hashed password, sign-in details (last seen, a device identifier used to bind the desktop seat).

Operational data: which production actions were taken (e.g. who advanced a part and when) — this is a core product feature (traceability) and is visible only inside your company.

Error reports: when the app or the server hits an error, a technical report is sent automatically so we can fix it — the error, the app version, your company name, an internal user identifier (not your email), the computer name and the last lines of the log, which may contain file names or part numbers. Never the CAD files themselves.

Problem reports: if you send a report from the app, it also includes what you write, your email and the log file for diagnosis.

Legal basis: performance of the contract and our legitimate interest in keeping the service secure.

4. Your production data

The cloud stores organisation data (BOMs, flows, orders, stock, history, small preview images). CAD files (SolidWorks, DXF, STEP, Pack and Go) stay on your own file server — they are not uploaded to the cloud. For your users’ personal data (e.g. names, actions) we act as a processor on behalf of your company; a Data Processing Agreement (DPA) is available on request.

5. Where it is hosted

The database and API are hosted in a DigitalOcean data center in Frankfurt (EU). The web app is hosted on Vercel. Error reports are stored with Sentry (Functional Software, Inc.) in its EU data region (Germany). We use these providers as processors; we do not share data with third parties for advertising and we never sell data.

6. How long we keep it

Demo-form contact details: up to 12 months from last contact. Account and production data: for as long as your company’s subscription is active and up to 30 days after (export window) — then permanently deleted. Technical logs and error reports: up to 90 days.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Email support@opifexhq.com and we will respond within the GDPR deadlines. If you feel we have not helped, you may contact the Hellenic Data Protection Authority (dpa.gr).

8. Changes

If this policy changes materially, we will announce it on the site and — for application users — in the app.

Questions about your data? support@opifexhq.com