Privacy Policy

Introduction

This Privacy Policy describes how Nodiumtech, LLC ("Company," "we," "us," or "our"), the operator of the OppEngine platform, collects, uses, and shares information about you when you use our website and services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use the Service.

Data Controller

For purposes of applicable data protection laws (including GDPR), the data controller is:

What We Collect

Information You Provide

Automatically Collected Data

How We Use Your Data

• Provide the Service: Create and manage your account, process payments, deliver opportunity reports and alerts
• Personalization: Tailor opportunity recommendations based on your stated role, industry, and preferences
• Service Improvement: Analyze usage patterns to improve features, fix bugs, and develop new capabilities
• Communications: Send transactional emails (account confirmations, password resets, billing receipts), product updates, and — only with your consent — marketing emails
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal compliance: Meet obligations under applicable laws, respond to lawful requests from public authorities

We do not use your personal data to train third-party AI models or sell it to data brokers.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following categories of third parties, under binding data processing agreements:

We may also disclose your information if required to do so by law, court order, or governmental authority; to protect the rights, property, or safety of Nodiumtech, LLC, our users, or the public; or in connection with a merger, acquisition, or sale of assets (with notice to you).

Cookies

We use cookies and similar tracking technologies. For full details, see our Cookie Policy. You can manage cookie preferences through our consent banner or your browser settings.

Data Retention

When we no longer have a legal basis to retain data, we securely delete or anonymize it.

Security

We implement industry-standard technical and organizational measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage of passwords (bcrypt) — we never store plain-text passwords
• Access controls limiting data access to authorized personnel only
• Regular security assessments and monitoring
• Stripe-managed PCI-DSS compliant payment processing

Despite these measures, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@oppengine.io.

In the event of a data breach that affects your rights, we will notify you and applicable supervisory authorities within the timeframe required by law (72 hours under GDPR where applicable).

Your GDPR Rights (EEA/UK Users)

If you are in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

To exercise any of these rights, email privacy@oppengine.io. We will respond within 30 days.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the "sale" or "sharing" of personal information — we do not sell personal information
• Right to Limit: Limit use of sensitive personal information
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a California privacy request, email privacy@oppengine.io with the subject "California Privacy Request."

Global Privacy Rights

OppEngine serves users worldwide. In addition to GDPR and CCPA rights, we recognize and respect privacy rights under the following jurisdictions. To exercise any of these rights, contact privacy@oppengine.io.

Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 18. If we learn that we have inadvertently collected personal information from a child under 18, we will promptly delete it. If you believe we have collected such information, please contact us at privacy@oppengine.io.

International Data Transfers

Nodiumtech, LLC is based in the United States. If you access the Service from outside the US, your personal data will be transferred to and processed in the United States, which may have different data protection laws than your country.

We implement the following safeguards for cross-border data transfers:

• EEA/UK/Switzerland: EU Standard Contractual Clauses (SCCs) per EC Decision 2021/914 with our third-party processors
• Turkey (KVKK): Adequate safeguards or explicit consent for international transfers as required by KVKK Article 9
• Brazil (LGPD): Transfers rely on contractual clauses, user consent, or adequacy decisions as applicable
• Canada (PIPEDA): Contractual protections ensuring comparable protection to Canadian standards
• All other countries: We use contractual clauses, your consent, or other legally recognized transfer mechanisms

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Effective date" above at least 14 days before changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated policy.

Contact & Data Protection Inquiries