Effective date: 14 October 2025
This policy explains what we collect, why, how we share it, international transfers, your rights, how to contact us, and how to exercise deletion/objection choices. If a product requires additional disclosures (e.g., specific API data categories), those appear in that product's own privacy notice.
Depending on context, we may act as a controller (we determine purposes and means of processing) or a processor (we process solely on another controller's documented instructions). When you connect a social or other third‑party platform, we access and process data on your behalf only to deliver the requested functionality and in compliance with the platform's developer terms and policies.
We do not intentionally collect sensitive categories unless you proactively provide them (e.g., in a support message). Please avoid sharing sensitive data with us unless strictly necessary.
We obtain data directly from you, from platforms you choose to connect, and from cookies/SDKs with consent where required. We do not purchase personal data from data brokers.
When you connect a third‑party platform (e.g., a social network):
We share personal data with:
We do not sell personal information and we do not share it for cross‑context behavioral advertising.
We may transfer personal data internationally (e.g., EEA↔US/UK). Where required, we use appropriate safeguards such as Standard Contractual Clauses and perform transfer risk assessments. Some of our US vendors may participate in the EU‑U.S. Data Privacy Framework; where they do, we rely on their certification.
We apply industry‑standard controls: encryption in transit and at rest, least‑privilege access, role‑based controls, logging/monitoring, vulnerability management, and incident response. While no online service is 100% secure, we continually improve our safeguards.
We retain personal data only as long as needed for the purposes above, then delete or anonymize it. Typical periods:
Where immediate deletion is not feasible (e.g., encrypted backups), data is isolated and deleted per backup rotation schedules.
Depending on your location, you may have rights to request access, rectification, deletion, restriction, or portability of your personal data, and to object to processing (including direct marketing). You can:
You also have the right to lodge a complaint with your local supervisory authority. We will respond to requests within the timeframes required by law.
For California residents, in the preceding 12 months we have collected the categories described above. We do not sell personal information and do not share it for cross‑context behavioral advertising. You may exercise the rights to know/access, delete, correct, and to opt out of sale/share (not applicable here) and non‑discrimination. You may use an authorized agent if they provide proof of authorization. To submit a request, contact compliance@opuna.com.
We use necessary cookies to operate the sites and, with consent where required, functional and analytics cookies to improve performance. You can manage preferences through your browser and (where available) our cookie consent banner. You can manage cookie preferences through your browser settings and, where present, via our on‑site consent banner.
Our services and sites are not directed to children, and we do not knowingly collect personal data from anyone under 13 (or higher local age where applicable).
Controller: Web Opuna Ltd
Email: compliance@opuna.com
Postal: Anastasiou Sioukri, 1, THEMIS COURT, 4th floor, Office 402, 3105 Limassol, Cyprus
We will update this policy from time to time and post the effective date at opuna.com/privacy-policy.html. If changes materially affect your rights, we will provide additional notice.