Privacy Policy

In plain words

We process data so you can use your account, page, and payments, and so we can protect the Service from abuse.

We do not sell personal data.

Full card details are handled by the payment provider, not stored on our servers.

You can request access, correction, or deletion via t.me/user4454.

1. Who is responsible

The data controller is the owner of opla.top. Privacy contact: t.me/user4454.

This Policy explains what data we collect, why, on what legal bases, with whom we may share it, how long we keep it, and what rights you have.

It applies to dashboard users, public-page owners, website visitors, and people who open payment links.

2. Data we process

Google sign-in data: name, email, account ID, avatar (if available). We never receive or store your Google password.

Service profile: username, bio, portfolio, service texts, UI language, and other details you provide.

Operational data: payment links, amounts, statuses, transaction IDs, withdrawal requests, phone and bank details you enter for payouts.

Card details: full card numbers are not stored on opla.top servers. They are processed by the payment provider (e.g. Stripe).

Support: messages and files you send in chat.

Technical data: IP, device/browser type, request times, cookies and similar IDs, security logs.

3. Why we process data

To run accounts; show public pages and portfolios; process client-payment fees where applicable; handle payouts; provide support; prevent fraud; meet legal and payment-partner requirements (including KYC/AML when needed); understand site usage (analytics with consent); and improve the product.

4. Legal bases

Contract: data needed to provide the Service.

Legitimate interests: security, anti-abuse, product improvement — balanced against your rights.

Consent: e.g. analytics cookies via the banner.

Legal obligation: responses to authorities and mandatory financial retention.

5. Sharing

We do not sell personal data.

We may share with: payment providers (Stripe and similar) for payments, payouts, and compliance; hosting/infrastructure; analytics (e.g. Yandex Metrica) if you accept analytics cookies; Google as the sign-in provider; authorities only when legally required.

For cross-border transfers we use safeguards required by applicable law.

6. Retention

Account data while the account is active, plus a reasonable period for deletion, disputes, and legal duties.

Financial and compliance records may be kept longer under tax and payment rules.

Security logs for a limited investigation window.

Cookies: see the Cookie Policy (/cookies).

7. Security

HTTPS, access limits, session controls, logging of important actions, and internal data-handling rules.

No system is perfectly secure. If an incident affects your rights, we will take notification steps required by law.

8. Your rights

Where law applies (including GDPR), you may request access, correction, erasure, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent (without affecting prior lawful processing).

Contact t.me/user4454. We may verify identity. We typically respond within 30 days unless law sets another deadline.

You may also complain to your local data-protection authority.

9. Children

The Service is not for anyone under 18. We do not knowingly collect children’s data. If we learn we have, we will delete it.

10. Changes

We may update this Policy. The current version is posted here with the date. Material changes may also be announced on the site or in the dashboard.