Privacy Policy

1. Introduction

1.1. Purpose of Policy

Optiwing ("us", "we", "Company", "optiwing", "optiwing.com") is committed to respecting the privacy rights of visitors and other users of optiwing.com and its subdomains (the "Site"). We created this Privacy Policy (this "Policy") to give you confidence as you visit and use the Site, and to demonstrate our commitment to fair information practices. This Policy is only applicable to the Site, and not to any other websites that you may be able to access from the Site, each of which may have data collection and use practices and policies that differ materially from this Policy.

1.2. Notice Concerning Children

PLEASE NOTE: We are a general audience site, and do not direct any of our content specifically at children under 13 years of age pursuant to the Children's Online Privacy Protection Act of 1998. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

2. Information Collection Practices

2.1. What Basic Information Does Optiwing Collect?

In operating the Site, we collect personal information from you in the following situations:

• Mailing List: If you sign up to our mailing list, we collect your email address.
• Contact Form: If you contact us via the "contact" page, you will provide us with your name and email address.
• Blog Comments: If you leave a comment on a blog post, you may be asked for a name and other information.
• Account Registration: If you sign up for an account to use our application, we will collect your name, email, country of origin, and you may be asked for additional information.
• Payment Information: When you subscribe to a paid plan, payment information is securely processed through Stripe. We do not store complete payment card numbers.
• OAuth Information: When you sign in with Google, we receive your name, email address, and profile picture from your Google account.

You are not required to provide us with information via these methods to browse and enjoy the public portions of the Site.

2.2. What Additional Information Do We Collect?

(a) Automatic Collection

Our servers automatically recognize visitors' domain names and IP addresses (the number assigned to computers on the Internet). No personal information about you is revealed in this process. The Site may also gather anonymous "traffic data" that does not personally identify you, but that may be helpful for marketing purposes or for improving the services we offer.

(b) Cookies

From time to time, we may use the standard "cookies" feature of major browser applications that allows us to store a small piece of data on your computer about your visit to our Site. Cookies help us learn which areas of our Site are useful and which areas need improvement through programs including, but not limited to, Google Analytics. We may also use cookies from third party social sites and programs including, but not limited to, Facebook, Google Plus and Twitter. You can choose to disable cookies through your browser or independent programs available online. However, if you choose to disable this function, your experience at our Site may be diminished as some features may not work as they were intended.

(c) Sponsors and Advertisers

We may decide to accept sponsorship and advertisements on the Site. Should this occur, you should assume said sponsors and advertisers will be given access to the impressions and click data on their marketing pieces. Your personally identifiable information will never be revealed to them by us.

3. Use and Sharing of Information

3.1. What Do We Do With Collected Information?

(a) Personal Information

We will not share your personal information with any third parties without your consent, except as necessary to provide you with the services offered by us or to comply with the law. Examples of such services include, but are not limited to, third parties providing:

• Payment processing (Stripe)
• Database hosting and storage (MongoDB)
• Email facilitation and promotions (SendGrid)
• File storage and management (UploadThing)
• Website hosting and infrastructure

(b) Anonymous Information

We use anonymous information to analyze our Site traffic. In addition, we may use anonymous IP addresses to help diagnose problems with our server, to administer our site, or to display the content according to your preferences. Traffic and transaction information may also be shared with business partners or advertisers on an anonymous basis.

(c) Use of Cookies

Promotions or advertisements displayed on our site may contain cookies. We do not have access to or control over information collected by outside advertisers on our site.

(d) Disclosure of Personal Information

We may disclose any information we have for you if required to do so by law or in the good-faith belief that such action is necessary to (1) conform to the edicts of the law or comply with legal process served on us, (2) protect and defend our rights or property or the users of the Site, or (3) act under exigent circumstances to protect the safety of the public or users of the Site.

(e) Sale of Information

In order to accommodate changes in our business, we may sell or buy portions of the Site or our company, including the information collected through this Site. If Company or substantially all of its assets are acquired by a third party, user information will be one of the assets transferred to the acquirer.

3.2. Do We Share Your Information with Third Parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.

However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

3.3. Can You Opt-Out of Receiving Email from Us?

We respect your privacy and give you an opportunity to opt-out of receiving announcements of certain information. Users may opt-out of receiving any or all communications from us by contacting us at info@optiwing.com or using the Unsubscribe link in certain email communications.

4. Confidentiality and Security

4.1. Protection of Your Information

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information to prevent the loss, misuse, and alteration of the information that we obtain from you. This includes:

• Encryption of data in transit using SSL/TLS
• Encryption of data at rest in our databases
• Secure authentication using NextAuth with encrypted password storage
• PCI DSS-compliant payment processing through Stripe
• Restricted access to personal information on a need-to-know basis

However, we make no assurances about our ability to prevent any such loss to you or to any third party arising out of any such loss, misuse, or alteration. No method of transmission over the Internet or electronic storage is 100% secure.

4.2. How Do We Protect Your Information?

We use reasonable administrative, technical, personnel and physical measures to safeguard personal information in our possession against loss, theft and unauthorized use, disclosure or modification.

5. Third Party Websites

5.1. Our Site May Contain Links to Third Party Websites

We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements. From time-to-time, the Site may contain links to other websites. If you choose to visit those websites, it is important to understand our privacy practices and terms of use do not extend to those sites. It is your responsibility to review the privacy policies at those websites to confirm that you understand and agree with their practices.

6. Accessing, Updating, and Deleting Your Personal Information

6.1. How Can You Access and Update Your Personal Information?

You may request access to all your personally identifiable information that we collect online and maintain in our database by emailing us at support@optiwing.com. We use this procedure to better safeguard your information. You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error.

6.2. How Can You Delete Your Personal Information?

You may request that we delete your personal information by emailing us at support@optiwing.com. Please note that some information may remain in our records after deletion of your account as required for legal compliance, dispute resolution, and to enforce our agreements.

7. Your Privacy Rights

7.1. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at privacy@optiwing.com.

7.2. European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access and receive a copy of your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@optiwing.com. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period after closure to comply with legal obligations
• Usage Data: Typically retained for 2 years for analytics purposes
• Transaction Records: Retained for 7 years to comply with tax and financial regulations
• Marketing Communications: Retained until you unsubscribe or request deletion

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

10. Contact Information and Policy Updates

10.1. Contacting Us

If you have any questions about this Policy or our practices related to this Site, please contact us:

10.2. Updates and Changes

We reserve the right, at any time, to add to, change, update, or modify this Policy to reflect changes in our Privacy Policy. We shall post any such changes on the Site in a conspicuous area. You may then choose whether you wish to accept said policy changes or discontinue using the Site. Any such change, update, or modification will be effective 30 days after posting on the Site. It is your responsibility to review this Policy from time to time to ensure that you continue to agree with all of its terms. If you have signed up for email communications from us, we will notify you of the privacy policy changes by email as well.