Back

Privacy Policy

Last Updated: February 5, 2025

This Privacy Policy explains how Opineko ("we", "us", or "our") collects, uses, and protects information when you use our website at https://opineko.com and our review management platform (collectively, the "Service").

1. Information We Collect

1.1 Information from Business Users (Account Holders)

When you create an account and use our Service, we collect:

  • Account Information: Name, email address, and password
  • Business Information: Business name, logo, and review platform URLs you configure
  • Payment Information: Payment details processed securely through our payment provider (Stripe). We do not store full credit card numbers.
  • Usage Data: How you interact with the Service, including pages visited, features used, and actions taken

1.2 Information from Review Submitters (Your Customers)

When someone submits feedback through a review page you created, we collect:

  • Feedback Data: Star ratings and written feedback/comments
  • Optional Contact Info: Name, email, or phone number if the reviewer chooses to provide it
  • Device Information: Browser type, device type, and general location (country/region) for analytics
  • Session Data: Temporary session identifiers to manage the review flow

1.3 Information Collected Automatically

We automatically collect certain information when you use the Service:

  • Log Data: IP address, browser type, pages visited, time spent, and referring URLs
  • Cookies: We use cookies and similar technologies for authentication, preferences, and analytics
  • Analytics: We use Plausible Analytics, a privacy-focused analytics service that does not use cookies or collect personal data

2. How We Use Your Information

2.1 For Business Users

  • Provide, maintain, and improve the Service
  • Process payments and manage subscriptions
  • Send transactional emails (account confirmations, password resets, subscription updates)
  • Send Telegram notifications about new reviews (Premier plan, if configured)
  • Provide customer support
  • Analyze usage to improve features and user experience
  • Detect and prevent fraud or abuse

2.2 For Review Submitters

  • Display feedback to the business owner through their dashboard
  • Route satisfied customers to third-party review platforms (if they choose to proceed)
  • Enable businesses to respond to or follow up on feedback (if contact info provided)

3. Information Sharing

We do not sell your personal information. We may share information in limited circumstances:

  • With Business Owners: Review submitters' feedback and any contact information they provide is shared with the business that created the review page
  • Service Providers: We use trusted third-party services to operate our business:
    • Stripe for payment processing
    • MongoDB for data storage
    • Vercel for hosting
    • Telegram for notifications (Premier plan)
    • Plausible for privacy-focused analytics
  • Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety
  • Business Transfers: If Opineko is acquired or merged with another company, your information may be transferred as part of that transaction

4. Data Retention

  • Account Data: Retained while your account is active and for a reasonable period after to comply with legal obligations
  • Review Data: Retained as long as the business account is active. Business owners can export or delete their review data at any time
  • Session Data: Temporary review sessions expire after 24 hours

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Regular security assessments
  • Access controls limiting who can access personal data

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 For Business Users

  • Access: View your account information in your dashboard
  • Update: Modify your account and business settings at any time
  • Export: Download your review data in CSV format
  • Delete: Request deletion of your account by contacting us
  • Unsubscribe: Opt out of marketing emails (transactional emails cannot be opted out)

6.2 For Review Submitters

  • You can choose whether to provide optional contact information
  • To request access to or deletion of feedback you submitted, contact the business directly or email us

6.3 Cookies

You can control cookies through your browser settings. Disabling cookies may affect certain features of the Service.

7. Third-Party Links

Our Service may contain links to third-party review platforms (Google, TripAdvisor, Yelp, Facebook, Trustpilot, etc.). These platforms have their own privacy policies, and we are not responsible for their practices. We encourage you to review their privacy policies.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@mg.opineko.com

Specific Disclosures

For California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email above.

For European Residents (GDPR)

If you are in the European Economic Area, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is typically consent, contract performance, or legitimate interests. To exercise your rights, contact us at the email above.