OPP247 Privacy Policy

Effective Date: January 1, 2026

This Privacy Policy explains what information OPP247 collects, how we use it, and your rights.

1. Information We Collect

• Account information — email, username, password hash, optional display name and avatar.
• Verification data — government ID, selfie, and verification metadata processed by our identity partner (Stripe Identity).
• Content you upload — media files, captions, and metadata.
• Usage data — pages viewed, creators followed, messages sent (metadata only), reports filed.
• Device data — IP address, user-agent string, approximate geolocation derived from IP.
• Payment data — handled by our payment processors; we never store full card numbers.

2. How We Use Your Information

• Operate, maintain, and improve the platform.
• Verify your identity and age.
• Process payments and payouts.
• Enforce our Terms of Service and respond to legal requests.
• Send transactional emails (password resets, verification status, moderation decisions).

3. Sharing

We do not sell your personal data. We share information only with:

• Identity verification partners (Stripe Identity).
• Payment processors.
• Email delivery providers (Resend).
• Cloud storage and hosting providers.
• Law enforcement when legally required.

4. Cookies and Tracking

OPP247 uses essential cookies for authentication and session management. We do not use third-party advertising trackers.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and personal data.
• Export your data in a portable format.
• Withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, email privacy@opp247.com.

6. Data Retention

• Active account data: retained while your account is open.
• Verification documents: retained as required by law (typically 7 years).
• Audit logs and moderation history: retained indefinitely for safety and legal compliance.
• Deleted account data: removed within 30 days, except as required by law.

7. Security

We use industry-standard security: encrypted password hashing (bcrypt), TLS in transit, hashed admin tokens, and strict access controls. No system is 100% secure; you use the platform at your own risk.

8. Children

OPP247 is strictly 18+. We do not knowingly collect data from anyone under 18. If we learn we have, the account is deleted immediately.

9. International Transfers

Our infrastructure is located in the United States. By using OPP247 you consent to your data being processed in the U.S.

10. Changes

We will post any changes to this Policy on this page and update the effective date.

11. Contact

privacy@opp247.com — Data Protection Officer, OPP247.