Privacy Policy
Last updated: July 14, 2026
Opula (the "Company") collects and uses only the minimum personal data needed to provide the Opula service, and complies with applicable law. This policy explains what information the Company handles and how.
1. Information we collect
- Account information: the email address and identifier provided by Google sign-in.
- Asset data you enter: holdings, transactions, balances, cash flow and other information you record yourself.
- Usage records: access logs for operating and improving the Service, usage statistics via analytics tools (Google Analytics, Vercel Analytics, Amplitude), and error diagnostics via Sentry. Analytics events are keyed to your account identifier so that product usage can be understood per user; they do not carry your asset data.
2. How we use it
- Providing the Service: storing your asset records and computing analysis such as net worth, portfolio and risk
- Account authentication and paid-plan entitlement management
- Operating the Service, responding to incidents, and improving quality
3. Storage and protection
User data is stored on Supabase (PostgreSQL) infrastructure and isolated per user with Row-Level Security, so only you can access it. The Company does not sell personal data to third parties in a form that identifies the data subject.
4. Payment information
Payments are processed through Lemon Squeezy (Merchant of Record). Payment method details such as card numbers are collected and handled by Lemon Squeezy, and the Company does not store them. Lemon Squeezy's handling of personal data follows that company's policy.
5. Third parties and processing
The Company does not provide personal data to third parties except where there is a legal basis or the user has consented. The following processors are used to operate the Service: Supabase (data storage), Vercel (hosting), Lemon Squeezy (payments), Google, Vercel and Amplitude (usage statistics), and Sentry (error diagnostics).
Separately, Opula is used through an AI assistant such as Claude or ChatGPT. When the assistant calls an Opula tool, the result enters your conversation with that assistant, and its handling is governed by that provider's own privacy policy rather than this one.
6. Retention and deletion
Personal data is retained for the period the Service is used. When a user deletes their account or requests deletion, the data is deleted without delay, except where a retention obligation exists under applicable law.
7. Your rights
You may request access to, correction of, deletion of, or suspension of processing of your personal data. Requests can be submitted to the contact below.
8. Changes to this policy
If this policy changes, we will post it on this page and update the last-updated date.
9. Contact
Privacy inquiries: support@opula.io