Legal

Privacy Policy

Last updated: 26 March 2026  ·  Effective: 26 March 2026

Short version: We collect only what we need, never sell your data, and you can remove yourself anytime. This policy covers all Opta Local surfaces — optalocal.com, init.optalocal.com, and accounts.optalocal.com.

1. Who we are

Opta AI is the company behind Opta Local, an AI developer tooling platform based in Australia. References to "we", "us", or "Opta" mean Opta AI.

Contact: hello@optalocal.com

2. Data we collect and why

Data Source Purpose Retained
Email address Waitlist signup form (init.optalocal.com) Send launch announcement only Until unsubscribed or launch
Signup timestamp Auto-generated Order early access by queue position Same as above
Source tag Auto-generated (opta-init-landing) Internal analytics on signup origin Same as above
Auth credentials Account registration (accounts.optalocal.com) Identity verification, SSO across Opta apps Until account deletion
Usage metadata Authenticated app sessions Session management, rate limiting, debugging 90 days rolling

We do not collect: payment card data, location data, device fingerprints, or behavioural tracking cookies.

3. How we use your data

4. Infrastructure and sub-processors

Your data is processed by the following trusted sub-processors:

Both are GDPR-compliant services with data processing agreements. No data leaves Australia except via Vercel's global CDN for page delivery.

5. Cookies and storage

We use localStorage (not cookies) on init.optalocal.com to remember if you have already joined the waitlist — so you see your confirmation state after refreshing. This data never leaves your device.

Authenticated sessions on accounts.optalocal.com use HttpOnly session cookies scoped to .optalocal.com. No third-party tracking cookies are used.

6. Your rights

Under Australian Privacy Act 1988, GDPR (EU/UK), and CAN-SPAM:

To exercise any right, email hello@optalocal.com. We will respond within 30 days.

7. Data security

All data is encrypted in transit (TLS 1.3) and at rest. The waitlist table uses row-level security — only authenticated service-role operations can read the full list. The publicly-accessible API only permits insert and self-deletion by email address.

8. Children

Opta Local is developer tooling intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have inadvertently collected such data, please contact us for immediate deletion.

9. Changes to this policy

We will post updates here with a revised "Last updated" date. For material changes, we will notify registered users by email. Continued use of Opta services after a change constitutes acceptance.

10. Contact

For any privacy questions or requests: hello@optalocal.com