OpQuest

© 2026 OpQuest. All rights reserved.

Privacy PolicyTerms of ServiceCookie PolicyContact

Privacy Policy

Effective Date: January 17, 2026

Last Updated: January 17, 2026

OpQuest ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ecommerce operations platform and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.


1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

  • Account Information

    Name, email address, password, company name, and billing address when you create an account.

  • Profile Information

    Job title, phone number, and profile preferences you choose to provide.

  • Payment Information

    Credit card details, billing address, and other payment-related information processed through our payment provider (Stripe).

  • Communications

    Information you provide when contacting us for support, feedback, or other inquiries.

  • Third-Party Account Credentials

    OAuth tokens and credentials when you connect third-party services like Amazon Seller Central or Amazon Vendor Central to our platform.

1.2 Information We Collect Automatically

When you use our Service, we automatically collect:

  • Usage Data

    Pages visited, features used, actions taken, time spent, and interaction patterns.

  • Device Information

    Browser type, operating system, device type, unique device identifiers, and IP address.

  • Log Data

    Server logs including access times, error logs, and referring URLs.

  • Cookies and Similar Technologies

    We use cookies, web beacons, and similar technologies. See our Cookie Policy for details.

1.3 Information from Third-Party Services

When you connect third-party services to OpQuest, we collect data from those services:

  • Amazon Seller Central / Vendor Central

    Sales data, inventory levels, order information, product catalog data, and business reports you authorize us to access through Amazon's Selling Partner API (SP-API).

  • Payment Processors

    Transaction confirmations and subscription status from Stripe.


2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Maintain Our Service

  • Create and manage your account
  • Process transactions and send related information
  • Sync and display your ecommerce data from connected platforms
  • Generate analytics, forecasts, and business insights
  • Provide customer support and respond to inquiries

2.2 To Improve and Develop Our Service

  • Analyze usage patterns and trends
  • Develop new features and functionality
  • Conduct research and analysis
  • Test and troubleshoot new products and features

2.3 To Communicate With You

  • Send administrative information (updates, security alerts, support messages)
  • Send marketing communications (with your consent, where required)
  • Respond to your comments, questions, and requests

2.4 To Protect Our Service and Users

  • Detect, prevent, and address fraud, security issues, and technical problems
  • Enforce our Terms of Service and other policies
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

  • Supabase

    Database hosting, authentication, and data storage (based in the United States).

  • Stripe

    Payment processing and subscription management.

  • Microsoft Azure

    Cloud infrastructure and background processing services.

  • Vercel

    Application hosting and delivery.

  • Analytics Providers

    To help us understand usage patterns and improve our Service.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership.

3.4 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.


4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We will also retain and use your information as necessary to:

  • Comply with our legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce our agreements
  • Maintain business records for a reasonable period

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes.


5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication mechanisms including multi-factor authentication
  • Regular security assessments and penetration testing
  • Access controls and audit logging
  • Employee training on data protection and security practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.


6. Your Rights and Choices

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

6.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

6.3 Deletion

You have the right to request deletion of your personal information. You can delete your account through your account settings, or by contacting us at privacy@opquest.io.

6.4 Restriction and Objection

You have the right to restrict or object to certain processing of your personal information.

6.5 Marketing Communications

You can opt out of receiving marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your preferences in your account settings.

6.6 Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent tool. See our Cookie Policy for more details.


7. European Economic Area (EEA) Users - GDPR Rights

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis for Processing

    We process your data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, or (d) our legitimate interests.

  • Data Portability

    You can request your data in a portable format.

  • Right to Lodge a Complaint

    You have the right to lodge a complaint with your local data protection authority.

  • Withdraw Consent

    Where we rely on consent, you can withdraw it at any time without affecting prior processing.

For data transfers outside the EEA, we use Standard Contractual Clauses approved by the European Commission or other legally approved mechanisms.


8. California Residents - CCPA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know

    You can request information about the categories and specific pieces of personal information we have collected about you.

  • Right to Delete

    You can request deletion of your personal information, subject to certain exceptions.

  • Right to Correct

    You can request correction of inaccurate personal information.

  • Right to Opt-Out of Sale/Sharing

    We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

  • Right to Non-Discrimination

    We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, please contact us at privacy@opquest.io or use the contact information below. We will respond to verifiable requests within 45 days.


9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we take appropriate safeguards to ensure your information remains protected, including:

  • Standard Contractual Clauses approved by the European Commission
  • Data Processing Agreements with our service providers
  • Compliance with applicable data protection frameworks

10. Third-Party Services and Links

Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

Key third-party services we integrate with include:

  • Amazon Seller Central / Vendor Central

    When you connect your Amazon account, we access your Amazon data through Amazon's Selling Partner API in accordance with Amazon's API Terms of Service.

  • Stripe

    Payment processing is handled by Stripe in accordance with Stripe's Privacy Policy.


11. Children's Privacy

Our Service is not directed to individuals under the age of 16 ("Children"). We do not knowingly collect personal information from Children. If you are a parent or guardian and you are aware that your Child has provided us with personal information, please contact us. If we become aware that we have collected personal information from Children without verification of parental consent, we will take steps to remove that information from our servers.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide additional notice, such as an email notification or a prominent notice on our Service.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.


13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

OpQuest

Email: privacy@opquest.io

Address: Phoenix, AZ, United States

For data protection inquiries in the EU, you may also contact your local supervisory authority.