Privacy Policy

This policy explains what personal information Hive Web Design LLC ("we") collects through Opprio, how we use it, and your choices. We keep it short because we collect little: only what we need to run the service. We don't sell your personal information, and we don't share it for targeted advertising.

What we collect

• Account details: your email address, and your password, which is stored only as a one-way hash. We don't ask for your name.
• Your alert rules and results: the filters you set up, and which opportunities matched them and when they were emailed to you.
• Saved notices: the notices you save, the bid status you set for each (for example Bidding or Won), and when we last emailed you about changes to them.
• Billing records: your plan, subscription status, and the customer and subscription IDs Stripe gives us. Card details are entered on Stripe's own pages and never reach our servers. Stripe collects your email address and the billing details it needs (such as the name, ZIP or postal code and country on your card) under its own privacy policy.
• IP address and browser: we use your IP address briefly, in memory, to rate-limit sign-in and password-reset attempts. We don't store it, or your browser details, in our database, except as a fingerprint when you start a free trial (below). Our hosting provider's request logs record each request's IP address, browser and page path (not query strings) for up to 30 days.
• Free-trial fingerprints: when you start a free trial, we keep a one-way, keyed fingerprint of your email address and of the IP address you started it from, so the same person can't start repeat trials. A fingerprint can't be turned back into your email or IP address, isn't linked to your account, and stays after you delete your account (that's its purpose). During checkout, the IP fingerprint travels with your subscription at our payment processor, Stripe, until the trial starts; if you don't finish checkout, we keep nothing.

Cookies and tracking

We use only essential cookies, which keep you signed in and secure your session. We don't use advertising cookies, analytics trackers or third-party tracking, and we don't track you across other websites. Because there's no tracking to switch off, we don't change our behavior in response to browser "Do Not Track" signals.

To see which pages are used, our own server counts page views without cookies: for each view it adds one to a daily total for that page and, on the first page of a visit, for the website you came from (for example, a search engine). We don't store your IP address, a cookie, an identifier, your browser details or anything that links a view to you or to your account, and nothing is shared with anyone else.

How we use it

• to provide Opprio: matching opportunities to your rules, sending your digests, and alerting you when a notice you saved changes;
• to send account emails (confirmation, password reset, billing notices) and respond to support requests;
• to process payments, through Stripe;
• to keep the service secure and prevent abuse; and
• to comply with the law.

Who we share it with

Only the service providers that run Opprio for us, and only what each needs:

• Railway: application hosting and database (United States).
• Stripe: payments and subscription billing.
• Resend: sending email. Resend keeps copies of the emails we send (which include your alert rule names and the notices they matched), and their delivery status, for up to 30 days. Open and click tracking are turned off.
• Cloudflare: DNS, and forwarding mail sent to our support address.
• Google (Gmail): the inbox that receives our support email.

We may also disclose information if the law requires it, to protect our users or service, or as part of a sale or merger of the business (in which case this policy would continue to apply to your information).

How long we keep it

We keep only what's needed, for as long as it's needed:

• Your account and alert rules: while you have an account. When a paid plan ends, alert rules beyond the free plan's one are deleted.
• Saved notices and bid statuses: until you remove them or delete your account. Saved state and local bids are removed when you move to a plan without them.
• Match history: removed with the notice, once a notice is past its deadline (or has none) and hasn't been updated by its source for 180 days. Notices you've saved are kept with your saved notices.
• Changes detected on saved notices (shown on your Saved page and in change emails): 180 days.
• Free-trial fingerprints: email fingerprints for 2 years, IP fingerprints for 90 days.
• Sign-in sessions: they expire after 7 days without use and are deleted daily after that.
• Email confirmation and password-reset links: valid for 1 hour, and deleted once expired. We store them only in hashed form.
• Accounts never confirmed by email: deleted after 7 days.
• Hosting request logs and email copies: up to 30 days, kept by Railway and Resend respectively.
• Database backups: up to 27 days, then they expire automatically.
• A record that an account was deleted: an internal ID only, with no contact details, for 30 days. It lets us re-delete the account if we ever restore a backup.

When you delete your account, your profile, alert rules, saved notices and match history are removed immediately, or, if you have a paid subscription, at the end of the period you've paid for, so you keep the access you paid for. Copies in backups expire within 27 days. Stripe keeps billing records for as long as tax and accounting law requires.

Your choices and rights

• Emails: every digest has an unsubscribe link, and you can turn digests on or off from your dashboard. Account and billing emails are sent while you have an account.
• Delete your account: self-service, any time, from Account settings.
• Access, correct or get a copy of your information: email support@opprio.com and we'll respond within 30 days.
• California residents have the right to know, access, correct and delete their personal information, and not to be discriminated against for exercising those rights. We don't sell or share personal information as those terms are defined in California law. To make a request, email support@opprio.com.

Security

We protect your information with encrypted connections (HTTPS), hashed passwords and reset links, required email verification, a database that isn't reachable from the internet, daily backups, by collecting as little as we can, and by limiting access to what's needed to run the service. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.

Children

Opprio is for businesses and isn't directed to anyone under 18. We don't knowingly collect information from children.

Where your data is stored

Opprio is operated from, and stores data in, the United States (our hosting and database run in the US East region).

Changes to this policy

If we make material changes, we'll email you or show a notice in Opprio before they take effect.

Contact

Privacy questions or requests: support@opprio.com.