Privacy & Security

Our commitment to your data

Opereva is built to empower local businesses with total privacy, transparency, and enterprise-grade security for every customer interaction.

Policy

Privacy policy

Find out which data Opereva collects—how we protect it, when it's shared, and your rights to it.

Policy

Cookie policy

Opereva uses essential cookies to provide you with a better, faster, and safer experience.

Rights

User rights

We are compliant with global privacy regulations including GDPR and CCPA, giving you full control over your data.

Policy Document

1. Privacy Policy

Effective Date: July 2026

Opereva ("Platform", "we", "us") respects the privacy of business owners ("Operators") and their customers ("Visitors"). This policy outlines our standards for collecting, using, and safeguarding personal information.

A. Information We Collect

  • Operator Accounts: Name, business email, business phone number, address, and menu/service parameters required to set up your branded PWA.
  • Customer Orders & Bookings: Customer name, phone number, order items, and pickup/delivery instructions.
  • Payment Data: Payment details are processed directly by Stripe Connect Express. Credit card numbers never enter or touch Opereva database servers.
  • Telemetry & Usage: Anonymized interaction metrics to maintain platform stability and performance.

B. Third-Party Service Sub-processors

Opereva relies on trusted, enterprise-certified sub-processors:

  • Supabase Inc. — Encrypted database and secure media storage.
  • Stripe, Inc. — PCI DSS Level 1 payment infrastructure.
  • Resend Technologies — Transactional email notifications.
  • PostHog, Inc. — Privacy-first application telemetry.
Cookie & Storage Guide

2. Cookie Policy

Opereva uses cookies and browser local storage technologies to maintain secure authentication and provide an instant, app-like Progressive Web App (PWA) experience.

  • Essential Session Cookies: Used to keep operators authenticated in their dashboard (`@supabase/ssr` cookies). Required for core security.
  • Local PWA Storage & IndexedDB: Stores customer preferences, cart state (`pway.customer`), and cached menu items so your app loads instantly even on poor mobile connections.
Global Standards

3. User Rights (GDPR & CCPA Compliance)

Regardless of your geographic location, Opereva extends global privacy rights to all business operators and end-user customers:

  • Right to Access & Portability: You have the right to request a complete machine-readable copy of your personal data, transaction history, or customer lists.
  • Right to Erasure ("Right to be Forgotten"): You can request permanent deletion of your business account or personal customer record from Opereva servers at any time.
  • Right to Opt-Out & Rectification: You may update incomplete information or opt out of non-essential communications directly from your account settings.