Privacy Policy

Who we are

OPTES is an independent Iraqi project. For any question about your privacy or any request about your data, write to [email protected].

What we collect

• Your account. When you sign in with Google we receive your e-mail address and your name as shown on your Google account. We never receive your Google password.
• Your devices. Each device gets its own key. We store a hash of the key, not the key itself, and a device can be switched off from the server.
• Usage. We record what is needed to apply your plan, limits and credit: when a request was made, its type, size, outcome and cost.
• Payments. You pay in Iraqi dinars on the Wayl payment page. We never receive or store your card number. We keep a record of the transaction: amount, status and reference.
• What you write to OPTES. The text of your requests and the files you give it are sent to our server and on to the model provider that produces the answer; the answer cannot be produced otherwise.
• Error reports. If you send a report from the app, we store it encrypted.
• Technical logs. Operation and security logs on the server (time and status of requests, and errors) so we can find faults and abuse.

The desktop app

Your conversations, files and projects are kept on your own device in a local database. Sign-in tokens are sealed with Windows encryption (DPAPI, through Electron safeStorage). Today conversations are not synced to our servers; what reaches us is what you send to be answered, as described above. If we ever add optional sync, it will work only with your consent and we will update this page before turning it on.

The web edition

Each account has an isolated workspace where your web files and conversations are kept, running on cloud infrastructure that OPTES rents. Your account, plan, credit and invoices are shared between the app and the web; conversations and files are not shared between them today.

Who we share data with

We do not sell your data and we show no advertising. We share only what is needed to run the service, with:

• Third-party AI model providers: they receive the text of the request in order to answer it. The OPTES engine does not name them inside the conversation.
• Google for sign-in, and Wayl to complete payment.
• The hosting and cloud providers that run our server and the web workspaces.
• Public authorities, if the law requires it.

How long we keep it

We keep account and usage data while your account exists, and some of it longer where needed to prove a payment or for security or legal reasons. We do not keep anything longer than we need. Technical logs are deleted or rotated regularly.

Your rights: deletion, export, correction

You can ask for a copy of your data, a correction, or deletion of your account and its data by writing to [email protected] from the e-mail linked to the account. We may ask you to prove the account is yours. What we must keep by law (such as payment records) we will tell you about.

Security

Connections to our servers are encrypted. Provider keys and secrets stay on the server and never reach the app. Secrets are hidden from the agent, and the app holds only a limited device key. No system is perfectly secure; if you find a vulnerability, write to us through the security page.

Children

The service is not directed at anyone under 13 and we do not knowingly collect their data. If you learn that a child has registered, write to us and we will delete the account.

Changes to this policy

If we change this policy we update the date at the top of the page, and for a material change we tell you in the app or by e-mail.