Privacy Policy

1. Introduction

OpxCrate, LLC ("OpxCrate," "we," "us," or "our") operates the opxcrate.com website and platform. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our products and services, including Dispatch, Website Builder, Spreadsheets, PDF Forms, Inventory, Newsletter, Call Tracking, Team Chat, Tasks, and Documents.

By using OpxCrate, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

We collect the following types of information:

Account Information

When you create an account, we collect your name, email address, and password (for email/password sign-up) or your Google profile information (for Google OAuth sign-in). If you subscribe to a paid plan, we collect billing information through Stripe, including your payment card details (which Stripe stores — we never see or store your full card number).

Content You Create

Any data you enter into OpxCrate — dispatch jobs, spreadsheets, forms, documents, newsletters, website content, inventory records, and other business data — is stored on our servers to provide the service.

Cookies

We use session cookies strictly for authentication and keeping you logged in. We do not use advertising cookies or third-party tracking cookies.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our products and services
• Process payments and manage your subscription
• Send transactional emails (account verification, password resets, billing receipts)
• Send product updates and announcements (you can opt out anytime)
• Monitor and prevent fraud, abuse, and security issues
• Respond to support requests
• Comply with legal obligations

4. Third-Party Services

We rely on the following third-party services to operate OpxCrate:

• Stripe — Processes payments and stores billing information. See Stripe's Privacy Policy.
• Resend — Delivers transactional and marketing emails on our behalf. See Resend's Privacy Policy.
• Google OAuth — Provides sign-in via your Google account. We receive your name, email, and profile picture. See Google's Privacy Policy.
• Fly.io — Hosts our application infrastructure. See Fly.io's Privacy Policy.

These services only receive the minimum data necessary to perform their function. We do not share your data with anyone else unless required by law.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We do not share your data with advertisers. We may disclose information only when required by law, court order, or governmental request, or when necessary to protect the rights, safety, or property of OpxCrate or our users.

6. Cookies & Tracking

OpxCrate uses session cookies solely for authentication purposes — to keep you logged in as you navigate the platform. These cookies are essential for the service to function and cannot be disabled while using OpxCrate. We do not use analytics cookies, advertising cookies, or third-party tracking scripts.

7. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, we will remove your personal information and content from our systems within 30 days, except where we are required to retain it for legal or compliance purposes. Backups may contain your data for up to 90 days after deletion.

8. Your Rights

You have the right to:

• Access your data — Request a copy of the personal information we hold about you.
• Export your data — Download your business data from within the platform at any time.
• Delete your account — Request permanent deletion of your account and all associated data.
• Correct your data — Update or correct your personal information through your account settings.
• Opt out of communications — Unsubscribe from marketing emails at any time (transactional emails will continue).

To exercise any of these rights, contact us at support@opxcrate.com.

9. CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request its deletion, and opt out of its sale. As stated above, we do not sell your personal information. To make a request under the CCPA, contact us at support@opxcrate.com.

10. GDPR (European Residents)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and port your data. Our legal basis for processing your data is your consent (when you create an account) and our legitimate interest in providing and improving the service. To exercise your GDPR rights, contact us at support@opxcrate.com.

11. Children's Privacy

OpxCrate is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@opxcrate.com.

12. Security

We take reasonable measures to protect your data, including encryption in transit (TLS/HTTPS), secure authentication, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our website. Your continued use of OpxCrate after changes take effect constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at: