Privacy Policy

The controller for OpDesk account data is OpDesk (https://opdesk.eu). Contact: support@opdesk.eu.

When we access data on your site (e.g. via file snapshots or logs) to run a Job for you, we act as a processor; you remain controller for your shop’s data. See the DPA.

Account: email, name (if provided), hashed password, locale preference.

Job: problem description, URL, intake answers, optional screenshot, payment status, diagnosis report, proposed diffs, check results.

Server access: host, port, protocol, username and encrypted credentials.

Technical: IP (security/acceptance audit), service logs, basic product analytics.

Delivering the service, payments, security, abuse prevention, product improvement, legal obligations.

Bases: contract performance, legitimate interests (security/improvement), consent where required.

We may use hosting (e.g. Vercel), database (e.g. Supabase/Postgres), payments (Stripe), AI providers (e.g. Cursor / diagnosis-repair models) and a cloud worker for SFTP.

Where feasible we limit or de-identify data before sending to AI. Avoid pasting sensitive customer secrets into intake unless needed for diagnosis.

Account data: while your account exists and for a reasonable period afterward for legal/accounting needs.

Job snapshots/backups: limited (typically ~30 days for restore), unless longer retention is needed for payment disputes or security.

Terms acceptance audits: kept as transaction evidence.

Access, rectification, erasure, restriction, portability, objection — as provided by GDPR. Contact: support@opdesk.eu. You may also contact your local supervisory authority (in Greece: HDPA).

We use essential cookies/session for login and app function.

We also use Google Analytics 4 (when you accept analytics cookies) to understand aggregate traffic and product usage. Google may process data under its terms. Analytics storage starts denied (Consent Mode) until you choose “Accept analytics” in the cookie banner; “Essential only” keeps analytics off. You can change choice by clearing site cookies.