Free Tools Docs Go to App Sign In
Last updated: May 19, 2026

Privacy Policy

We collect the minimum data needed to run the service and never sell it. Here's exactly what we do with it.

1. Overview

OpinionDeck ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use our service at opiniondeck.com and its associated web application, how we use that information, and the rights you have over it.

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account data: When you sign in via Google, we receive your email address, display name, and profile picture from Google's OAuth API. This is the minimum required to authenticate you and identify your account.

Usage data: We collect information about how you use the Service — pages visited, features used, search queries entered into Discovery Lab, and monitors created. This is used to improve the product and understand feature adoption.

Research content: Threads and posts you fetch through the Service are processed transiently (in our AI pipeline) to generate insights. We do not permanently store raw thread content unless you explicitly save it to a Folder or Monitor. Saved content is stored in your account until you delete it.

Payment data: Subscription and billing information is handled by Stripe. We receive only a tokenised representation — your card's last 4 digits, card type, and subscription status. We do not store your full card number, CVV, or billing address on our servers.

Support communications: If you contact us by email, we retain your messages and our replies to provide and improve support.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service;
  • Authenticate your account and manage your subscription tier;
  • Process payments and send billing receipts and renewal reminders;
  • Respond to your support requests and questions;
  • Send product updates, new feature announcements, and usage digests (you can unsubscribe at any time);
  • Analyse usage patterns to improve features, fix bugs, and prioritise the roadmap;
  • Detect and prevent fraud, abuse, or violations of our Terms of Service; and
  • Comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Data Retention

We retain your account data for as long as your account is active. Saved research content (threads, insights, monitors, leads) is kept until you delete it from the app.

If you delete your account, we delete your personal data within 30 days. Certain data may be retained beyond this period where required by law — for example, billing and transaction records are kept for 7 years to comply with financial regulations.

Transient content (threads fetched but not saved to a Folder) is not stored on our servers beyond the duration needed to generate and return the analysis.

5. Third-Party Services

We use the following third-party services to operate OpinionDeck. Each processes your data in accordance with their own privacy policies, linked below:

  • Google Firebase — Authentication (Google Sign-In) and database storage for account data, saved threads, monitors, and insights. Privacy Policy
  • Umami — Privacy-friendly web analytics for page views and referrer data. Cookie-free and does not collect personal data. Privacy Policy
  • Tawk.to — Live chat support widget. Chat transcripts may be stored on Tawk.to's servers. Privacy Policy
  • Google Cloud Platform — Cloud infrastructure for our API servers, background jobs, and file storage. Privacy Notice
  • Google Vertex AI (Gemini) — AI inference for thread analysis, query expansion, and opportunity scoring. Search queries and thread content you process through the Service are sent to this API. Privacy Notice

6. Cookies & Tracking

Essential cookies: We use session tokens and authentication state cookies required to keep you logged in. These are strictly necessary and cannot be disabled without breaking the Service.

Analytics: We use Umami for web analytics. Umami is cookie-free and does not collect personal identifiers — only aggregate page views and referrer data.

We do not use advertising, retargeting, or third-party tracking cookies. We do not sell data derived from cookies to advertisers.

7. Data Security

Your data is stored on Google Cloud Platform infrastructure, which holds SOC 2 Type II and ISO 27001 certifications. All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher. Data at rest in Firebase Firestore is encrypted by Google by default.

We restrict access to your personal data to employees and contractors who need it to operate or improve the Service, and require all such parties to keep it confidential.

While we implement industry-standard security measures, no internet-based service can guarantee complete security. We encourage you to use a strong Google account password and enable two-factor authentication on your Google account.

8. Your Rights

If you are in the EU/EEA (GDPR), you have the right to:

  • Access — Request a copy of the personal data we hold about you;
  • Rectification — Correct inaccurate or incomplete personal data;
  • Erasure — Request deletion of your personal data ("right to be forgotten");
  • Data portability — Receive your personal data in a structured, machine-readable format;
  • Restriction — Request that we restrict processing of your data in certain circumstances;
  • Object — Object to processing based on our legitimate interests; and
  • Lodge a complaint — Contact your local data protection supervisory authority if you believe your rights have been violated.

If you are a California resident (CCPA), you have the right to:

  • Know what personal information we collect and how it is used and shared;
  • Request deletion of your personal information;
  • Opt out of the sale of your personal information (we do not sell personal information); and
  • Non-discrimination for exercising any of your privacy rights.

To exercise any of these rights, email us at hello@opiniondeck.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

9. International Data Transfers

OpinionDeck is operated from India. Our infrastructure runs on Google Cloud Platform, with servers primarily located in the United States and Europe. If you access the Service from the EU/EEA, your data may be transferred to and processed in countries that do not have equivalent data protection laws.

These international transfers are covered by Google Cloud's Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for the transfer of personal data to third countries under GDPR.

10. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children under these ages. If you believe a child has registered for or provided personal data to the Service, please contact us at hello@opiniondeck.com and we will promptly delete that information.

11. Changes to This Policy & Contact

We may update this Privacy Policy periodically. When we make significant changes, we will notify you by email or via a prominent notice in the application before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For any privacy-related questions, data requests, or complaints, please contact us at:

hello@opiniondeck.com

We aim to respond to all privacy enquiries within 30 days.