Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Oppkey ("we," "us," or "our") collects, uses, and shares information when you use Oppvera (the "Service"), an educational simulation lab.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Who we are

The Service is operated by Oppkey. Questions about this policy may be sent using the contact information on the sign-in or request-access pages.

2. Information we collect

We may collect:

  • Account information — email address, password (stored hashed), role, and organization membership when an admin approves access.
  • Access requests — email, optional note, and organization selection when you request an invite.
  • Usage and content — campaign files, queries, labels, reports, and other material you upload or generate in the lab.
  • Technical data — IP address, browser type, session identifiers, timestamps, and audit logs for security and operations.
  • Product usage — page and action timestamps, product section (for example Studio or Brand Security), and similar operator analytics. This ledger does not store request bodies, query strings, or campaign file contents.
  • Communications — messages you send us and emails we send you about the Service.

We do not intentionally collect sensitive categories of personal data. Do not upload regulated personal data, credentials, or trade secrets to this educational environment.

3. How we use information

We use information to:

  • Provide, operate, and improve the educational Service
  • Authenticate users and enforce access controls
  • Understand how the Service is used so platform operators can improve it
  • Respond to access requests and support inquiries
  • Send operational notices, usage updates, feedback requests, and information about new educational material (as described in the Terms of Service)
  • Monitor abuse, secure the platform, and comply with law

4. How we share information

We may share information with:

  • Service providers — hosting, email, database, and AI/LLM API providers that help us run the Service, under contractual obligations to protect data
  • PostHog, Inc. — when product analytics is enabled, we send page views, product events, and session replay of on-screen UI to PostHog Cloud in the United States (us.i.posthog.com). Replay can include campaign names and report copy visible on screen. Password and other form inputs are masked. We do not sell this data.
  • Administrators — platform or agency admins who manage users and organizations on the Service
  • Legal and safety — when required by law or to protect rights, safety, and integrity of the Service

We do not sell your personal information.

5. AI and third-party processing

The Service may send prompts, uploaded text, or excerpts to third-party AI providers to generate educational simulations and narratives. Do not submit content you cannot afford to expose to such providers. Their processing is subject to their own terms and policies.

6. Data retention

We retain account and usage data while your account is active and as needed to operate the Service, comply with law, resolve disputes, and enforce our terms. We may delete inactive accounts, demo data, or educational content after reasonable notice or without notice for free educational tiers.

7. Security

We use reasonable administrative, technical, and organizational measures to protect information. No system is perfectly secure. The Service is an educational lab, not a certified secure environment for highly confidential business data.

8. Your choices

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal information. Contact us to make a request. You may stop using the Service at any time; account deletion may be requested through an administrator.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect information from children.

10. International users

If you access the Service from outside the United States, you understand that information may be processed in the United States and other countries where we or our providers operate.

11. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on the Service and update the "Last updated" date. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions, contact Oppkey using the contact details on the sign-in or request-access pages.

Back to sign in · Terms · Privacy · Simulation disclaimer