Privacy Policy

1. Who we are

OPSYRA (“OPSYRA”, “we”, “us”, “our”) operates the platform at https://opsyra.in. For the personal data we process about our account holders and website visitors, we act as the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). This Policy should be read together with our Terms & Conditions.

2. Information we collect

a. Information you provide

• Account data — your name and business email address (verified by OTP).
• Billing data — plan selection and billing details. Payments are processed by Razorpay; we receive transaction status and limited metadata, not your full card/bank details.
• Website data you submit — the domains/URLs you add for analysis and any settings you configure.
• Communications — messages you send us (e.g. support or contact requests).

b. Information we collect automatically

• Crawled content — publicly available page content and metadata from the websites you submit, gathered to perform audits and analysis.
• Usage & device data — log data, IP address, browser/device type, and how you interact with the Platform.
• Cookies & similar technologies — used for authentication, preferences (e.g. theme), and to keep the Service secure and working.
• Push subscriptions — if you opt in, the web-push token needed to send you notifications.

c. Information from third parties

• Google Search Console — if you connect it, we access the search-performance data you authorise via OAuth. You can revoke this access at any time.
• Payment partner — transaction confirmations from Razorpay.

3. Why we use your data (purposes)

• To create and manage your Account and verify your identity;
• To provide the Service — crawl, audit, score, analyse, track AI visibility, and generate recommendations and content;
• To process payments, subscriptions, renewals, and invoices (with GST);
• To send service messages, security alerts, and (where you opt in) product notifications;
• To provide customer support and respond to your requests;
• To maintain security, prevent fraud and abuse, and debug issues;
• To comply with legal obligations and enforce our Terms.

4. Legal basis & consent

We process personal data based on your consent (given at sign-up and when you enable specific features), to perform our contract with you, to meet legal obligations, and for our legitimate interests in operating and securing the Service. Where processing relies on consent, you may withdraw it at any time (see “Your rights”); withdrawal does not affect processing already carried out.

5. Cookies

We use strictly necessary cookies for login and security, and functional cookies to remember your preferences. You can control cookies through your browser settings, but disabling essential cookies may prevent the Service from working correctly.

6. Service providers & sub-processors

We share personal data only with trusted service providers who help us run the Service, under appropriate confidentiality and data-protection obligations. These include:

• Razorpay — payment processing;
• OpenAI and Google (Gemini) — AI model processing for analysis and content generation;
• DataForSEO — search and keyword data;
• Email/notification providers — transactional email (e.g. OTP, welcome, alerts) and web push;
• Cloud hosting & infrastructure — to host and operate the Platform.

We do not sell your personal data. We may disclose data if required by law, to protect our rights, or in connection with a business transfer (e.g. merger or acquisition), subject to this Policy.

7. International data transfers

Some of our service providers (such as certain AI providers) may process data on servers located outside India. Where data is transferred internationally, we take reasonable steps to ensure it is handled in line with applicable law and this Policy.

8. Data retention

We retain personal data only for as long as necessary to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymise it. You may request deletion of your Account data as described below.

9. Data security

We implement reasonable technical and organisational safeguards — including encryption in transit, access controls, and secure authentication — to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and authorities of a personal-data breach as required by law.

10. Your rights

Subject to applicable law (including the DPDP Act), you have the right to:

• Access a summary of the personal data we process about you;
• Correct, complete, or update inaccurate or incomplete data;
• Erase your personal data where it is no longer required;
• Withdraw consent for processing that relies on it;
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Grievance redressal — raise a complaint with us and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, email us at support@opsyra.in. We may need to verify your identity before acting on a request.

11. Children

The Service is intended for businesses and users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest revision, and material changes will be communicated where appropriate. Continued use of the Service after changes take effect constitutes acceptance.

13. Grievance Officer & contact

In accordance with the DPDP Act and the Information Technology Act, 2000 and rules thereunder, our Grievance Officer can be reached at:

OPSYRA
Grievance Officer: Nikhil Mishra
Email: support@opsyra.in
Address: 57A near chetna hospital rajeev colony, Gurgaon, Haryana 122001