Launch offer: 50% off Opivv Pro with codeClaim offer
Opivv
Legal

Privacy Policy

How Opivv collects, uses, and protects your data.

Last updated: October 12, 2026

This Privacy Policy explains what information Opivv (“we”) collects when you use the Opivv Chrome extension and website at opivv.com (the “Service”), how we use that information, and the choices you have.

Short version: we collect the minimum we need to operate the Service, we never sell your data, and you can delete your account and content at any time.

1. Information we collect

Account data

  • Email address (required for sign-in).
  • Name and profile picture (only if you sign in with Google).
  • Timestamps for account creation and last login.
  • Approximate country (country only, not city or precise location), determined from your IP address when you sign up or sign in and used for security, fraud prevention, and understanding where our users are. We store only the resulting two-letter country code; the IP address itself is not retained for this purpose.
  • How you found us. When you create an account, we save the source of the visit that brought you to us, if we counted one in the 48 hours before you signed up: the channel (for example search, social or an ad network), campaign tags, the referring website's domain, the first page you viewed and roughly how long before signing up that visit was (in whole hours). We also save the address of the site you signed up on. If your browser sends a Global Privacy Control signal, we skip the visit and use only the referral or campaign link remembered by the cc_ref cookie, if there is one (see “Cookies”).
  • Product milestones. The dates you first connected the extension, recorded a clip, shared a clip, received a view from someone else and started a paid plan, and the days on which you used the Service. We use these to understand and improve onboarding.

Content you upload

  • Screen recordings and screenshots you choose to upload.
  • Titles, descriptions, and chapter markers you set.
  • Thumbnails generated from your recordings.

Usage data

  • Anonymous view counts on shared links, with a viewer hash derived from IP + user-agent (used only for dedup).
  • Server logs (request paths, response codes, timestamps) for security and debugging.
  • Aggregate metrics on feature usage (no recording content is analyzed).
  • Website visit statistics. When you browse our website we count the page you view, the website that sent you (its domain only), campaign tags in the link (such as utm_source), whether you arrived from an ad (the ad network's name only, never the click ID), your browser, operating system, device type, country, whether you are signed in, how long the page was in view, and which of our install and sign-up links you click. We set no cookies and store nothing on your device for this; if you are signed in, we note only that. We never store your IP address with these statistics. To count unique visitors without cookies, we combine your IP address and browser details with a random value that is replaced every day and deleted after 48 hours. Visits on different days cannot be linked to each other, and once that value is deleted your IP address and browser can no longer be matched to a visit.

Billing data (paid plans only)

Payments are processed by Paddle.com Market Ltd, our Merchant of Record. We do not store full card numbers. We receive from Paddle: customer ID, subscription ID, plan, billing country, and the last 4 digits of the card. See Paddle's privacy notice for their handling.

2. What we do NOT collect

  • We do not analyze the audio or video content of your recordings to train AI models (except features you explicitly enable, like the AI transcript add-on which runs on your selected clip).
  • We do not sell, rent, or trade your personal data with third parties for advertising.
  • We do not embed any third-party ad tracking on shared video viewer pages, embeds, or token-bearing links. On our marketing and app pages, advertising tags load only if you opt in via our cookie banner (see “Cookies” below), never by default.
  • The Chrome extension does not read content from pages you visit unless you explicitly start a recording or open the setup overlay.

3. How we use the information

  • Provide the Service: store and serve your recordings, generate share links, count views.
  • Account & billing: authenticate you, send transactional emails, process payments.
  • Security: detect abuse, rate-limit, prevent unauthorized access.
  • Improve the product: aggregate website and feature-usage statistics. No individual content is used.
  • Communicate: respond to your support requests; send service announcements (e.g. material policy changes). Marketing emails are opt-in only.

4. Data storage and processing locations

The Service stores data in multiple regions depending on the data type:

  • Account & metadata: Neon Postgres (US East).
  • Recordings & thumbnails: Cloudflare R2 object storage (global edge).
  • Application servers: Hostinger (EU).
  • Payment data: Paddle (UK/EU).

5. Sharing of information

We share data only with these service providers under contract to operate the Service:

  • Paddle: payment processing, tax compliance, invoicing.
  • Cloudflare: object storage and CDN for recordings.
  • Neon: managed Postgres database.
  • Google: OAuth sign-in.
  • Hostinger: application hosting.
  • Groq: AI transcription & summaries. Only the audio of clips you explicitly ask to transcribe is sent; recordings are never bulk-analyzed.
  • Email delivery provider: sends transactional & (opt-in) notification emails.
  • Google Ads, Google Analytics, Reddit & LinkedIn: advertising measurement/retargeting and website analytics on our marketing pages, loaded only after you accept the cookie banner (see “Cookies”). Never on shared video pages.

We may disclose information when required by law (subpoena, court order) or to protect the rights and safety of Opivv or others. We do not provide bulk access to any government or commercial entity.

6. Sharing your videos

When you enable sharing on a video, the /v/<slug> URL becomes accessible to anyone with the link. You can turn sharing off, rotate the slug, set a password, or set an expiry date at any time from the video's settings panel. View counts are tracked anonymously (see “Usage data” above).

7. Cookies and similar technologies

  • Authentication cookies (essential): keep you signed in.
  • CSRF cookies (essential): protect against cross-site request forgery.
  • Password-gate cookies (essential): grant access to a specific password-protected video for 8 hours after correct entry.
  • Email-gate cookies (essential): remember that you entered your email to watch a specific video that asks for one, so you aren't asked again. One per video, 30 days.
  • Theme preference (functional, stored in localStorage): remembers dark/light mode.
  • Consent choice (functional, cc_consent): remembers whether you accepted analytics and advertising cookies, so we don't ask again.
  • Referral and campaign link (functional, cc_ref): remembers the referral or campaign link you arrived through so it can be credited if you sign up. First-party, 30 days.
  • Reactions (functional, cc_reactor): set when you react to a shared video, so you can change or remove your reaction and it is counted once. 1 year.
  • Comments (functional, cc_commenter): set when you comment on a shared video without signing in, so your comments show as yours and you can delete them later. 1 year.
  • Analytics and advertising cookies (Google Analytics, Google Ads, Reddit, LinkedIn): off by default. These load only after you accept via our cookie-consent banner, and only on our marketing and app pages (never on shared video viewer pages). We use Google Consent Mode v2, so no analytics or advertising cookies are set unless you opt in, and you can decline. We do not use any other analytics or advertising cookies.
  • Visit statistics: no cookies are set and nothing is stored on your device (see “Usage data” above).

8. Your rights

Depending on your jurisdiction, you may have the following rights:

  • Access & export: request a copy of the personal data we hold about you.
  • Correction: fix inaccurate data from your account page.
  • Deletion: delete your account anytime; we erase your data within 30 days (legal-retention exceptions apply for billing records).
  • Portability: your recordings can be downloaded directly from the dashboard at any time.
  • Object/withdraw consent: for marketing emails, unsubscribe in any email or via your settings.
  • Lodge a complaint: with your local data-protection authority.

Visit statistics are never stored with your account and are not used to look up individuals, and individual visits are deleted after 90 days. Acquisition details and milestones stored with your account are deleted with your account.

To exercise any of these rights, email [email protected]. We respond within 30 days.

9. Data retention

  • Free-tier recordings: auto-deleted 30 days after upload, or 30 days after a paid plan ends if that is later.
  • Paid-tier recordings: retained until you delete them. If your plan ends, the Free-tier rule above applies.
  • Account metadata: retained while the account is active; deleted within 30 days of account deletion.
  • Billing records: retained for the legally required period (typically 7 years).
  • Server logs: retained 30 days then automatically rotated.
  • Visit statistics: individual visits are kept for 90 days, then only daily totals, for up to 25 months. The daily random value used to count unique visitors is deleted after 48 hours.
  • Account activity dates: the days on which you used the Service are kept for up to 400 days.

10. Security

We use HTTPS everywhere, password hashes via bcrypt, HMAC-signed cookies for sensitive flows, scoped S3-compatible credentials, and strict CORS and CSP policies. We perform routine reviews of dependencies and access logs. No system is perfectly secure; please report vulnerabilities to [email protected].

11. Children

The Service is not directed at children under 13, and we do not knowingly collect data from them.

12. International transfers

Your data may be processed in countries other than your own (see Section 4). Where required by law, we rely on Standard Contractual Clauses for transfers from the European Economic Area, the UK, and Switzerland.

13. Changes to this Policy

We may update this Policy. We will announce material changes via email or in-product at least 14 days before they take effect.

14. Contact

Questions or data-rights requests: [email protected].