Legal

Privacy Policy

How OPA! Marketplace collects, uses, shares, and protects personal information.

Last updated: June 8, 2026

1. Who We Are

OpaLink, Inc. ("OpaLink", "we", "us", or "our") operates the OPA! Marketplace commission-free restaurant ordering platform, available at opalink.com and through related apps, websites, and services (collectively, the "Services"). "OPA!" is the product and brand name of the Services operated by OpaLink, Inc.

This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to restaurant operators and brands that use OPA!, to guests who place orders through an OPA!-powered experience, and to visitors who interact with our website or marketing.

2. Information We Collect

We collect the following categories of information:

  • Information you provide. When you request a demo, contact sales, or sign up, we collect details such as your name, business email, phone number, company name, role, and number of locations.
  • Restaurant and operator account data. Menu, location, pricing, POS configuration, loyalty program settings, and other data needed to operate your OPA! account.
  • Guest and order data. When a guest places an order through an OPA!-powered experience, we process information such as name, email, phone number, delivery address, order contents, and loyalty activity — on behalf of the restaurant.
  • Payment information. Payments are processed by third-party payment processors. We do not store full card numbers on our own systems.
  • Automatically collected data. Device and usage information such as IP address, browser type, pages viewed, and interactions, collected through cookies and similar technologies.

3. How We Use Information

We use information to provide, operate, secure, and improve the Services; to set up and support restaurant accounts; to process and fulfill orders and deliveries; to power loyalty and re-engagement features on behalf of restaurants; to communicate with you about your account, demos, and support requests; to send marketing communications where permitted; and to comply with legal obligations.

4. Data Ownership for Restaurant Brands

A core principle of OPA! is that restaurant brands own their first-party customer data. For guest and order data generated through a brand’s OPA!-powered channel, OpaLink acts as a service provider / processor on that brand’s behalf and handles the data according to our agreement with the brand. We do not sell restaurant brands’ customer data, and we do not use it to build or promote competing brands.

5. How We Share Information

We do not sell personal information for money. We share information only as needed to run the Services, including with:

  • Service providers / sub-processors who perform functions on our behalf, including Twilio (SMS and text messaging), Resend (transactional and marketing email), Sanity (content management), and Netlify (website hosting and delivery), along with analytics providers. These providers may only use the data to provide services to us.
  • Delivery partners. To fulfill last-mile delivery, order and delivery details may be shared with delivery providers such as DoorDash, Uber Eats, and Grubhub, and our delivery dispatch partner, solely to complete the delivery you requested.
  • POS and integration partners. Where you connect a point-of-sale or commerce system (for example Toast, Square, Clover, Shift4, or Olo), we exchange the data needed to sync orders, menus, and loyalty.
  • Legal and safety. When required by law, to enforce our terms, or to protect the rights, property, or safety of OpaLink, our users, or others.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. SMS and Text Messaging

We use Twilio to send text messages, including order updates, loyalty notifications, and — where you have opted in — marketing messages. By providing your mobile number and opting in, you consent to receive these messages at the number provided. Message frequency varies. Message and data rates may apply.

You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance. Opting out of text messages will not affect your ability to use the rest of the Services. Mobile opt-in information and consent are not shared with third parties for their own marketing purposes.

7. Cookies and Analytics

We use cookies and similar technologies to operate the site, remember preferences, measure performance, and understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect how the site functions.

8. Data Retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and by our agreements with restaurant brands. When data is no longer needed, we take reasonable steps to delete or de-identify it.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing or marketing. To exercise these rights, contact us using the details below. If your information was provided to us by a restaurant brand, we may direct your request to that brand. We will not discriminate against you for exercising your rights.

11. Children’s Privacy

The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or the age defined by applicable law). If you believe a child has provided us information, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated as required by law.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@opalink.com, or through the contact form at opalink.com/contact.