01Who We Are
OpaLink, Inc. ("OpaLink", "we", "us", or "our") operates the OPA! Marketplace commission-free restaurant ordering platform, available at opalink.com and through related apps, websites, and services (collectively, the "Services"). "OPA!" is the product and brand name of the Services operated by OpaLink, Inc.
This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to restaurant operators and brands that use OPA!, to guests who place orders through an OPA!-powered experience, and to visitors who interact with our website or marketing.
02Information We Collect
We collect the following categories of information:
- Information you provide. When you request a demo, contact sales, or sign up, we collect details such as your name, business email, phone number, company name, role, and number of locations.
- Restaurant and operator account data. Menu, location, pricing, POS configuration, loyalty program settings, and other data needed to operate your OPA! account.
- Guest and order data. When a guest places an order through an OPA!-powered experience, we process information such as name, email, phone number, delivery address, order contents, and loyalty activity — on behalf of the restaurant.
- Payment information. Payments are processed by third-party payment processors. We do not store full card numbers on our own systems.
- Automatically collected data. Device and usage information such as IP address, browser type, pages viewed, and interactions, collected through cookies and similar technologies.
03How We Use Information
We use information to provide, operate, secure, and improve the Services; to set up and support restaurant accounts; to process and fulfill orders and deliveries; to power loyalty and re-engagement features on behalf of restaurants; to communicate with you about your account, demos, and support requests; to send marketing communications where permitted; and to comply with legal obligations.
04Data Ownership for Restaurant Brands
A core principle of OPA! is that restaurant brands own their first-party customer data. For guest and order data generated through a brand’s OPA!-powered channel, OpaLink acts as a service provider / processor on that brand’s behalf and handles the data according to our agreement with the brand. We do not sell restaurant brands’ customer data, and we do not use it to build or promote competing brands.
06SMS and Text Messaging
We use Twilio to send text messages, including order updates, loyalty notifications, and — where you have opted in — marketing messages. By providing your mobile number and opting in, you consent to receive these messages at the number provided. Message frequency varies. Message and data rates may apply.
You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance. Opting out of text messages will not affect your ability to use the rest of the Services. Mobile opt-in information and consent are not shared with third parties for their own marketing purposes.
08Data Retention
We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and by our agreements with restaurant brands. When data is no longer needed, we take reasonable steps to delete or de-identify it.
09Security
We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing or marketing. To exercise these rights, contact us using the details below. If your information was provided to us by a restaurant brand, we may direct your request to that brand. We will not discriminate against you for exercising your rights.
11Children’s Privacy
The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13 (or the age defined by applicable law). If you believe a child has provided us information, please contact us so we can delete it.
12Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated as required by law.
13Google Business Profile Integration
OPA Connect allows participating businesses to connect and manage their Google Business Profiles through our platform.
When authorized by a business, OPA Connect may access Google Business Profile information, including business locations, customer reviews, ratings, and review responses, solely to provide the functionality requested by that business.
OPA Connect uses this information to display reviews, generate suggested responses, publish business-approved replies, and manage authorized Business Profile updates.
OPA Connect does not sell Google user data or use such information for third-party advertising or unrelated purposes.
OPA Connect's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, to the extent applicable.
Businesses may revoke access to their Google Business Profile through applicable Google account controls.
14Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at info@opalinkapp.com, or through the contact form at opalink.com/contact.