Privacy Policy

1. Overview

Leago AI Inc., operating as OPC Community ("we", "us", "our"), respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use opc.community (the "Site"), the Dashboard, LaunchPad, and related services.

2. Information We Collect

a. Account sign-up (email + password)

• Email address
• Password (stored as a salted hash — we cannot see the plaintext)
• Display name you provide at sign-up

b. Google Sign-In

When you choose to sign in with Google, Google shares your email, name, and avatar URL with us. We use this to create and maintain your account profile. Google sign-in uses the Google Identity Services (GIS) SDK, which sets necessary cookies in your browser to complete authentication.

c. Dashboard Profile

• Display name, avatar, and country/region you choose
• Saved events (external event IDs + snapshots from Luma and Devpost)
• Weekly check-in content (your own progress notes)
• Perk wishlist suggestions

d. LaunchPad Product Submissions

• Product name, tagline, description, logo, website, type
• Giveaway type, promo code, redemption instructions, quantity available
• Review status (pending / approved / rejected) and submission time

e. Giveaway Claims

When you claim a giveaway on LaunchPad, we record your account ID and the claimed product ID to populate your "My Claims" history and prevent duplicate claims. Your email is also shared with the product owner (see Section 4 below).

f. Waitlist (logged-out users)

• Name, email, country
• Your biggest challenge as a solo founder (optional)

g. Payment information (when OPC Elite launches)

Processed by Stripe. We never store your full card number or CVV. We receive summary information from Stripe (subscription status, last 4 digits of card, expiry date).

h. Automatically collected (all visitors)

• IP address and approximate location (country/city level)
• Browser type and device information
• Pages viewed, time on page, referral source

3. How We Use Your Information

• Maintain your account, profile, and login sessions
• Power your Dashboard features (saved events, check-ins, launch history, etc.)
• Review LaunchPad submissions and notify you of the outcome
• Forward your email to product owners when you claim their giveaway
• Send important community updates (OPC Elite launch notifications, service changes)
• Analyze usage to improve the product (aggregate level, not tied to individual identities)
• Process payments and provide subscription services once OPC Elite launches
• Detect and prevent abuse, fraud, and Terms violations

We do not sell your personal information to third parties. Period.

4. Information Sharing on LaunchPad

Product owners (users who submit launches):

Your product name, tagline, description, logo, website, and giveaway details are publicly displayed on /launchpad and the Dashboard for other users to discover and claim. Your account email is visible to our review team but not publicly displayed (unless you include it in your product description yourself).

Users who claim a giveaway:

When you claim a giveaway, your account email is shared with the product owner for redemption tracking, abuse prevention, and contact purposes. The product owner's use of your email is governed by their own privacy policy — we recommend reviewing it before claiming.

5. Data Storage & Security

We use Supabase (a managed PostgreSQL provider hosted on AWS) to store account and Dashboard data. All data in transit is encrypted via HTTPS. Row-level security is enabled at the database layer so you can only access your own data. Avatars and product logos are stored in Supabase Storage. The site is hosted on Vercel. Payments (future) are handled by Stripe.

No method of internet transmission or storage is 100% secure, but we take reasonable steps to protect your data.

6. Third-Party Services

We use the following third-party services to process or receive your data:

• Vercel — Website hosting and CDN
• Supabase — Database, authentication, file storage
• Google — Google Sign-In (Identity Services)
• Stripe — Payment processing (when OPC Elite launches)
• Resend — Transactional email delivery (account notifications, review outcomes, etc.)

Each third-party service has its own privacy policy. We encourage you to review them.

7. Data We Aggregate From Public Sources

The Daily Pulse, Events, and Funding & Programs pages display information aggregated from public sources (X/Twitter, Luma, Devpost, etc.). This is public data published by others — it does not involve your personal information. We do not act as a proxy for these platforms regarding your personal data.

8. Cookies

We use essential cookies to maintain login sessions, language preference, and CSRF protection. Google Sign-In uses cookies set by Google itself. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but this will affect login and some features.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data (you can usually edit this yourself in Dashboard Settings)
• Request deletion of your data (including account, saved events, check-ins, submitted launches, etc.)
• Opt out of non-essential email communications
• Export your data
• Object to or lodge a complaint about our data processing

To exercise these rights, contact support@opc.community. We will respond within 30 days.

10. Data Retention

• Account data (profile, check-ins, saved events): retained while account is active, purged within 30 days after deletion.
• LaunchPad submissions (launches, claims): approved launches are kept for 90 days after takedown for audit. Claim records (between you and the product owner) are kept for 2 years for fraud prevention.
• Waitlist data: retained until OPC Elite launches. If you don't join, we'll delete within 90 days.
• OPC Elite member data: retained for 30 days after cancellation, then deleted (except financial records required for tax/invoice compliance, kept 7 years per law).
• Analytics data: retained indefinitely in aggregated, anonymized form.

You can request immediate deletion at any time (except data we are legally required to retain).

11. Children

OPC Community is not directed at individuals under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data about a child, please contact us and we will delete it promptly.

12. International Data Transfers

Our service is operated by a U.S. company, and data is primarily stored in the United States. If you access our service from the EU, UK, or other regions, your data may be transferred to the U.S. We rely on industry-standard safeguards (Standard Contractual Clauses, etc.) for cross-border transfers.

13. Changes to This Policy

We may update this policy from time to time, particularly when launching new features (like OPC Elite or new data partners). We'll notify you of material changes via email or an in-Dashboard notice. Continued use of our services constitutes acceptance of the updated policy.