Privacy Policy
Effective June 11, 2026
This Privacy Policy describes how Ophelos Advisory Group, LLC (“Ophelos,” “we,” “us”) collects, uses, and discloses personal data through the Ophelos Opal service (the “Service”), and the choices and rights available to you.
Personal data we collect
- Account information: your email address and password. Passwords are stored only as a salted hash and are never accessible to us in readable form.
- Access status: the board(s) your account is permitted to view.
- Technical and security logs: information generated automatically when you use the Service, such as IP address, browser type, and access times.
We do not collect special categories of sensitive personal data, and we do not collect or store payment card details.
How we use personal data
- To create, authenticate, and secure your account.
- To provide access to the board(s) your account is permitted to view.
- To respond to your inquiries and communicate with you about your account or the Service.
- To maintain the security and integrity of the Service and comply with legal obligations.
We do not sell your personal data or share it for advertising purposes.
Legal bases (EEA and United Kingdom)
Where the GDPR or UK GDPR applies, we process personal data to perform our agreement with you, for our legitimate interests in operating and securing the Service, to comply with legal obligations, and, where applicable, with your consent.
How we disclose personal data
We share personal data with service providers that process it on our behalf and under contractual data-protection obligations, including providers of hosting and infrastructure, database and authentication, and email handling. We may also disclose personal data where required by law or to protect the rights, safety, or security of Ophelos, our users, or others.
Cookies
We use only the essential cookies required to keep you signed in. We do not use advertising or third-party tracking cookies.
Data retention
We retain your account data for as long as your account is active, and delete it following account closure or a verified deletion request, except where retention is required by law.
Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Where we rely on your consent, you may withdraw it at any time. To exercise these rights, including deletion of your account and associated data, contact us at support@ophelosopal.com. We will verify and respond to your request within the period required by applicable law.
If you are in the EEA or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.
Security
We use encryption in transit and at rest, together with access controls appropriate to the nature of the data, to protect personal data against unauthorized access, loss, or disclosure.
International processing
The Service is operated from the United States, and personal data may be processed in the United States and other countries where our service providers operate. Transfers of personal data from the EEA, United Kingdom, or Switzerland are subject to appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
Children
The Service is intended for professional use by adults and is not directed to children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the Effective date shown above.
Contact
Ophelos Advisory Group, LLC — New York, NY
support@ophelosopal.com