Opar360 Privacy Policy

Opar360 is committed to safeguarding the privacy of both our Client Companies and the End Visitors who interact with our platform. This Privacy Policy details the types of data we collect, how it is processed, and the strict operational limits we place on its use.

1. Data Collection and Purpose

We collect minimal necessary data tailored strictly to the operational requirements of the platform.

User Category	Data Type Collected	Primary Purpose
Client Companies	Business name, primary user name, email, phone number, and physical address.	Account creation, identity verification, operational communication, and billing.
Client Companies	Corporate logos, custom display names, and uploaded property documents.	Visual customization of the public tour interface and resource sharing.
End Visitors	SHA-256 hashed IP addresses, short user agents, country location, and pseudo-session IDs.	Generating anonymous, aggregated view analytics (e.g., total views, average dwell time).
End Visitors	Name, email, phone number, and custom messages.	Captured solely via opt-in "Contact Hotspots" to facilitate direct real estate leads.

2. How We Process End Visitor Leads

When an End Visitor voluntarily submits their information through a Contact Hotspot inside a tour, that data is logged in our secure database and immediately transmitted via email to the specific Client Company managing that property. Opar360 acts strictly as a data processor in this transaction; the Client Company acts as the data controller responsible for how that lead is subsequently used.

3. Data Storage and Third-Party Sub-Processors

To provide global-standard speed and security within South Asia, we utilize vetted third-party infrastructure providers. We do not sell your data to advertisers or data brokers.

• Supabase (Postgres): Secures our primary database, storing user credentials, analytical logs, and project metadata.
• Cloudflare R2: Hosts and streams our heavy media files (equirectangular MP4s, WebM videos, and PDFs). Access to video streams is strictly controlled via temporary signed URLs to prevent unauthorized direct access.
• aamarPay: Processes financial transactions for Client Companies. Opar360 does not process, capture, or store raw credit card numbers or mobile banking PINs on our servers.

4. Analytics and Tracking

We prioritize privacy-respecting analytics. Opar360 does not deploy invasive tracking pixels inside the property tours. Telemetry data (such as IP addresses) is mathematically hashed (SHA-256) upon collection, meaning End Visitors cannot be personally identified from our analytics database. Standard analytics tools (such as Google Analytics or Plausible) are restricted exclusively to our public marketing pages and are not embedded in the tour viewer.

5. Data Retention Protocols

• Client Data: Maintained for the duration of an active subscription. Upon expiration, data is securely held for a 90-day grace period before being subject to permanent deletion.
• Lead Data: End Visitor contact submissions are stored securely within the Client Workspace inbox and are retained for as long as the Client Company maintains their subscription, or until the Client Company expressly deletes them.

6. Your Rights and Contact Information

Client Companies may review, update, or request the deletion of their account information at any time via the Admin settings. End Visitors wishing to exercise their rights regarding data submitted via a property lead form must contact the respective Client Company directly, as they are the controlling entity of that submission.

For any legal or privacy inquiries regarding Opar360's infrastructure, please contact our administrative team via the contact mechanisms provided on our official website.