Privacy Policy

1. Data controller

The data controller responsible for the processing of personal data in Opporio is:

2. Personal data we process

Depending on how you use Opporio, we may process the following categories of information:

• Account information: email address, authentication information, account identifiers and records of your acceptance of the Terms of Service and Community Guidelines and your acknowledgement of the Privacy Policy.
• Public profile information: display name, bio and any company or organization affiliation you choose to provide.
• Contributions: Opportunities, Solutions, comments and replies you publish.
• Community activity: validations and Solution votes.
• Moderation information: reports and information needed to review reported content.
• Communications: messages, contact details and other information you provide when contacting Opporio.
• Search and AI-related inputs: text submitted to features that use semantic search or other AI-assisted functionality.
• Usage and analytics information: pages viewed, referring source, approximate location, browser, device, operating system, network performance and web performance metrics processed in aggregated or anonymized form.
• Technical and security information: IP address, device and browser information, timestamps, session information and operational or security logs where processed by Opporio or its service providers.

3. Public information

Your display name, bio, self-reported company or organization affiliation and contributions may be publicly visible. Your email address is not displayed publicly by Opporio.

Information you publish publicly may be viewed and used by other people outside your control. Do not publish confidential information, trade secrets, personal information that you do not want to make public or another person's personal information without an appropriate right or legal basis.

4. Why we process personal data

Personal data may be processed to:

• create and manage user accounts;
• provide the core features of Opporio;
• display and connect public contributions;
• maintain validations, votes and discussions;
• prevent abuse and protect the security of the service;
• review reports and moderate content;
• provide semantic search and AI-assisted features;
• create aggregated and analytical insights, including insights that may be used commercially;
• understand how Opporio is used and measure the performance of the service;
• develop and improve Opporio and its features; and
• comply with applicable legal obligations.

5. Legal bases for processing

Opporio processes account information and contributions where processing is necessary to provide the service requested by the user and perform the agreement represented by these Terms.

Opporio relies on legitimate interests where necessary to operate and secure the service, prevent misuse, moderate content, preserve the integrity of community discussions, understand service-wide patterns, measure service usage and performance, create aggregated or analytical insights and develop the service. These interests are balanced against the rights and interests of users.

Processing may also be based on consent where consent is specifically requested, or on a legal obligation where processing is required by applicable law.

6. AI-assisted processing

Opporio uses AI-assisted functionality to help organize and discover content.

Current functionality may process Opportunity titles and descriptions and Solution titles and descriptions to create numerical representations used for semantic similarity and search. Search text may also be processed to perform semantic searches.

Theme Intelligence is not currently active. If it is enabled later, AI-assisted theme analysis may process Opportunity titles to identify and describe groups of related Opportunities. This Privacy Policy will be updated if the processing changes materially.

Content and activity within the service may also be combined and analyzed to identify patterns, trends and other aggregated or analytical insights. These insights may be used or offered commercially. Opporio does not currently sell or commercially license individual Opportunities or Solutions on behalf of their contributors.

Opporio does not intentionally include your account email, display name, bio, company affiliation or user identifier in the content sent to these AI functions as part of the current implementation. However, text submitted by a user may itself contain personal data included by that user.

7. Service providers and recipients

Opporio uses service providers that may process personal data on behalf of Opporio where necessary to provide, secure and maintain the service.

• Supabase: authentication, database and related backend infrastructure.
• Vercel: application hosting, deployment, delivery, privacy-friendly web analytics and performance monitoring.
• OpenAI: embeddings and other AI-assisted functionality described above.
• Resend: transactional emails, including account confirmation and password recovery messages.
• Cloudflare: bot protection through Cloudflare Turnstile.
• Hostingpalvelu: email hosting for communications sent to and from Opporio.

Opporio may provide aggregated or analytical insights to customers or partners. These insights are intended not to identify individual users. If a planned offering would involve disclosing personal data, Opporio will update this Privacy Policy and establish an appropriate legal basis before such disclosure.

Personal data may also be disclosed where required by law, to protect legal rights or to investigate misuse of the service.

8. International data transfers

Some service providers may process personal data outside Finland or the European Economic Area. Where personal data is transferred outside the European Economic Area, the transfer is based on an applicable legal transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, together with supplementary safeguards where required.

You may contact Opporio for further information about the safeguards applicable to international transfers.

9. Data retention

Account and profile information is generally retained while the account remains active. When an account is deleted, personal profile information is removed or anonymized as described below.

Public contributions and community activity are retained only for as long as needed to provide the service, preserve community discussions and signals, handle moderation and security matters, and comply with legal obligations. Technical logs and reports are retained for periods determined by their operational, security and moderation purpose.

Retention may be extended where necessary to establish, exercise or defend legal claims or comply with a legal obligation. Retention needs are reviewed periodically, and personal data is deleted or anonymized when it is no longer needed for an applicable purpose.

10. Account deletion

You can permanently delete your Opporio account using the account controls provided in the service.

When your account is deleted, your authentication account is deleted and your personal profile information is removed or anonymized.

Opportunities and Solutions you created are deleted if no other user has participated in them. Participation includes, as applicable, comments, validations, votes or a Solution added by another user. Associated semantic-search embeddings are deleted together with deleted Opportunities and Solutions.

Deletion of an individual contribution does not require Opporio to delete aggregated or analytical insights already created from it, provided that those insights do not identify the contributor or contain the deleted contribution as separately identifiable content.

Contributions that have received participation from another user may remain visible under the name "Deleted user" to preserve the other user's contribution and the structure of the discussion. Comments may also remain where necessary to preserve a community discussion.

Votes and validations may remain as anonymous aggregate community signals without being linked to your active user account.

11. Your data protection rights

Depending on the circumstances and applicable law, you may have rights concerning your personal data, including the right to request access, correction or deletion of your data, restriction of processing, data portability and the right to object to certain processing.

Where processing is based on consent, you may withdraw your consent. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

Requests concerning personal data can be sent to info@opporio.com.

12. Security

Opporio uses technical and organizational measures intended to protect personal data and the service against unauthorized access, loss, misuse and alteration. No online service can guarantee absolute security.

13. Changes to this Privacy Policy

This Privacy Policy may be updated as Opporio develops or its data processing practices change. Material changes will be communicated in advance through the service or using the email address associated with the user's account where reasonably possible.