Privacy Policy

Privacy Policy

Last updated: April 9, 2026

This Privacy Policy describes how Host Server SRL ("Opterius", "we", "us", or "our") collects, uses, and protects your personal data when you visit opterius.com or use our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Romanian data protection law.


1. Who We Are

Host Server SRL Romania Contact: office@opterius.com

Host Server SRL is the data controller for the personal data collected through opterius.com.


2. What Data We Collect

2.1 Account Data

When you register for an Opterius account, we collect:

  • Full name
  • Email address
  • Password (stored as a hashed value — we never store plaintext passwords)
  • Company name (optional)

2.2 Billing Data

When you subscribe to a paid plan, payments are processed by Stripe, Inc. We do not store your full card number, CVV, or other sensitive payment details on our servers. Stripe may collect and process your payment information subject to their own Privacy Policy.

We retain billing records (invoice amounts, plan names, transaction IDs) as required by Romanian accounting law.

2.3 Analytics

We collect anonymised analytics about how visitors interact with opterius.com using our own analytics platform. No cookies are set and no personal data is collected for analytics purposes. Only aggregated, non-identifiable data such as page views and referrer information is recorded.

2.4 Server Log Data

Our web server automatically records standard log data including IP addresses, browser type, pages visited, and timestamps. This data is used solely for security and operational purposes and is retained for a maximum of 30 days.

2.5 Support Communications

If you contact us by email, we retain your messages and contact details to respond to your inquiry and for our records.


3. How We Use Your Data

We use your data to:

  • Create and manage your account
  • Provide and operate the Opterius Panel and related services
  • Process payments and issue invoices
  • Respond to support requests and inquiries
  • Comply with legal obligations (accounting, tax, law enforcement requests)
  • Detect and prevent fraud, abuse, or security incidents

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send marketing emails.


4. Legal Basis for Processing (GDPR)

Purpose Legal Basis
Account creation and service delivery Performance of a contract (Art. 6(1)(b))
Payment processing Performance of a contract (Art. 6(1)(b))
Legal and accounting obligations Legal obligation (Art. 6(1)(c))
Security and fraud prevention Legitimate interests (Art. 6(1)(f))
Analytics (anonymised, cookieless) Legitimate interests (Art. 6(1)(f))

5. Data Sharing

We share your data only with:

  • Stripe, Inc. — payment processing. Stripe is certified under the EU-US Data Privacy Framework.
  • Infrastructure providers — servers hosting opterius.com are located within the EU.
  • Law enforcement or regulatory authorities — only when required by applicable law.

We do not transfer your personal data outside the European Economic Area (EEA) except where adequate safeguards are in place (e.g. Stripe's Data Privacy Framework certification).


6. Data Retention

Data Retention Period
Account data Duration of account + 3 years after closure
Billing records 10 years (Romanian accounting law)
Server logs 30 days
Support emails 2 years

7. Your Rights

As a data subject under GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations
  • Restriction — request that we limit how we use your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests

To exercise any of these rights, email us at office@opterius.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Website: www.dataprotection.ro


8. Cookies

We do not use tracking or advertising cookies. Our analytics system operates without cookies and does not collect personal data.

Your browser may store a session cookie strictly necessary for keeping you logged in to your account. This cookie is not used for tracking or advertising.


9. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption for all data in transit, hashed password storage, and access controls. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by GDPR.


10. Children

Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under the age of 16.


11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.


12. Contact

Host Server SRL Email: office@opterius.com Website: opterius.com