Privacy Policy

Last updated: January 9, 2025

Opactor, Inc. ("Opactor," "we," "us," or "our"), operating the Anymorph service, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at anymorph.ai and our services (collectively, the "Services").

Opactor is headquartered in California, United States. By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide directly to us, including:

  • Account Information: Name, email address, company name, job title, and password when you create an account
  • Waitlist Information: Email address and company website URL when you join our waitlist
  • Domain and Website Information: Domain names and website URLs you connect to our service
  • Brand Guidelines: Brand assets, style guides, and content guidelines you provide
  • Payment Information: Billing address and payment card details (processed by our payment processor)
  • Communications: Information you provide when contacting us or participating in surveys

1.2 Information Collected Automatically

When you access our Services, we automatically collect:

  • Device Information: Browser type, operating system, device type, and unique device identifiers
  • Log Data: IP address, access times, pages viewed, referring URL, and actions taken
  • Usage Data: Features used, pages generated, optimization results, and performance metrics
  • Cookies and Tracking: Information collected through cookies, pixels, and similar technologies

1.3 Information from Third-Party Services

If you connect third-party services to your Anymorph account (such as Google), we may receive information from those services in accordance with their privacy policies and your privacy settings.

2. Google User Data

When you authenticate using Google OAuth, we access specific Google user data to provide our Services. This section describes how we handle Google user data in compliance with the Google API Services User Data Policy.

2.1 Data We Access

  • Basic Profile Information: Name, email address, and profile picture for account creation and identification
  • Google Analytics Data: Website analytics data (if you grant access) to analyze and optimize your pages
  • Google Search Console Data: Search performance data (if you grant access) to improve GEO optimization

2.2 How We Use Google Data

We use Google user data solely for the following purposes:

  • To authenticate your identity and create/manage your account
  • To analyze your website performance and provide optimization recommendations
  • To generate and improve pages based on your website analytics
  • To track the effectiveness of pages we create for you

2.3 Limited Use Disclosure

Opactor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google data to provide and improve user-facing features of our Services
  • We do not use Google data for advertising purposes
  • We do not sell Google user data to third parties
  • We do not use Google data to develop or improve AI/ML models unrelated to our Services
  • Human access to Google data is limited to providing support, investigating issues, or as required by law

2.4 Data Storage and Security

Google user data is encrypted in transit and at rest. Access is restricted to authorized personnel only, and we maintain security certifications and conduct regular security audits. We store Google data on secure servers in the United States.

2.5 Revoking Access

You can revoke Opactor's access to your Google data at any time through your Google Account Settings. Upon revocation, we will delete your Google user data within 30 days, except where retention is required by law.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide Services: To operate, maintain, and improve our Services, including generating and optimizing pages
  • Account Management: To create and manage your account, process transactions, and provide customer support
  • Communications: To send you technical notices, security alerts, support messages, and service updates
  • Marketing: To send promotional communications (you can opt-out at any time)
  • Analytics: To monitor and analyze trends, usage, and activities in connection with our Services
  • Personalization: To personalize your experience and provide content tailored to your interests
  • Security: To detect, prevent, and address fraud, security issues, and technical problems
  • Legal Compliance: To comply with legal obligations and enforce our agreements

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

  • Cloud hosting providers (infrastructure)
  • Payment processors (billing)
  • Analytics providers (usage analysis)
  • Email service providers (communications)
  • Customer support tools (support services)

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, privacy, safety, or property of Opactor, our users, or the public.

4.3 Business Transfers

In connection with any merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our website of any change in ownership.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our Services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements
  • Meet legitimate business needs

When you request deletion of your account, we will delete or anonymize your personal information within 45 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256)
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Employee security training and confidentiality agreements
  • Incident response and breach notification procedures

While we strive to protect your information, no method of transmission or storage is 100% secure. Please contact us immediately if you believe your account has been compromised.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 General Rights

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Opt-out: Opt-out of marketing communications at any time

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information collected, used, disclosed, or sold
  • Right to Delete: Request deletion of personal information collected from you
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information: Limit how we use sensitive personal information
  • Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your rights

Categories of Personal Information Collected: Identifiers, commercial information, internet/network activity, geolocation data, and professional information.

Categories Disclosed to Service Providers: We disclose all categories above to our service providers to operate our Services.

Sensitive Personal Information: We collect account login credentials. This information is used only for providing the Services and is not sold.

To exercise your CCPA rights, contact us at privacy@anymorph.ai or use the contact information below. We will respond within 45 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. Types of cookies we use:

  • Essential Cookies: Necessary for the website to function properly
  • Analytics Cookies: Help us understand how visitors interact with our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your information, we implement appropriate safeguards, such as standard contractual clauses, to ensure your information remains protected.

10. Children's Privacy

Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of our Services after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Opactor, Inc.

Email: privacy@anymorph.ai

General Inquiries: contact@anymorph.ai

For California residents: To submit a CCPA request, email privacy@anymorph.ai with the subject line "CCPA Request."