DATA.01
Data Architecture & Collection
OPUP collects only data strictly necessary to deliver services:
▸
Authentication: Email address and cryptographically hashed password (
password_hash). Plaintext
passwords are never accessible or stored.
▸
Inference Prompts: Text queries submitted to chat are routed to AI model partners to
compute completions. Queries are processed ephemerally.
▸
Saved Chats: When you're signed in, your chats (titles and messages) are stored in your OPUP account so you can open them on any device. Only you can see them. For pictures made with Image Studio, only the description is saved; the picture itself stays in the browser where it was made. Deleting a chat removes it, and deleting your account deletes all your chats.
▸
My Jobs: If you save a chat as a Job, its title, goal, next step, status and notes are stored in your OPUP account so you can see them on any device. Only you can see them. The status is whatever you set; OPUP does not check it. Deleting a job removes it and its history, and deleting your account deletes all your jobs.
▸
Help Signal: If you send a Help Signal for a job, anyone with the link can see only the question you approved and your first name. Visitors do not need an account. They give a name and a reply (up to 1,000 characters), and only you can see replies. To limit spam we keep a one-way scrambled version of each visitor's internet address (not the address itself) and the time they replied. Replies are shown as plain text, are never sent to the AI and are never acted on automatically. You can hide replies or close the link at any time.
▸
Second pair of eyes: If you ask for a Second pair of eyes, you choose one thing from your job (the goal, the next step or one note) to show one person through a private link. They see only that text, your optional question and your first name, and can leave a comment with their name. The link stops working after 7 days, or sooner if you press Stop sharing. Comments are handled in the same way as help replies, and only you can see them.
▸
"Did that work?" answers and Trust receipts: Your answers to "Did that work?" are saved in the job's history, marked as what you said. A Trust receipt is built only from that job's own history, is shown only to you, and is never made public. Nothing is shared unless you copy or download it yourself.
▸
Deleting: Deleting a job deletes its history, Help Signal links, replies, Second pair of eyes links and comments. Deleting your account deletes all of these along with your chats and jobs.
▸
Subscription Billing: Payment transactions are executed directly by
Stripe via tokenized sessions. Credit card numbers never touch or traverse OPUP
infrastructure.
▸
Security & Rate Limiting: In-memory and short-lived attempt counters mitigate
brute force intrusions and DDoS vectors. Automatically cleared.
▸
Usage Counts: We count how OPUP is used by country, product and time of day. These are counts only, with no personal details: no names, no questions and no IP addresses are saved. A random device number is kept on your device so free daily questions can be counted.