Privacy Policy

Opal Corporation (Pvt) Ltd ("Company", "we", "us", or "our"), a corporate entity registered under the laws of Sri Lanka, operates the web portal connectopal.com and develops the Opal Connect desktop application (collectively, the "Service").

This Privacy Policy outlines our strict parameters regarding the collection, processing, and non-retention of information when you utilize our application. By downloading the application or using the portal, you agree to the collection and use of information in accordance with this policy.

1. The Architectural Core: Zero-Data Ingestion Principle

Unlike traditional cloud-hosted software services, Opal Connect operates on a Zero-Data Ingestion Principle regarding your operational communication fields:

• No Chat Logging: We do not read, intercept, ingest, mirror, or store your business text messages, audio recordings, images, documents, or contact lists.
• No Cloud Storage Tracking: Your conversational histories and linked session metrics remain exclusively within your localized workstation terminal.
• Native Loop Integrity: All communication traffic travels directly and natively over the end-to-end encrypted tunnels of the third-party communication platform (WhatsApp/Meta). Opal Connect functions purely as an isolated presentation and workspace virtualization layer on your physical machine.

2. Information We Collect and How We Use It

The only data processed by the Company is categorized into two non-sensitive streams necessary to manage your commercial licensing account:

2.1 Account and Billing Data

When you sign up for a free trial or purchase a subscription tier on connectopal.com, we collect details including contact details (name, corporate email address, and company name) and transaction records (payment histories, billing addresses, and chosen plan configurations like Starter, Growth, Professional, or Enterprise). We do not store credit card numbers on our servers; all transactions are processed securely through certified, compliant third-party payment gateways.

2.2 Local Application Telemetry & Licensing Authentication

To enforce account caps and maintain application stability, the software securely transmits minimal telemetry data to our licensing engine, consisting of license validation variables (verifying your active subscription tier against the number of concurrent active workspace panes deployed on the application) and system diagnostics (aggregating anonymous crash logs, runtime error reports, and OS version data to help push optimization patches).

3. Data Retention and Disposal

• Licensing & Account Logs: We retain your account, billing, and subscription profile records for as long as your corporate account remains active, or as required by Sri Lankan commercial tax and corporate record retention compliance laws.
• Local Caches: Any locally cached authentication state tokens or layout preferences generated by the software on your office PC remain under your physical control. Uninstalling the desktop application package from your machine completely purges all associated local cache structures.

4. Sharing and Disclosure of Information

We do not sell, trade, rent, or lease your corporate account information to third-party marketing entities. Information is only disclosed under the following absolute conditions:

• Service Providers: We may share account data with trusted third-party cloud vendors who facilitate our billing infrastructure, email automated onboarding alerts, or manage system performance telemetry.
• Legal & Regulatory Imperatives: We may disclose your account parameters if explicitly commanded to do so by a valid court order or under the statutory obligations of the laws of Sri Lanka.

5. Security Architecture

The security of your corporate account is paramount. While your communication logs remain locked inside native end-to-end encryption on your machine, we protect your online subscription profile data using standard Secure Socket Layer (SSL/TLS) encryption layers, secure firewalls, and strict access controls within our administrative modules.

6. Third-Party Platform Disclaimer

Opal Connect integrates with third-party messaging utility architectures (specifically WhatsApp/Meta). This Privacy Policy applies strictly to data processed by Opal Corporation (Pvt) Ltd. We bear no legal or operational responsibility for the privacy practices, data handling protocols, or security frameworks deployed by third-party communication platforms on your linked mobile devices.

7. Compliance with Local Privacy Frameworks

We operate and maintain our data tracking structures in compliance with the Personal Data Protection Act No. 9 of 2022 (PDPA) of Sri Lanka. If you are an authorized administrator of an account on connectopal.com, you retain full rights to request access to the account profile data we hold, demand structural corrections, or request complete deletion of your licensing profile.

8. Changes to this Privacy Policy

We may update our Privacy Policy periodically to match deployment upgrades. Any structural alterations will be communicated by updating the "Last Updated" timestamp at the top of this document and publishing the revised policy text openly on our web domain.

9. Legal and Corporate Contact

Corporate Entity: Opal Corporation (Pvt) Ltd
Official Web Domain: connectopal.com
Data Compliance Mailbox: support@connectopal.com