Privacy Policy for Oppex

Last Updated: October 11, 2026

Welcome to Oppex! We are committed to protecting your privacy and ensuring your personal data is handled securely and transparently, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable global standards.

This Privacy Policy explains how we collect, use, and protect your information when you use our website (oppex.io) and software application (collectively, the "Service").

About Oppex

Oppex is an AI-powered coding copilot designed for individual learning and personal skill development. The Service is intended to help users learn programming concepts, understand algorithms, and improve their coding skills through AI-assisted practice. It is intended strictly for personal use and is not designed for use during official, proctored, or supervised assessments of any kind.

1. Information We Collect

We collect minimal personal data necessary to provide our Service:

Account Information: When you create an account, we collect your name and email address. If you use Google OAuth, we receive this information from Google.
Payment Information: If you purchase credits or a subscription, your payment details (e.g., credit card, UPI ID) are processed securely by our third-party payment gateway (Razorpay). We do not store your full payment card details or UPI PINs on our servers.
Usage & Telemetry Data: When you browse our website or use the application, we collect aggregated, non-identifying telemetry (such as browser type, operating system, page response latency, and feature usage events) via Google Analytics and internal crash diagnostics.
Code and Context Data: As an AI-powered coding assistant, Oppex processes the code snippets, error logs, and related context you submit to generate solutions. This data is sent to our AI providers (e.g., OpenRouter) temporarily for processing and is not used to train our AI models without your explicit consent.

2. How We Use Your Information

We use your data solely for the following purposes:

To create and maintain your account.
To process payments and maintain your credit balance.
To provide, maintain, and improve the Service (including generating AI code solutions).
To communicate with you regarding updates, security alerts, and support requests.
To comply with legal obligations.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like Google Analytics) to track the activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. For more detailed information about the cookies we use, please read our Cookie Policy.

4. Data Sharing, Third Parties & Cross-Border Processing

We do not sell your personal data. We share data only with trusted third parties strictly necessary for operating our Service:

Payment Processors: Razorpay (for processing transactions).
Cloud Infrastructure: Google Firebase (for hosting, database, and authentication).
Web & Product Analytics: Google Analytics (Google LLC), utilized to monitor aggregated traffic patterns, conversion performance, and site usability. All tracking is managed via Google Consent Mode v2 and can be opted out via browser settings or cookie controls.
AI Providers: OpenRouter and partnered foundational LLM providers (for generating code solutions). Data sent to these providers is ephemeral and subject to enterprise commercial agreements with zero-retention and no-training policies for API users.
Cross-Border Data Processing: You acknowledge that AI inference computation and secure cloud hosting may be executed on servers located outside the Republic of India, subject to standard contractual safeguards and encryption.

5. Your Rights under the DPDP Act

As a user residing in India, you have the following rights regarding your personal data:

Right to Access: You can request a summary of the personal data we hold about you.
Right to Correction & Erasure: You can update your information or request deletion of your account and associated data.
Right to Grievance Redressal: You can escalate concerns to our Grievance Officer.
Right to Nominate: You can register a nominee to exercise your rights in the event of death or incapacity (contact privacy@oppex.io).
Right to Withdraw Consent: You may withdraw your consent for data processing at any time by deleting your account.

6. Data Security

We implement industry-standard security measures, including encryption in transit (TLS) and at rest, secure Firestore rules, and atomic transactions, to protect your data against unauthorized access or breaches. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Oppex is intended strictly for users aged 18 and older. Under the DPDP Act, personal data of children requires verifiable parental consent. We do not knowingly collect personal data from anyone under 18 without verifiable parental consent. If we discover an account registered by an individual under 18 without consent, the account will be suspended, data deleted, and any unconsumed paid balance refunded to the parent upon verified request.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will provide at least 15 days advance notice via email or a prominent notice on our website. Continued use of the Service after changes indicates your acceptance.

9. Contact Us & Grievance Officer

In accordance with the DPDP Act, 2023, and Rule 3(2) of the IT Rules, 2021, the contact details of our Grievance Officer are:

Grievance Officer: Grievance Redressal Officer, Oppex
Designation: Designated Grievance & Nodal Officer
Address: Oppex, Chilakaluripet, Palnadu District, Andhra Pradesh, India - 522616
Email: grievance@oppex.io
Working Hours: Monday – Friday, 10:00 AM – 6:00 PM IST

We acknowledge complaints within 24 hours and resolve them within 15 calendar days. Users may also approach the Grievance Appellate Committee at https://gac.gov.in if unsatisfied with a grievance decision.

For general privacy inquiries, please contact privacy@oppex.io.