Privacy Policy

1. Introduction

Welcome to Open Angle Post ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data collection, use, and disclosure when you use our platform.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• •Account Information: When you create an account, we collect your email address, username, and password (which is hashed and never stored in plain text).
• •OAuth Information: If you sign in using Google or Apple OAuth, we collect your email address, name, and profile picture (avatar URL) from the OAuth provider.
• •User-Generated Content: We collect comments, reactions, and any other content you submit through our platform.

2.2 Automatically Collected Information

• •Usage Data: We may collect information about how you access and use our service, including IP addresses, browser type, device information, and pages visited.
• •Cookies: We use authentication cookies to maintain your session. See our Cookie Policy for more information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• •To provide, maintain, and improve our service
• •To authenticate your identity and manage your account
• •To enable you to post comments and interact with content
• •To communicate with you about your account or our service
• •To detect, prevent, and address technical issues and security threats
• •To comply with legal obligations

4. Data Sharing and Disclosure

4.1 Third-Party Services

We use third-party OAuth providers (Google and Apple) for authentication. When you sign in using these services, they may collect and process your information according to their own privacy policies:

• •Google: Google Privacy Policy
• •Apple: Apple Privacy Policy

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Your Rights (GDPR & CCPA)

5.1 European Economic Area (EEA) Users

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• •Right to Access: You can request a copy of the personal data we hold about you.
• •Right to Rectification: You can request correction of inaccurate or incomplete data.
• •Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• •Right to Data Portability: You can request your data in a structured, machine-readable format.
• •Right to Object: You can object to processing of your personal data.
• •Right to Restrict Processing: You can request restriction of processing in certain circumstances.

5.2 California Users

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• •Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose.
• •Right to Delete: You can request deletion of your personal information.
• •Right to Opt-Out: We do not sell your personal information. If this changes, we will provide an opt-out mechanism.

To exercise any of these rights, please contact us at contact@oapost.com.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes or legitimate business interests.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• •Encryption of passwords using industry-standard hashing algorithms
• •Secure authentication cookies with httpOnly and secure flags
• •Regular security assessments and updates
• •Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

For EEA users, we ensure that appropriate safeguards are in place for international transfers, including standard contractual clauses or adequacy decisions by the European Commission.

9. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with applicable data protection laws.

We will provide you with information about the nature of the breach, the likely consequences, and the measures we have taken or propose to take to address it.

12. Your Consent and Withdrawal

By using our Service, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use our Service.

You may withdraw your consent at any time by contacting us. However, please note that withdrawing consent may affect your ability to use certain features of our Service. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

We may process your personal information without your consent where we have a legitimate interest, legal obligation, or contractual necessity to do so.

13. Data Controller and Data Processor

For the purposes of GDPR and other applicable data protection laws, [LEGAL_ENTITY] acts as the data controller for personal information collected through our Service.

If you have any questions about data processing or wish to exercise your rights, please contact us using the information provided in the Contact Us section.

14. Data Location and Storage

Your personal information is stored and processed on servers located in [DATA_LOCATION]. We use cloud-based services and may transfer your data to servers in other jurisdictions as necessary for service provision.

We implement appropriate safeguards to ensure that your data receives an adequate level of protection regardless of where it is processed, in accordance with applicable data protection laws.

15. Automated Decision-Making and Profiling

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

If we begin using such processes in the future, we will notify you and provide you with the opportunity to opt out or challenge the decision, as required by applicable law.

16. Supervisory Authority

If you are located in the EEA and have concerns about our data processing practices, you have the right to lodge a complaint with your local data protection authority (supervisory authority).

We encourage you to contact us first with any concerns so we can address them directly. However, you always have the right to contact your supervisory authority.

17. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no standard for how DNT signals should be interpreted.

We do not currently respond to DNT browser signals or mechanisms. However, we only collect the information necessary to provide our Service and do not engage in cross-site tracking for advertising purposes.

18. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: