1. Scope

This Policy applies to information we collect through the Service, including when you submit an OPRA request, create an account, or communicate with us. It does not apply to the practices of government entities that respond to your requests.

2. Information We Collect

• Identifiers. Name, email address, phone number, postal address, account credentials, IP address, device and browser identifiers.
• Request Content. The text of your OPRA request, attachments, and any information you choose to include.
• Payment Data. Payment is processed by our payment provider; OPRAExpress receives only the order metadata necessary to fulfill your request.
• Communications. Messages you send to or receive from records custodians when you use features that route replies through the Service.
• Usage Data. Pages viewed, referring pages, timestamps, and similar analytics.

3. How We Use Information

• provide, operate, and maintain the Service,
• create, send, and track your records requests,
• communicate with you about your account, orders, and request status,
• process payments and prevent fraud,
• protect against fraud, abuse, and security risks,
• comply with legal obligations, and
• improve the Service.

We do not sell your contact information and we do not rent it to third parties.

4. How We Share Information

• With Records Custodians. We transmit your OPRA request and the contact details required by OPRA to the appropriate government entity.
• With Service Providers. Vendors that host our systems, process payments, send email, store files, or provide analytics process information on our behalf under contract.
• For Legal Reasons. We may disclose information to comply with law, a subpoena, or legal process, to protect rights and safety, and to prevent fraud or abuse.
• Business Transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

5. Your Choices

• Access, Correction, Deletion. Contact privacy@opraexpress.com to request access to, correction of, or deletion of your personal information.
• Communications. You can opt out of non-transactional emails by using unsubscribe links. Transactional messages about your account or requests are required to provide the Service.

6. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure.

7. Data Retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

8. Children's Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from children.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the effective date and provide reasonable notice.

10. Contact

Privacy questions and requests: privacy@opraexpress.com