Privacy Notice

Last updated: 6 October 2026

1. Controller

Opus Twin is a service offered under the Opus Growth brand. The data controller is the sole proprietorship of Talat KOÇ (Türkiye). Contact: support@opus-growth.com.

2. Data we process

• Account data: email address, name, language, sign-in records (time, IP address, browser).
• Billing data: subscription status and Paddle customer ID. Card details never reach us; Paddle.com is the merchant of record.
• Content: documents you upload, emails and attachments imported from mailboxes you connect, notes and drafts created by your assistant. These may include special categories of data such as health, legal or financial information.
• Mailbox credentials: the app password of mailboxes you connect, stored encrypted and used only to sync mail and save drafts.

3. Purposes and legal bases

We process data to provide the service (contract), to meet legal obligations, and to keep the service secure (legitimate interest). For special categories of data in your content and for international transfers we rely on your explicit consent, which you can withdraw at any time by deleting your account.

4. Where data is stored and who receives it

• Hosting: Hetzner Online GmbH, Helsinki (Finland). Each user's disk is encrypted with its own key.
• AI: the assistant on your server runs on your own Claude account. When you talk to Claude, the content the assistant reads is sent to Anthropic PBC (USA) to generate the answer, under your agreement with Anthropic and its privacy policy.
• Payments: Paddle.com Market Ltd. (UK) as merchant of record.

We never sell your data, share it for advertising or use it to train AI models.

5. Access and security

Your server runs isolated from other users and can only reach the Claude service on the internet. Our team does not access your content in normal operation; any access needed for incident handling is logged. Key actions are shown to you on the Settings page.

6. Retention

Content is kept while you are subscribed. When the subscription ends your server is stopped and after 30 days the disk is permanently destroyed together with its encryption key. Deleting your account destroys it immediately. Encrypted backups rotate out within 30 days. Billing records are kept for statutory periods.

7. Your rights

You can request access, correction, deletion, information about recipients, object to processing, and data portability by writing to support@opus-growth.com. You can also export all your data and delete your account from the panel.