Privacy Policy

This Privacy Policy describes how Operula collects, uses, and protects personal data in accordance with applicable data protection regulations.

Data Controller

The data controller responsible for personal data processed through the Operula platform is Operula. For any privacy-related inquiries, users may contact the addresses provided in the Contact section.

Personal Data Collected

Operula collects only the personal data strictly necessary for the operation of the platform. This may include:

basic technical data (IP address, browser type, device information)
usage and interaction data (pages visited, navigation patterns, search queries)
contact information voluntarily provided by users (e.g. via contact forms)
account information (email, name, password — hashed) for registered users
authentication data (2FA secrets, recovery codes — encrypted) for users with 2FA enabled
social profile information (optional: Facebook, Instagram, Twitter/X usernames, website, bio, location)
phone number (optional, for OTP authentication and password recovery)
premium subscription data (subscription status, billing information via payment processor)
wishlist and price alert data (for premium users)
public profile settings (profile, wishlist, collections visibility preferences)

Operula does not intentionally collect sensitive personal data beyond what is necessary for authentication and premium service delivery.

Purpose of Data Processing

Personal data is processed for the following purposes:

operating and maintaining the platform
improving content relevance and user experience
responding to user inquiries and communications
ensuring platform security and integrity (including 2FA authentication)
fulfilling legal and regulatory obligations
providing premium services (wishlists, price alerts, early notifications)
managing user accounts and authentication (email, social login, OTP)
processing premium subscriptions and billing
enabling public profile features (when user opts in)
sending newsletters and promotional communications (with consent)
tracking affiliate clicks and conversions (anonymized where possible)

Legal Basis for Processing

Personal data is processed on the basis of:

legitimate interest in operating and improving the platform
user consent, where applicable
compliance with legal obligations

Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless longer retention is required by law.

Data Sharing and Transfers

Operula does not sell personal data and does not share personal data with third parties for commercial purposes.

Data may be shared with trusted service providers solely for technical, operational, or legal reasons, and only where necessary, including:

Payment processors (for premium subscriptions) — billing information only
Social login providers (Google, Apple, Facebook) — authentication data only
SMS gateway providers (Vonage, generic OTP services) — phone numbers for OTP delivery only
Affiliate networks (Awin, CJ, Rakuten, Impact) — anonymized click/conversion data
Email service providers (for newsletters and notifications)

All data sharing is governed by strict agreements ensuring compliance with data protection regulations.

User Rights

Users have the right to:

access their personal data
request correction or deletion of data
object to or restrict data processing
withdraw consent, where applicable
lodge a complaint with a supervisory authority

Data Security

Operula implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

Changes to This Privacy Policy

Operula reserves the right to update this Privacy Policy at any time. Changes take effect upon publication on the platform.

Continued use of Operula constitutes acceptance of this Privacy Policy and any updates.