Legal

Privacy Policy

Last updated: November 14, 2026

1. Introduction

Optipacker ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our packaging optimization platform.

2. Information We Collect

We collect information you provide directly to us, including:

Account information (email, name, organization)
3D model files you upload for optimization
Packaging configurations and project data
Usage data and analytics
Communication preferences
AI assistant connections: when you connect an AI assistant to Optipacker, we keep the connection (your account, the assistant name and type, the projects and permissions you granted, and the connection status). We also keep a log of the tool calls of the assistant, linked to your account and the connection: the tool name, the project, the result, the time and the duration. The log holds no tool input text and no IP address.
Engineering check decisions: when a member confirms or declines the engineering checks of an AI assistant run, we keep the member, the role, the time and the decision. We keep a confirmation with the run. We keep a decline and its reason with the run request, and we delete the run request after it expires. Members of the organization see the name and the role.
Standing engineering profiles: when a member approves the engineering checks of a part as a standing profile, we keep the values, the member, the role, the time and the end date. A run of an AI assistant that uses the profile names it. When a member retires a profile, we keep the member, the role and the time. Members of the organization see the name and the role of the member who approved or retired a profile.
Adoptions by an AI assistant: when an AI assistant adopts a proposal option for you, we keep the connection, the policy version and the time with the adoption. Members of the organization see the connection name.
Projects and containers that an AI assistant creates: when an AI assistant creates a project or a container for you, we keep with the record which connection created it and the time. For a container, we also keep the source of its measurements that the assistant gives.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain our Service
Process and optimize your packaging configurations
Generate reports and analytics
Improve and personalize your experience
Communicate with you about updates and support
Ensure security and prevent fraud
Show your organization which assistant started a proposal run, and let you and your organization administrator see and revoke assistant connections
Tell the member who connected an AI assistant when a run waits for a confirmation or ends, in the app and by email.

4. Data Storage and Security

We use Firebase and Google Cloud Platform services for authentication, data storage and file storage. Access to projects and working records is managed through organization membership, roles and project permissions.

6. Your Data Rights

Here is how you can exercise your data rights:

Right to Access

You can view your profile and accessible project data in the app dashboard. Contact privacy@optipacker.com for a personal data access request.

Right to Export

You can request a personal data export from your profile settings.

Right to Deletion

You can start the account deletion process and review its effects in your profile settings.

Right to Rectification

You can update your profile information at any time through the app.

Right to Restrict Processing

You may object to or restrict processing of your data. Contact us at privacy@optipacker.com to exercise this right.

7. Cookies and Similar Storage

We store information in your browser only as this section describes. Necessary storage needs no consent. Every other tool that stores information in your browser starts only after you consent to its category. You can change or withdraw your consent at any time with Cookie settings. A withdrawal deletes the cookies of the tool on this site and reloads the page.

Necessary

Firebase Authentication (Google) keeps your sign-in session in the local storage and IndexedDB of your browser. The local storage entry optipacker.consent keeps your consent choice and a random consent ID for 12 months. After 12 months, or when the list of tools changes, we ask again.

Record of your consent

Each time you make or change a choice, your browser sends it to our server. We keep a record of the consent ID, your choice for each category, the version of the tool list and the time of the choice. The record lets us prove your consent (Article 7(1) GDPR). It contains no IP address, browser details or account. We delete it automatically 13 months after the choice. To limit the number of requests, our server keeps a hash of your IP address for one hour. Our database deletes expired records and hashes within about one day.

Visit counts without cookies

Vercel Web Analytics (Vercel Inc.) counts the page views of this site. It sets no cookies and stores nothing in your browser, so it runs without consent. For each page view, it records the page address, the referring site, your approximate location (country, region and city), and the type and version of your device and browser. Vercel tells visits apart by a hash of the request and discards the hash after 24 hours. We remove secret codes from page addresses before they are sent. The legal basis is our legitimate interest in knowing which pages visitors use (Article 6(1)(f) GDPR). Vercel processes the data for us under its data processing terms and can process it outside the European Economic Area.

Analytics (with your consent)

Google Analytics 4, Google Ireland Limited. Counts visits, pages, traffic sources and form milestones, so we can see which content helps visitors. Cookies _ga and _ga_<property>, 2 years.
Microsoft Clarity, Microsoft Ireland Operations Limited. Records clicks, scrolls and page movement on the public pages as heatmaps and session replays. Form inputs are masked. Cookies _clck (1 year) and _clsk (1 day).
Sentry Session Replay, Functional Software, Inc. (Sentry). Records a masked replay of 10 % of sessions, so we can reproduce faults. Text, inputs and media are masked. Session storage entry sentryReplaySession, until the tab closes.

Marketing (with your consent)

Dealfront (Leadfeeder) tracker, Dealfront Group GmbH. Matches the network address of your visit to a company name and shows us which public pages the company visited. When you send a form on our site, it records the email address you enter and links it to your visits. Cookie _lfa (up to 2 years) and local storage entries _lfa and _lfa_expiry.

The legal basis of the optional tools is your consent (Article 6(1)(a) GDPR and § 89(3) of Act No. 127/2005 Coll.). The providers process the data for us under their data processing terms. Some providers can process data outside the European Economic Area.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion of your data at any time by contacting us.

We delete each tool call log entry of an AI assistant 180 days after the call. When you or your organization administrator revoke an assistant connection, we keep the connection record as a record of the access you granted.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at privacy@optipacker.com