Privacy Policy
How we collect, use and protect your personal data.
Last updated: 2026-08-11
1. Overview and scope
This Privacy Policy describes how OPSControl ('we', 'us' or 'our') collects, uses, stores, shares and protects the personal data of people who use the case monitoring service on the platform. By using the service, you agree to the collection and processing of your data as described in this Policy, in accordance with applicable law, including the Brazilian General Data Protection Law (LGPD - Law 13.709/2018) and the European Union General Data Protection Regulation (GDPR), where applicable.
2. Data we collect
We collect only the data necessary to provide the service: (i) identification and contact data provided at signup (name, e-mail and encrypted password); (ii) the receipt numbers of the USCIS cases you choose to monitor; (iii) technical access data, such as IP address, browser type and device, collected in aggregate for security and service improvement; and (iv) the preferences you configure in your account. We do not request or collect unnecessary sensitive data to provide the service. Your own Telegram bot token is stored encrypted and is used exclusively to send you the alerts you configured.
3. Legal basis and purposes of processing
We process your data based on: (i) the performance of the service contract, to enable the monitoring of your cases and the sending of alerts; (ii) consent, when you authorize specific uses (such as configuring Telegram alerts); and (iii) legitimate interest, for security, fraud prevention and continuous service improvement. Data is used exclusively for the purposes stated in this Policy and is not sold, rented or shared with third parties for commercial purposes.
4. Data sharing
We only share data with essential service providers for the operation of the platform, such as hosting, authentication and payment processing (for example, the card processor), always under contract, with restricted use for specified purposes and with adequate technical and organizational measures. We do not sell or trade your personal data. We may also disclose data when required by law, court order or a competent authority.
5. Information security
We adopt technical and organizational measures to protect data against unauthorized access, loss, alteration or improper disclosure, including encryption in transit (TLS) and at rest, least-privilege access control and system monitoring. Your password is stored encrypted (hashed). No transmission or storage is 100% secure; you are also responsible for protecting your access credentials.
6. Data retention
We retain personal data only for as long as necessary for the purposes of this Policy or to comply with legal, accounting or tax obligations. When you close your account, associated data is removed or anonymized, except where the law requires retention for a longer period.
7. Your rights
At any time, you may request: (i) confirmation of whether processing exists; (ii) access to the data; (iii) correction of incomplete, inaccurate or outdated data; (iv) anonymization, blocking or deletion of unnecessary or non-compliant processed data; (v) portability; (vi) revocation of consent; and (vii) information about with whom we share your data. To exercise your rights, contact us at the e-mail indicated in this Policy. We will respond to your request within the legal timeframes.
8. Cookies and tracking technologies
We use cookies and similar technologies that are strictly necessary for the platform to function (for example, to keep your session authenticated) and, where applicable, aggregate analytics cookies. You can manage cookies through your browser settings. If the service starts using third-party cookies for advertising, this Policy will be updated.
9. International data transfers
Data may be processed on servers located outside your country, including in the United States, for the provision of the service. We adopt appropriate safeguards for the transfer, including standard contractual clauses and verification of adequate levels of protection, as required by applicable law.
10. Children's privacy
The service is intended for people over 18 years old. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us so we can remove it.
11. Changes to this Policy
This Policy may be updated periodically to reflect legal or service changes. The current version will always be available on this page and indicates the date of the last update. Substantial changes will be communicated to you by e-mail or notice on the platform.
12. Contact and data protection officer
For any questions related to this Policy or the processing of your data, contact us at [email protected]. We will respond within the timeframes established by law.
For privacy questions, contact us:
[email protected]