Privacy Policy

This Privacy Policy explains how Optical Path Solutions, LLC ("Company," "we," or "us") collects, uses, stores, and protects information when you use the Platform at opticalpathengineering.com and the Services offered through it. This Policy is designed to comply with the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA"), and other applicable privacy laws. By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

1.1 Account Information. When you create an account, we collect:

• Email address (required)
• Subscription tier and billing status
• Account creation date and last login timestamp

1.2 Usage Data. When you use the Services, we automatically collect:

• Log data: IP address, browser type and version, pages visited, timestamps of Service interactions
• Feature usage: which tools were accessed, number of trace analyses run, export and print actions
• Error logs: diagnostic data collected when software errors occur, to improve reliability

1.3 OTDR Trace Files. When you use the Fiber Damage Locator, we collect:

• Uploaded .sor files and any other trace file formats you submit
• Derived analysis data: event locations, loss values, reflection signatures, and fault location estimates generated from those files

1.4 Fiber Plant Data. When you use the Facility Database System, we store:

• GPS coordinates and geographic data for fiber routes, vaults, splice cases, and infrastructure elements
• Device names, port labels, circuit identifiers, rack assignments, and associated metadata
• Hub and facility records and any documentation you enter

1.5 Payment Information. We use a third-party payment processor (Stripe) to handle payment transactions. We do not store full credit card numbers or payment instrument details on our systems. We receive only a transaction confirmation and your billing postal code from the payment processor.

1.6 Information We Do Not Collect. We do not collect your physical address, phone number, social security number, government ID, or biometric data unless you voluntarily provide such information in support communications.

2. How We Use Your Information

We use the information we collect only to provide and improve the Services. Specifically:

• To authenticate your account and manage your subscription;
• To process uploaded OTDR files and return fault location results to you;
• To store and display your fiber plant data as you have entered it;
• To diagnose technical issues and improve the reliability and accuracy of the Services;
• To send transactional emails (account confirmation, subscription renewal notices, security alerts, and responses to support requests);
• To comply with legal obligations.

We do not use Customer Data to train machine learning models, build user profiles for advertising, conduct behavioral analytics beyond what is necessary to operate the Services, or for any purpose not listed above.

3. How We Share Your Information

3.1 No Sale of Data. We do not sell, rent, or trade your personal information or Customer Data to any third party for their own commercial purposes, now or in the future.

3.2 Service Providers. We may share information with trusted third-party vendors who assist us in operating the Services (for example: cloud infrastructure providers, transactional email services, payment processors). These vendors are contractually required to use your information only to provide services to us and to maintain appropriate security measures.

3.3 Legal Requirements. We may disclose your information if required to do so by applicable law, court order, subpoena, or governmental authority, or when we have a good-faith belief that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers. In the event of a merger, acquisition, financing, or sale of all or substantially all of the Company's assets, Customer Data may be transferred to a successor entity. We will provide notice before any such transfer occurs, and the successor will be required to honor the terms of this Privacy Policy.

4. Data Retention

4.1 Account and Plant Data. Account information and fiber plant data are retained for the duration of your active account. Upon account deletion or termination, this data is retained for an additional ninety (90) days to allow for account recovery, after which it is permanently and irreversibly deleted from our systems.

4.2 OTDR Trace Files. Raw uploaded .sor files and their derived analysis data are retained for thirty (30) days following the session in which the file was uploaded. After 30 days, the raw file and its trace data are automatically and permanently deleted. The event summary table associated with a ticket may be retained as part of the ticket record until the ticket is closed.

4.3 Usage Logs. Anonymized and aggregated usage logs may be retained for up to twelve (12) months for diagnostic, reliability, and product improvement purposes. These logs do not include Customer Data.

4.4 Early Deletion Requests. You may request deletion of your account and associated Customer Data at any time. We will process deletion requests within thirty (30) days.

5. Your Privacy Rights

5.1 GDPR Rights (EEA and UK Users). If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR or UK GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to applicable legal retention obligations.
• Right to Restriction: Request that we restrict processing of your data under certain circumstances.
• Right to Data Portability: Receive a copy of your personal data in a structured, machine-readable format (e.g., JSON or CSV export).
• Right to Object: Object to processing of your personal data based on our legitimate interests.

Lawful Basis for Processing: We process your personal data on the legal basis of performance of a contract (Article 6(1)(b) GDPR) — specifically, to provide the Services you have subscribed to.

5.2 CCPA Rights (California Residents). If you are a California resident, you have the following rights under the CCPA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information.
• Right to Non-Discrimination: We will not deny you Services or charge you different prices because you exercised your privacy rights.

5.3 How to Exercise Your Rights. To submit a data access, export, deletion, or correction request, email us at support@opticalpathengineering.com with the subject line "Privacy Request." We will verify your identity before processing your request and respond within the timeframes required by applicable law (generally 30 days).

6. Data Security

We implement commercially reasonable technical and organizational security measures, including:

• Encryption in transit via TLS/HTTPS for all data transmitted to and from the Platform
• Access controls limiting personnel access to Customer Data on a need-to-know basis
• Regular review of security practices and infrastructure configurations

No method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

7. Cookies and Tracking

We use session cookies to maintain your authenticated state while you are logged in to the Platform. We do not use third-party advertising or behavioral tracking cookies, cross-site tracking pixels or web beacons, or browser fingerprinting.

We use Google Analytics to understand how visitors use the Platform. Google Analytics uses cookies to collect anonymized usage data, including pages visited, session duration, and general geographic region (derived from IP address). You can opt out using the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout) or your browser's tracking-prevention settings. See Google's Privacy Policy (policies.google.com/privacy) for how Google processes this data.

8. Third-Party Services and Links

The Platform may contain links to third-party websites or integrate with third-party services (such as mapping APIs). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to us, please contact us at support@opticalpathengineering.com, and we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least fourteen (14) days before the updated Policy takes effect. Continued use of the Services after the effective date of a revised Policy constitutes your acceptance of the changes.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Optical Path Solutions, LLC

309 Woodside Dr

Harrisburg NC 28075

Email: support@opticalpathengineering.com

If you are located in the EEA or UK and we have not satisfactorily addressed your concern, you have the right to lodge a complaint with your local data protection supervisory authority.