This Privacy Policy describes how Opti LLC (“Opti,” “we,” “us”) collects, uses, shares, and deletes personal information when you use the Opti application at app.joinopti.com (the “Service”). Opti is a credit-card rewards coach. You create an account, may sign in with email or with Google or Facebook through Wix, link cards through Plaid, and Opti stores and scores your transactions so you can see whether you used the best card and collected statement credits.
Opti LLC is an Illinois limited liability company. The Service is for people in the United States who are 18 or older. If you do not agree with this policy, do not use the Service. Questions: support@joinopti.com.
This policy covers personal information we process as the provider of Opti. It does not cover your bank or card issuer; Plaid’s processing as described in Plaid’s privacy policy, which you accept when you connect an institution through Plaid Link; or the public marketing site on Wix, except where that site sends you into Opti login or billing.
A frozen demo snapshot may be available so you can try the product without linking a bank. Demo data is sample data, not your financial information.
Account. Email, Opti user id, password (held by our auth provider) or Wix membership identifiers, optional product-email preferences, and multi-factor authentication status for administrators.
Sign-in providers. If you use Continue with Google or Continue with Facebook, Wix and that provider process your sign-in. We receive the email (and related membership identifiers) needed to create or match your Opti account. We do not receive your Google or Facebook password.
Plaid. If you link cards, Plaid collects your institution login in Plaid Link. Opti never sees your bank username or password. We store Plaid Item ids, an encrypted access token, account names/masks, and transactions (date, amount, merchant, MCC/categories, account id). We request the Transactions product for U.S. institutions, up to about two years of history. We currently allow up to five bank connections per account. We do not store full PAN/CVV, SSN, or government ID.
You enter in Opti. Category overrides, card type, credit enrollments, point values, goals, bug reports and suggestions (including page path and an optional transaction id).
Technical. Session cookies, and logs (IP, user agent, path, status, user id when signed in). Client error reports if the page fails. We do not use advertising pixels or a consumer analytics SDK on the app.
We use this data to run your account, sync and score cards, send email you opted into, investigate bugs, enforce connection limits and security, and improve the catalog. Catalog research may use public issuer pages and optional AI tools; that path does not receive your transaction ledger. We do not sell personal information or use your transactions to train public AI models.
Processors include Plaid, Supabase, Railway (application host), Wix (login/billing), Google and/or Facebook (if you choose those sign-in buttons), a transactional email provider (Resend), and a private Slack webhook for bug alerts. An Opti administrator may open a read-only snapshot of your cards and recent transactions for support; that access is logged. We will not ask for bank passwords or bank OTP codes.
We may disclose information if we reasonably must to comply with law, enforce our terms, or protect Opti or others from fraud or security incidents.
Essential httpOnly cookies keep you signed in (and a demo cookie if you open the sample account). Production cookies are Secure. We do not use those cookies to advertise to you on other sites. Blocking all cookies prevents staying logged in.
Monthly Report Card and mid-month credit emails are off until you opt in under My Account. Invites and support notices are operational. Contact us at support@joinopti.com (Google Workspace mail for joinopti.com).
You may delete your account in My Account. We then revoke Plaid connections Opti stored and delete live Opti application data. Deleting Opti does not cancel a Wix subscription; cancel billing on Wix separately.
If you do not log in or use Opti for 12 months, we delete that live account data the same way. Administrator and demo accounts are not auto-deleted.
After deletion, backup copies may remain in our database host’s point-in-time recovery until those backups expire (typically days, per the host’s settings). We do not keep a separate warehouse of your Plaid ledger.
Removing a single card from Wallet deletes that card’s Opti transactions without deleting your whole account.
The Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have, email support@joinopti.com and we will delete it.
You can access much of your data in the app, correct some fields (for example category), delete your account, opt in or out of product email, and disconnect cards. We do not sell personal information or share it for cross-context behavioral advertising. To request access, deletion, or an appeal, email support@joinopti.com from the address on your account. You will not be discriminated against for exercising privacy rights.
The Service is operated from the United States. If you access it from another country, you understand that your information is processed in the United States.
Production uses HTTPS, MFA for administrators, encrypted Plaid access tokens, and database row-level security. No transmission is 100% secure. Security reports: support@joinopti.com or /.well-known/security.txt.
We may update this policy. The “Last updated” date will change. Material changes that affect how we use financial data will be posted in the Service or sent to the email on your account when reasonably possible.
Opti LLC · support@joinopti.com · joinopti.com · Terms of Service