Privacy Policy

OpinionLens ("OpinionLens", "we", "us") is an enterprise social intelligence platform operated by Plainsurf LLC FZ, Dubai, UAE. This policy explains how we collect, process, store, and protect data on behalf of our customers and the individuals whose public content may appear within analyses.

We operate on a strict, privacy-first principle: we only process content that is already publicly available, we minimize what we retain, and we never sell personal data.

OpinionLens processes two distinct categories of data, kept logically separated at all times:

• Public social content — posts, comments, hashtags, engagement counts, and publicly listed author handles that platforms make openly accessible. We do not access private accounts, direct messages, or content behind a login or privacy wall.
• Customer account data — the name, work email, company, and role of authorized users who create an OpinionLens workspace, plus operational metadata such as login timestamps and audit logs.

Public content is gathered only through official platform APIs and compliant, permitted collection methods, respecting each platform’s terms of service and technical access controls. We honor robots directives, rate limits, and platform opt-out signals.

We do not circumvent authentication, scrape private or restricted areas, or purchase datasets of questionable provenance.

We process public content under legitimate interest for the purpose of aggregate market and sentiment intelligence, and we process account data to perform our contract with the customer.

Data is used strictly for the analytical purposes for which it was collected. We do not repurpose customer data for advertising, model training on identifiable individuals, or resale.

We retain only what is necessary to produce insights. Wherever an analysis does not require identity, we aggregate and de-identify content so that outputs reflect trends rather than individuals.

Public author handles are displayed only where they are already public and material to the insight (for example, ranking high-reach accounts). We provide tooling for customers to further mask or exclude handles.

We apply defense-in-depth controls to safeguard all data in our custody:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access control, least-privilege permissions, and per-workspace data isolation.
• Comprehensive audit logging of administrative and data-access events.
• Regular vulnerability scanning, dependency monitoring, and periodic third-party security review.
• Secrets management with no credentials stored in application code.

Collected public content is retained only for the active analysis window configured by the customer and is purged on a rolling schedule thereafter. Customer account data is retained for the life of the contract and deleted within 30 days of account closure, except where a longer period is legally required.

We use a limited set of vetted infrastructure sub-processors (for cloud hosting and data storage) bound by contractual confidentiality and security obligations. Where data is transferred across borders, we rely on recognized safeguards such as standard contractual clauses.

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing based on legitimate interest.

Individuals whose public content appears in OpinionLens may request removal or masking of their handle from active datasets. Verified requests are actioned within 30 days.

OpinionLens does not sell, rent, or trade personal data. We do not build cross-customer profiles of individuals, and customer datasets are never commingled.

We may update this policy to reflect changes in law, technology, or our services. Material changes will be communicated to workspace administrators, and the "last updated" date above will always reflect the current version.