PRIVACY POLICY

Opinova Privacy Policy

Last updated: 15 september 2026

Summary of key changes:

  • We aligned this Policy with the Potloc Corporate Privacy Policy updated on 5 May 2026.
  • We explain how Potloc staff use AI-assisted tools when delivering research services.
  • We clarified the legal basis for processing your survey answers and how results are shared with research clients.

Opinova.io is a professional insights and research platform operated by Potloc Inc. (“Potloc”, “we”, “us”, or “our”). We are committed to protecting your privacy and handling your personal data in compliance with GDPR, UK GDPR, PIPEDA, Québec’s Law 25, CCPA/CPRA, LGPD, and other applicable data protection laws.

This Opinova Privacy Policy (“Policy”) supplements and incorporates the Potloc Corporate Privacy Policy . Opinova is a Potloc sub-brand focused on professional respondents (“Experts”) and adds specific conditions for how we verify and process professional profiles.


1. Scope and When This Policy Applies

This Policy applies when you:

  • Access or use the Opinova website, subdomains, or related experiences;
  • Register as an Expert to participate in professional research activities;
  • Receive survey invitations, communications, or rewards from Opinova;
  • Respond to surveys, profiling questions, or screening forms;
  • Communicate with us regarding your Expert account or participation.

Opinova processes your personal data solely in the context of your role as a respondent (Expert). Opinions and data you share through Opinova are used for professional insights research and are not treated as “client” data under this Policy.

For a full description of Potloc’s general data practices, please refer to the Potloc Corporate Privacy Policy .


2. Categories of Personal Data We Collect

Category Examples Purpose Legal Basis
Contact Information Name, email address Account creation, communication, and Expert relationship management Contract, Consent
Professional Profile Data Job title, company, sector, seniority, geography, LinkedIn profile (if provided) Matching to relevant B2B studies; verifying your professional profile Legitimate Interest, Consent
Demographic Information Age range, country, language, high-level career stage Segmentation, screening, and study eligibility checks Legitimate Interest, Consent
Survey Responses Opinions, experience-based inputs, professional assessments Professional insights, aggregated analysis, and research reporting Legitimate Interest (performing market research for Potloc’s clients). Consent for any sensitive personal information you choose to provide.
Device & Usage Data IP address, device type, browser, session identifiers Security, platform performance, usage analytics Legitimate Interest
Verification & Anti-Fraud Data Professional verification signals, risk scores, device indicators Confirming legitimacy of Expert profiles; preventing abuse Legitimate Interest
Reward & Payout Data Reward balance, preferred payout type, redemption status, country Managing incentives via a third-party provider responsible for processing and fulfilling your incentive payouts Contract, Legitimate Interest
Marketing Preferences Email opt-ins, unsubscribes, communication preferences Sending (or not sending) optional updates and research opportunities Consent

These categories and purposes are consistent with the descriptions contained in the Potloc Corporate Privacy Policy .


3. Data Enrichment & Professional Verification

Data Enrichment Clause:

To ensure that Opinova remains a trusted source of professional insights, we may enrich or verify the information you provide using:

  • Public professional profiles (where accessible), such as corporate websites;
  • Business and employment verification databases;
  • Third-party professional data enrichment tools.

We use this enrichment to:

  • Confirm that you are who you say you are (professionally);
  • Validate your role, company, sector, and seniority level;
  • Ensure that studies reach the right professional audiences;
  • Protect our clients and the platform from misrepresentation.

These processing activities are carried out under Legitimate Interest (fraud prevention, data quality, and research integrity) and, where required by law, Consent.


4. Device Verification & Fraud Prevention

Fraud-Prevention Provider Clause:

Opinova uses a third-party fraud-prevention and device-verification provider to:

  • Detect suspicious login or participation patterns;
  • Identify potential use of VPNs, proxies, emulators, or automated tools;
  • Prevent duplicate or fake Expert accounts;
  • Protect incentives and research quality from abuse.

This provider analyzes device and behavioral-level signals only. It does not collect biometric data or store copies of government IDs. Processing is based on Legitimate Interest in securing the platform and maintaining the integrity of research.

These measures are aligned with the security and fraud prevention principles set out in the Security & Fraud Prevention section of the Potloc Corporate Privacy Policy.


5. Data Sharing & Third-Party Providers

We do not sell your personal information. We may share your data with:

  • Research clients: Potloc may share survey responses with the research client who commissioned the study, in a form that does not directly identify you unless you have given explicit consent to be identified or re-contacted. See the “Our Clients” row in section 2 of the Potloc Corporate Privacy Policy.
  • Third-party provider responsible for processing and fulfilling your incentive payouts: To issue and process monetary or equivalent rewards in your name.
  • Third-party fraud-prevention and device-verification provider: To assess risk and protect the platform against abuse.
  • Technology and infrastructure providers: Hosting, analytics, customer messaging, and support tools.
  • AI-assisted productivity tools: Potloc staff may use AI-assisted tools when analysing survey data and preparing reports. Potloc’s AI service providers process this data only on Potloc’s instructions and do not use it to train their AI models. These tools are not used to make automated decisions that produce legal or similarly significant effects on you, and a person reviews every output. Potloc may also use survey answers in a de-identified form to improve its services. See the “AI-Assisted Service Delivery” row in section 1 of the Potloc Corporate Privacy Policy.
  • Service provider categories: Hosting, customer messaging, fraud prevention and device verification, and incentive payments. A full list of sub-processors is available on request at privacy@potloc.com.
  • Public authorities and regulators: Where we are legally required to disclose information.

Where data is transferred outside your jurisdiction, we apply appropriate safeguards such as Standard Contractual Clauses, consistent with the International Transfers section of the Potloc Corporate Privacy Policy.


6. Your Rights Under GDPR & Other Laws

Subject to applicable law, you may have the right to:

  • Access the personal data we hold about you;
  • Request rectification of inaccurate or incomplete personal data;
  • Request deletion of your data when legally applicable;
  • Withdraw consent where processing is based on consent;
  • Object to certain processing, including certain profiling or enrichment;
  • Request restriction of processing in specified circumstances;
  • Receive your data in a commonly used, machine-readable format (data portability);
  • Complain to your local Data Protection Authority.

These rights mirror those detailed in the Your Rights section of the Potloc Corporate Privacy Policy.

To exercise your rights in relation to Opinova, you can contact us at: privacy@potloc.com.


7. Cookies & Tracking Technologies

Opinova uses cookies and similar technologies to:

  • Maintain secure sessions and authentication;
  • Measure site performance and survey participation flows;
  • Detect and prevent fraudulent or automated traffic;
  • Improve the Expert experience and platform features;
  • Attribute traffic from professional channels or campaigns where applicable.

For more information on how Potloc uses cookies and similar technologies, please refer to the Cookies & Tracking section of the Potloc Corporate Privacy Policy.


8. Data Retention

  • Expert & profile data: Kept up to 3 years from your last meaningful activity on Opinova;
  • Survey response data: Retained as required for research and client reporting, typically in aggregated or anonymised formats;
  • Reward & payment-data: Retained in accordance with accounting and legal obligations;
  • Verification & anti-fraud logs: Retained for as long as reasonably necessary to monitor and prevent abuse.

These retention practices are aligned with the Data Retention section of the Potloc Corporate Privacy Policy.


9. Data Security

We implement appropriate security measures, including:

  • Encryption in transit and at rest where appropriate;
  • Access controls based on role and need-to-know principles;
  • Use of a third-party fraud-prevention and device-verification provider;
  • Logging and monitoring of access and key transactions;
  • Internal policies and training on data protection and security.

These measures align with the security practices described in the Security & Safeguards section of the Potloc Corporate Privacy Policy.


10. Contact Information

Potloc Inc. is the data controller for the personal data described in this Policy.

Privacy Officer and Data Protection Officer

privacy@potloc.com
Potloc Inc., 5420 Saint-Laurent Street, Suite 300, Montreal, Quebec, H2T 1S1, Canada

Representative in the European Union

Potloc France, 32 Boulevard Haussmann, 75009 Paris, France

General support

support@opinova.io


11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or how Opinova operates. When we make material changes, we will update the “Last updated” date and, where required, notify you directly.