Privacy Policy

1. Overview

This Privacy Policy (the "Policy") describes how Mowoai Technology Co., Ltd. ("Mowoai", "OPCA", "we", "us") collects, uses, discloses, and protects personal information in connection with the OPCA websites, products, platforms, and services operated by us and made available at https://opca.ai (collectively, the "Services").

We are committed to handling personal information responsibly and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy and data protection regulations.

2. Data Controller & Contact

For purposes of this Policy, the data controller of your personal information is:

If you have any questions or wish to exercise your privacy rights, please contact us at the email address above.

3. Information We Collect

We collect personal information from the following sources:

3.1 Information you provide directly

• Account information: name, email address, phone number, job title, company, country.
• Inquiry information: details you submit via contact or demo request forms, including the content of your message.
• Customer Data: data, content, and materials that you upload, submit, or process when using the Services.

3.2 Information collected automatically

• Device & usage data: IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, time spent on pages, and click patterns.
• Cookies and similar technologies: see Section 6 below.

3.3 Information from third parties

We may receive limited business contact information from partners, resellers, or publicly available sources, where lawful.

4. How We Use Information

We use the personal information we collect for the following purposes:

• To provide, operate, maintain, secure, and improve the Services.
• To respond to your inquiries, fulfill your requests, and provide customer support.
• To send you administrative information, such as updates to our terms, policies, and security notices.
• To send you marketing communications where you have given your consent or where otherwise permitted by law.
• To conduct analytics, research, and benchmarking to better understand how the Services are used.
• To detect, prevent, and address fraud, security incidents, abuse, and other harmful activity.
• To comply with our legal obligations and enforce our legal rights and agreements.

5. Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Performance of a contract — when processing is necessary to provide the Services you have requested.
• Legitimate interests — when processing is necessary for our legitimate interests, such as securing and improving the Services, and you can reasonably expect such processing.
• Consent — when we rely on your consent (for example, for non-essential cookies or marketing). You may withdraw your consent at any time.
• Legal obligation — when processing is required to comply with applicable law.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to operate and analyze the Services. Categories include:

• Strictly necessary cookies — required for the operation of the Services (e.g., session, security).
• Functional cookies — to remember your preferences (e.g., language).
• Analytics cookies — to understand usage and improve the Services (e.g., anonymized page views).
• Marketing cookies — only with your consent, to deliver relevant advertisements.

You can manage your cookie preferences at any time through your browser settings or our cookie banner.

7. Sharing & Disclosure

We do not sell your personal information. We may share personal information with:

• Service providers that perform services on our behalf (e.g., cloud hosting, analytics, customer support), bound by confidentiality and data protection obligations.
• Affiliates and subsidiaries within the Mowoai corporate group.
• Business partners with your consent or as necessary to deliver requested services.
• Legal and regulatory authorities when required by law or to protect our rights, property, or safety.
• Successor entities in connection with a corporate transaction, such as a merger, acquisition, or sale of assets, with appropriate confidentiality safeguards.

8. International Data Transfers

OPCA is headquartered in the United States. If you access the Services from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. Where required by applicable law, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses (SCCs).

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements. Retention periods are determined based on the nature of the data, the purposes of processing, and applicable legal obligations.

10. Security

OPCA implements appropriate technical and organizational measures designed to protect personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption in transit, role-based access control, audit logging, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to legal exceptions.
• Object to, or restrict, certain processing of your personal information.
• Request portability of your personal information.
• Withdraw your consent at any time, where processing is based on consent.
• Lodge a complaint with a competent data protection authority.

To exercise any of these rights, please contact us at luohui@opca.ai. We will respond to your request in accordance with applicable law.

12. Children's Privacy

The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected personal information from a child, please contact us and we will take steps to delete the information promptly.

13. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature. Because there is no industry standard for DNT, the Services do not currently respond to DNT signals. We continue to monitor developments in this area.

14. Changes to This Policy

We may update this Policy from time to time. If a change is material, we will provide reasonable notice in advance (for example, by posting a notice on the website or sending an email to your account contact). The "Effective Date" at the top of this Policy indicates when the latest changes took effect.

15. Contact Us

If you have any questions, comments, or requests regarding this Policy or our handling of personal information, please contact us:

© 2026 Mowoai Technology Co., Ltd. All rights reserved. OPCA is a brand of Mowoai Technology Co., Ltd.