Privacy Policy

Operou ("Operou", "the Service", "we", "us") is a software product developed and operated by Advanguard Media SRL, a company registered in Romania.

• Legal operator: Advanguard Media SRL
• Registered office: Str. Sf. Dumitru nr. 338, Sat Conțești, Comuna Conțești, Județul Dâmbovița, Romania
• Trade Register no.: J2024019811002
• Fiscal code (CUI): 50500118
• Contact e-mail: privacy@advanguard.ro
• Website: https://operou.com

Advanguard Media SRL is the data controller for personal data processed through Operou, within the meaning of Regulation (EU) 2016/679 (GDPR).

This Privacy Policy explains what data Operou collects, how we use it, the legal grounds for processing, how we protect it, and the rights you have. It applies to the Operou application and the operou.com website.

3.1 Account and contact data

When you create or are granted access to an Operou account, we process your name, work e-mail address, and organizational role.

3.2 Data from connected third-party services (e.g. LinkedIn)

Operou lets an authorized administrator connect external services — most importantly LinkedIn — so that content can be prepared, scheduled, published, and managed for LinkedIn Pages the connecting user administers.

When you connect LinkedIn through the official LinkedIn OAuth 2.0 flow and grant permission, Operou may receive and store:

• OAuth 2.0 authorization tokens (access and refresh tokens) issued by LinkedIn on your behalf;
• The identity of the LinkedIn Pages / organizations you administer, and your administrator role on each, as returned by LinkedIn's Community Management API;
• Content and engagement data for those Pages that is necessary to prepare, schedule, publish, and manage organic posts (for example post text, media, scheduling metadata, and post-level performance metrics returned by LinkedIn).

Operou requests only the permissions (OAuth scopes) needed for these functions. Operou does not collect LinkedIn member data for resale, does not scrape LinkedIn, and does not automate personal LinkedIn accounts.

3.3 Usage and technical data

We process standard technical data required to operate the Service securely and reliably, such as log data, timestamps, device/browser information, and diagnostic information.

We use the data described above to:

• provide the core Operou functions (prepare, schedule, publish, and manage content for Pages you administer);
• authenticate you and maintain your connection to LinkedIn on your behalf;
• display analytics and operational reporting for the Pages you manage;
• secure the Service, prevent abuse, and troubleshoot issues;
• comply with our legal obligations and with the terms of the platforms we integrate with (including the LinkedIn API terms).

• Performance of a contract — to provide the Service you or your organization requested.
• Consent — for connecting third-party services such as LinkedIn; you grant this consent through the provider's own authorization screen and can withdraw it at any time by disconnecting the service.
• Legitimate interests — to secure, maintain, and improve the Service, provided these interests are not overridden by your rights.
• Legal obligation — where processing is required to comply with applicable law.

We do not sell your personal data. We share data only with:

• Infrastructure and sub-processors strictly necessary to run the Service (e.g. cloud hosting, database, and email providers), under data-processing agreements;
• The platforms you connect (e.g. LinkedIn), to the extent required to perform the actions you request;
• Authorities, where disclosure is required by law.

Where data is processed outside the European Economic Area, we rely on appropriate safeguards recognized under the GDPR (such as adequacy decisions or Standard Contractual Clauses).

We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law. OAuth tokens are retained only while your connection is active and are deleted when you disconnect the service or close your account.

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority (in Romania, the ANSPDCP).

To exercise any of these rights, or to request deletion of your data, contact us at privacy@advanguard.ro. We respond to requests within the timeframes required by law.

You can revoke Operou's access to your LinkedIn data at any time, either from within Operou (disconnect the account) or from your LinkedIn settings (Permitted Services). Revoking access invalidates the stored tokens, and we delete them.

We apply appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and least-privilege handling of authorization tokens.

Operou is a business tool not directed to individuals under 16. We do not knowingly process the data of children.

We may update this Policy from time to time. Material changes will be indicated by updating the "Last updated" date above and, where appropriate, by additional notice.

Advanguard Media SRL

• Registered office: Str. Sf. Dumitru nr. 338, Sat Conțești, Comuna Conțești, Județul Dâmbovița, Romania
• E-mail: privacy@advanguard.ro
• Operou product site: https://operou.com