How we process data in the OPP-008 limited beta

Version 2026-09-23-v4, 23 September 2026. OPP-008 is an experimental limited-beta tool that compares structured catalogs, price lists, invoices and purchase orders to flag possible differences. Its output does not replace commercial or accounting verification. Requesting access to the fuller beta is optional.

Controller and contact

The controller is Mattia Guzzi. For questions, deletion requests, withdrawal of consent or data-rights requests, email selceparte90@gmail.com. No data protection officer has been appointed.

Documents selected for analysis

The browser reads and processes the files you choose in the memory of the current tab. The application has no document-upload endpoint and does not intentionally send their content to the server. The application database does not store files, rows, SKUs, filenames or reports. Reloading or closing the tab clears the application session data.

Technical events and minimal attribution

The service sends Cloudflare essential funnel events: visit, tool start, upload started or valid, onboarding, analysis, report, beta prompt view, completed request and errors. Each event contains a random tab identifier and the page language, Italian or English. Where relevant it also contains a file role, a general error category or a predefined channel label such as external directory, internal guide or search engine. The referring URL is not stored. The server adds date and time. These events contain no email, file content, SKU or filename. The application uses no cookie or stored identifier to follow a user across sessions.

Purpose and legal basis: endpoint security and abuse prevention, service verification, essential beta-funnel measurement and comparison of channels that lead to actual use. The controller relies on legitimate interests under Article 6(1)(f) GDPR. Measurement is limited to these events and predefined source categories, without commercial profiling, advertising or marketing. You may object on grounds relating to your situation by contacting the controller.

Voluntary beta request

You may use the free tool without providing an email. Only after you enter an address, select the unchecked consent box and submit the request do we store, in a separate table, the normalized email, consent-text version, page language, date and time. The legal basis is consent under Article 6(1)(a) GDPR. The data is used only to record the request and contact you about the OPP-008 beta. It does not cover newsletters, general marketing or other products. You may withdraw consent at any time by emailing selceparte90@gmail.com.

Retention

A scheduled task runs daily at 03:00 UTC and removes events and beta requests older than 30 days from the active D1 database. A row can therefore remain for almost 31 days. Cloudflare's free plan permits D1 Time Travel recovery for up to 7 additional days, so active-database deletion does not immediately remove every recovery copy. Contact the controller for an earlier individual deletion request. Cloudflare's own network-log retention follows its terms and is outside the OPP-008 application database.

Recipients and international processing

Cloudflare provides hosting, the minimal API, D1 and network protection. For data processed on the controller's behalf, Cloudflare acts as processor under its Data Processing Addendum and may use its published subprocessors. Cloudflare may also process technical connection data under its privacy policy. The IP address is used for ephemeral rate limiting and is not stored in the OPP-008 application database.

D1 is configured with EU jurisdiction. This concerns primary database execution and storage and does not prove that every request or support operation remains in the EEA. Cloudflare states that some processing may occur outside the EEA; its DPA provides applicable safeguards including Standard Contractual Clauses where required.

Your rights

You may request access, rectification, deletion or restriction, object to processing based on legitimate interests and, where applicable, request portability. You may withdraw beta-request consent without losing access to the free tool. Contact selceparte90@gmail.com. You may also lodge a complaint with the Italian Garante per la protezione dei dati personali or another competent supervisory authority.