Privacy Policy

How we collect, use, disclose, and protect your information when you use our services.

Effective Date: June 14, 2025

Welcome to CardOpz. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use our services. The CardOpz platform is strictly for internal operations management and informational updates for brick-and-mortar facilities. No gambling, betting, or wagers of any kind are conducted through our platform.

Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through any of the following CardOpz properties:

  • CardOpz.com - Our marketing and informational website
  • CardOpz.app - Our business management platform for staff users
  • Client Portals - All subdomains of cardopz.com (e.g., [clientname].cardopz.com) used by our clients' members

By accessing or using any of these services, you agree to the terms of this Privacy Policy.

Information We Collect and Why

Contact Information

What We Collect: Name, email address, phone number.

Why We Collect It: To communicate with you, respond to inquiries, and provide updates.

Account Information

What We Collect: User credentials, roles, and permissions.

Why We Collect It: To manage access to our platform and ensure security.

Business Data

What We Collect: Player information, transaction records, game data.

Why We Collect It: To provide platform services and generate reports for poker room operators.

Usage Data

What We Collect: Feature usage, performance metrics, error logs.

Why We Collect It: To improve our services and debug issues.

Support Communications

What We Collect: Tickets, emails, call recordings (with consent).

Why We Collect It: To resolve issues and enhance training.

Profile Data (App Users)

What We Collect: Name, player ID, contact preferences.

Why We Collect It: To personalize the app experience for players.

Game Activity (App Users)

What We Collect: Session history, waitlist status, tournament participation.

Why We Collect It: To track player activity and improve app functionality.

Device Information (App Users)

What We Collect: App version, device type, push notification tokens.

Why We Collect It: To ensure compatibility and deliver notifications.

SMS Communications and Account Security

CardOpz provides comprehensive business management software for gaming establishments, focusing on employee management, financial operations, and floor management. As part of our multi-layered security infrastructure, we collect mobile phone numbers to provide essential security and operational notifications across our platforms.

Staff Account Security (CardOpz.app)

When accessing CardOpz.app, staff members who provide their mobile phone number consent to receive:

  • One-time Login Links: Secure passwordless authentication links valid for 10 minutes
  • Two-Factor Authentication (2FA): Security codes for verifying identity when accessing sensitive financial data
  • Critical Security Alerts: Immediate notifications about suspicious account activity
  • System Updates: Essential notifications about platform maintenance

Member Portal Notifications ([clientname].cardopz.com)

Members accessing client portals consent to receive:

  • Login Verification Codes: Secure access codes for portal authentication
  • Account Notifications: Alerts when new messages are waiting in their account
  • Email/Phone Verification: Codes to confirm contact information
  • Security Alerts: Notifications about account access from new devices

Consent and Opt-In Process

For Staff Accounts (CardOpz.app):

  1. On-site Account Creation: Facility managers enter staff mobile numbers with employee consent during account setup
  2. Account Claim Process: Staff receive an SMS to claim their account and must check: "I agree to receive SMS notifications for account security including login alerts. Msg & data rates may apply. Reply STOP to opt-out."
  3. Per-Login Consent: Each login request shows clear consent notice before sending SMS

For Member Accounts ([clientname].cardopz.com):

  1. Initial Enrollment: Members provide consent during on-site registration at client facilities
  2. Online Activation: First portal access requires SMS verification with explicit consent notice
  3. Preference Management: Members can update SMS settings in their account dashboard

Consent Requirements Across All Platforms:

  • Consent is explicit, informed, and never pre-selected
  • All consent is logged with timestamp, IP address, and consent method
  • Consent records are retained for compliance with telecommunications regulations
  • Consent is specific to security and operational notifications, not marketing
  • Privacy Policy and Terms of Service links are displayed at consent points

Message Frequency and Charges

  • Staff (CardOpz.app): One message per login request
  • Members (Client Portals): 1-10 messages per month based on account activity
  • Message Charges: Standard message and data rates may apply per your carrier
  • No CardOpz Charges: We do not charge for SMS notifications

Your Control Options

  • Opt-Out: Reply STOP to any message to unsubscribe from all SMS notifications
  • Confirmation: You'll receive a one-time confirmation of your opt-out
  • Help: Reply HELP for assistance with our SMS program
  • Manage Preferences: Update notification settings in your account dashboard
  • Re-enable: Contact support@cardopz.com to resume notifications after opting out

Data Security and Third Parties

  • We use Twilio, a leading telecommunications provider, for secure message delivery
  • Your phone number is never sold, rented, or shared with third parties for marketing
  • All SMS data is encrypted in transit using industry-standard protocols
  • Phone numbers are stored encrypted in our secure databases
  • We retain SMS consent and opt-out records as required by law
  • Access to phone numbers is restricted to authorized personnel only

Supported Carriers

Our SMS program is compatible with all major U.S. mobile carriers including but not limited to: AT&T, Verizon, T-Mobile, Sprint, U.S. Cellular, and regional carriers. Some carriers may not support all features.

Important Security Notice

SMS notifications are a critical component of our comprehensive security framework for protecting financial data, employee information, and operational integrity. While you have the right to opt out at any time, disabling these notifications may impact your ability to:

  • Receive real-time login alerts for your account
  • Detect unauthorized access to systems in real-time
  • Utilize two-factor authentication for enhanced security
  • Stay informed about important account activity

We strongly recommend keeping SMS notifications enabled for optimal security of your account.

Cookie Policy

This Cookie Policy explains how CardOpz ("we", "us", and "our") uses cookies and similar technologies to recognize you when you visit our websites including CardOpz.com, CardOpz.app, and all client portals ([clientname].cardopz.com). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Categories of Cookies We Use

Category Purpose Examples
Necessary Cookies Essential for website functionality, security, and authentication. Cannot be disabled. Session cookies
Authentication tokens
Security cookies
Load balancing
Analytics Cookies Help us understand how visitors interact with our website to improve user experience. Google Analytics
Performance monitoring
Error tracking
Usage statistics
Marketing Cookies Track visitors across websites to display relevant advertisements and measure campaign effectiveness. Conversion tracking
Retargeting pixels
Social media pixels
Ad performance
Functional Cookies Enable enhanced functionality and personalization based on your preferences. Language preferences
User settings
Feature toggles
Customization options

Specific Cookies We Use

First-Party Cookies

  • cardopz_cookie_consent: Stores your cookie consent preferences (1 year)
  • cardopz_session: Maintains your session state (session)
  • cardopz_auth: Authentication token for logged-in users (7 days)
  • cardopz_csrf: Security token to prevent cross-site request forgery (session)

Third-Party Cookies (with consent)

  • Google Analytics (_ga, _gid): Website analytics and performance (2 years)
  • Google Tag Manager: Tag management and analytics (varies)
  • Stripe: Payment processing security (session)
  • PandaDoc: Form functionality and analytics (varies)

Your Cookie Choices

Managing Cookie Preferences

You have the right to decide whether to accept or reject cookies (except necessary cookies). You can:

Cookie Settings by Browser

To manage cookies through your browser settings:

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Privacy, search, and services → Cookies and site permissions

Impact of Refusing Cookies

If you choose to refuse cookies, you may still use our website though your access to some functionality and areas of our website may be restricted. Essential cookies cannot be disabled as they are necessary for the website to function properly.

Do Not Track Signals

Some browsers incorporate a Do Not Track (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Our website currently does not respond to DNT signals, but you can use our cookie consent tool to control tracking cookies.

Children's Privacy

Our services are not directed to children under 18, and we do not knowingly collect personal information from children. This includes through cookies or similar tracking technologies.

Updates to This Cookie Policy

We may update this Cookie Policy from time to time in order to reflect changes to the cookies we use or for other operational, legal, or regulatory reasons. Please revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

California Residents - Your Privacy Rights

Under the California Consumer Privacy Act (CCPA), California residents have additional rights regarding cookies and online tracking:

  • Right to know what personal information is collected through cookies
  • Right to delete personal information collected through cookies
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising privacy rights

European Residents - GDPR Rights

Under the General Data Protection Regulation (GDPR), European residents have specific rights regarding cookies:

  • Right to clear, affirmative consent before non-essential cookies are placed
  • Right to withdraw consent at any time
  • Right to access information about cookies used
  • Right to data portability for information collected through cookies

Contact Us About Cookies

If you have questions about our use of cookies or other technologies, please contact us at:

Data Usage

We use the information we collect to operate, maintain, and improve our services across all platforms. This includes using data to enhance user experience, provide customer support, and communicate with users about updates and service-related information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure across all CardOpz properties. However, no method of transmission over the internet or method of electronic storage is 100% secure.

Data Sharing

We do not sell your personal information to third parties. We may share your information with service providers who assist us in operating our platform, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. This applies to data collected from any CardOpz property.

User Rights

Regardless of which CardOpz property you use, you have the right to access, correct, or delete your personal information. You may also object to the processing of your data or request data portability. To exercise these rights, please contact us using the information provided below.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. SMS consent and communication records are retained as required by telecommunications regulations. This applies to all data collected across our platforms.

Compliance with GDPR and CCPA

We comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) across all CardOpz properties. If you are a resident of the European Economic Area (EEA) or California, you have specific rights regarding your personal information collected through any of our services.

Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices on any CardOpz property, please contact us at:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating it across all applicable CardOpz properties. You are advised to review this Privacy Policy periodically for any changes.

By continuing to use any of our services after those changes become effective, you agree to be bound by the revised Privacy Policy.

Last Updated: June 14, 2025