Privacy

Data controller

The controller for the processing described here is Opus Desktop, publisher of Opus, based in Quebec (Canada), reachable at contact@opusdesktop.com. Any request about your data (access, rectification, erasure, objection, withdrawal of consent) goes through that address.

What Opus measures — and keeps on your machine

Opus reads your hardware sensors and state — CPU, RAM, GPU, temperatures, disks (SMART), network, processes — and stores them locally, in a SQLite database on your PC, to show history and trends.

None of these measurements are sent to a server, except on your initiative: telemetry enabled, a technical report attached to a message, or a question asked to the AI assistant (see below). They stay on your disk and are removed if you uninstall Opus. Opus works without an account: no name, no email address, no identifier is required to use it. Only the AI assistant, paid and optional, creates an account, on the first purchase.

Data that passes through opusdesktop.com

Installer download: the site counts downloads per version and per country (country inferred from the IP address by Cloudflare at request time). To count each visitor only once a day, it keeps for two days a cryptographic fingerprint derived from the day, the IP address and the browser, computed with a secret key — the IP address itself is never stored, and the fingerprint changes every day.

Update checks: Opus periodically asks opusdesktop.com whether a new version exists. This request carries the installed version and a random installation identifier, generated on first launch and derived from nothing about your machine or you. Per identifier we keep the first and last check dates, the version and the country. This identifier is pseudonymous: on its own it can neither identify you nor locate your computer, and it is removed along with Opus.

Notify-me list: if you voluntarily enter your email address to be told when the AI assistant launches, it is stored on its own, with no other data. It is the only directly identifying data the site holds.

Telemetry: off by default, can be enabled in Settings › Privacy. If you enable it, it sends a pseudonymous technical report once a day: versions, errors, hardware capabilities, the motherboard model and its voltages, the figures of the tests you run, with the installation identifier — never identifying data, never the history of your measurements.

Contact us: if you write to us from Opus (“Contact us” menu), your message goes with the topic you chose, the app language and the versions of Opus, its agent and Windows, along with the email address you choose to give so we can reply. If you leave the “Attach the technical report” option on, the telemetry report is added — versions, hardware profile (including the processor and motherboard models and measured voltages), recent errors, your test results — together with the Opus installation identifier. If you also give your address, this information is no longer pseudonymous for us: the identifier lets us link it to the update checks of the same installation and, if telemetry is enabled, to its telemetry reports.

All of it is sent to telemetry.opusdesktop.com, which immediately forwards it by email to our support@opusdesktop.com mailbox. The server keeps none of it: afterwards the message exists only in our mailbox. To limit abuse, it only counts how many messages arrive each day.

What Opus asks NVIDIA

If your PC has an NVIDIA GeForce graphics card, Opus asks NVIDIA — at nvidia.com and gfwsl.geforce.com, the services behind its driver download page — for the latest driver published for that card model, so the health check can point it out. This check runs when the Diagnostic page opens, at most once every six hours. Without an NVIDIA GeForce card, nothing is requested.

The request carries the card model (as NVIDIA’s product identifiers) and the Windows version (10 or 11). Like any Internet connection, it discloses your IP address to NVIDIA, which handles it under its own privacy policy. The installed driver version is not sent: the comparison happens on your PC, and Opus keeps the answer only in memory, for six hours at most.

AI assistant: what is sent when you write to it

The AI assistant is a paid, optional service: nothing is sent to it until you write to it. When you ask a question, Opus sends it along with the context needed to answer it for your machine: the hardware profile (processor, graphics card, motherboard, memory and drive models), the health check and its findings, the state of Windows (updates, stability, protection), the results of your tests, what you entered in your machine profile, the titles and dates of your other conversations, and the current state (load, temperatures, game or heavy application running, local time and time zone).

To answer, the assistant can ask Opus for more data from your PC: measurement and sensor history, the most demanding processes, Windows event logs, installed drivers, startup programs and services, blue-screen reports, Opus settings, excerpts of your past conversations. These reads happen on your PC, and their result is sent with the conversation. The assistant reads, it does not act: it changes nothing on your machine, with one exception — it can save in your machine profile a fact you give it, for example your power supply model.

Everything goes through our server, api.opusdesktop.com, which forwards it to Anthropic, the company that provides the AI model (Claude). Our server keeps no content — not your questions, not the answers, not the context: for each message it only records the date, the model used, the number of tokens processed and the credits debited.

Anthropic processes this content to produce the answer, under the commercial terms of its API: it is not used to train its models and is deleted after a short period — generally thirty days at most, longer only if a request is flagged for a use contrary to its usage policy or if the law requires it.

Web search: to check information that changes (latest driver, latest BIOS, known issue), the assistant can run a web search or read a page. Anthropic runs it, not your PC; the search terms are written by the assistant from the conversation.

ASUS BIOS: if your motherboard is an ASUS and the assistant checks your BIOS, Opus asks ASUS’s public service (asus.com) directly for the list of BIOS releases for that model. The request carries the motherboard model and, like any connection, discloses your IP address to ASUS. The installed version is not sent: the comparison happens on your PC.

Your conversations are stored on your PC only, encrypted by Windows data protection tied to your session. You can delete them from the app.

AI assistant: account, credits and payment

The account only exists from the first purchase. It is tied to a random device identifier, generated by Opus on your PC and separate from the installation identifier — never to a name or a password. For this account our server keeps: that identifier, the email address you gave at payment, your credit balances, the state of your subscription, the Stripe identifiers of your customer record, subscription and payments, and your payment history (date, item, credits, amounts before tax and paid, currency).

Payment is operated by Stripe, through its Managed Payments solution: the official seller of the transaction is Link (Stripe). Link collects your payment method, billing address and email, computes and remits taxes, issues receipts and invoices, and processes this data under its own privacy policy, as a separate controller. We never see your card number.

Account recovery: if you reinstall Opus, you can attach your account to the new installation with a single-use code sent to the payment email address. The code is never stored in clear and expires after ten minutes; the email is sent by Cloudflare Email Service.

Purposes and legal basis

Counting downloads and active installations, knowing which versions are in use, measuring adoption per country: the publisher’s legitimate interest in following the distribution and proper operation of the software it ships, using minimised, pseudonymous data.

Serving updates: performance of the service you expect from the software.

Graphics driver check: performance of the service you expect from the software — telling you a newer driver is published —, limited to the card model and the Windows version.

Notify-me list: your consent, given by entering your address. You can withdraw it at any time by asking for your address to be deleted.

Telemetry: your consent, given by enabling it; withdrawable at any time in the settings.

Contact us: your request — you are the one writing, and the message is only used to reply to you and fix what you report.

AI assistant: performance of the contract — producing the answers you ask for, debiting credits at real cost, managing your subscription and the recovery of your account. Payment history: performance of the contract and accounting obligations.

Retention periods

Deduplication fingerprints (downloads, update checks): two days.

Installation identifiers: deleted after thirteen months without an update check.

Notify-me addresses: deleted at the latest twenty-four months after entry, and within thirty days after the announcement they were collected for has been sent.

Messages received through “Contact us”: kept in our mailbox while your request is handled, then deleted at the latest twenty-four months after the last exchange.

Assistant account (device identifier, email, balances, subscription): as long as the account exists — purchased credits do not expire —, and deleted on request.

Assistant usage log (date, model, tokens, credits, without any content): one hundred and eighty days. Recovery codes: twenty-four hours.

Payment history: as long as the law requires for accounting, including after the account is deleted.

Aggregated counters (downloads and checks per day, version and country): kept indefinitely, as they contain no personal data.

Processors and transfers

The site, our assistant server (api.opusdesktop.com) and their databases are hosted by Cloudflare, Inc. (global network; data at rest in the European Union or the United States depending on the service). Cloudflare acts as a processor under its contractual data-protection commitments (European Commission standard contractual clauses). The notify-me form may submit an anti-bot check to Cloudflare Turnstile, which sets no tracking cookie.

The AI assistant relies on Anthropic, PBC (United States), which receives the conversation content described above, under its commercial terms and data-protection commitments.

Payments are operated by Stripe (Link), official seller of the transaction and separate controller of its own processing (stripe.com/privacy).

The graphics driver check queries the services of NVIDIA Corporation (United States) directly, and the assistant’s BIOS check those of ASUSTeK Computer Inc. (Taiwan); Opus sends them nothing beyond what is described above.

Messages sent through “Contact us” and recovery codes are relayed by Cloudflare Email Service; messages land in our mailbox, hosted by Google LLC (Google Workspace), which acts as a processor under its contractual data-protection commitments.

These providers are located outside Quebec, mainly in the United States: your data may be communicated and processed there.

No data is sold, transferred or shared with third parties for advertising. The site uses no tracking cookie and no third-party analytics.

What you can see and request

The public counters (opusdesktop.com/download/stats) only publish approximate aggregates; groups too small to be anonymous are merged.

You can request access to, rectification or erasure of your notify-me address, of a message you sent us or of your assistant account (any remaining credits are then lost), or object to processing based on legitimate interest, by writing to contact@opusdesktop.com. For the installation identifier, uninstalling Opus is enough: it is no longer sent and disappears after thirteen months; you can also ask for its erasure by sending us the identifier (shown in Opus settings).

If you believe your rights are not respected, you can lodge a complaint with the competent authority — in Quebec, the Commission d’accès à l’information (cai.gouv.qc.ca); in France, the CNIL (cnil.fr); elsewhere, your country’s data-protection authority.

Contact

For any question about this data (or a removal): contact@opusdesktop.com.