Privacy Policy

1. Introduction

Welcome to Opsle (“we,” “our,” or “us”). We operate www.opsle.com (the “Service”), a checklist management platform for businesses.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

We reserve the right to make changes to this Privacy Policy at any time. We will notify you of any changes by updating the “Last Updated” date. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Registration: Name, email address, password, company name, phone number
• Profile Information: Job title, department, profile picture
• Billing Information: Credit card details, billing address (processed securely through Stripe)
• Communications: Messages, feedback, support requests, survey responses
• User Content: Checklists, templates, tasks, comments, attachments, location data

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent, click patterns, checklist completion rates
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies, authentication tokens, analytics cookies (see Section 8)
• Log Data: API requests, error logs, performance metrics, security events

2.3 Information from Third Parties

We may receive information from third-party services:

• OAuth Providers: Google, Microsoft (when you use single sign-on)
• Payment Processors: Stripe (transaction status, billing updates)
• Analytics Services: Google Analytics, usage patterns

3. How We Use Your Information

3.1 Service Provision

• Create and manage your account
• Provide checklist management features
• Process payments and subscriptions
• Enable team collaboration and location management
• Deliver notifications and updates

3.2 Communication

• Send transactional emails (password resets, payment receipts)
• Provide customer support
• Send service announcements and updates
• Respond to your inquiries

3.3 Improvement and Analytics

• Analyze usage patterns to improve features
• Monitor and prevent fraud and abuse
• Conduct research and development
• Generate aggregate statistics (anonymized)

3.4 Marketing (With Consent)

• Send promotional emails about new features
• Provide product updates and tips
• Conduct surveys and gather feedback

Note: You can opt out of marketing communications at any time via the unsubscribe link in emails or your account settings.

3.5 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against security threats
• Resolve disputes and prevent fraud

4. How We Share Your Information

We do NOT sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party vendors who assist us:

• Hosting: Cloud infrastructure providers (DigitalOcean, AWS)
• Payment Processing: Stripe (credit card processing)
• Email Delivery: SMTP providers (transactional emails)
• Analytics: Google Analytics (anonymized usage data)
• Error Tracking: Sentry (error logs, performance monitoring)
• Security: reCAPTCHA (fraud prevention)

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our Service before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud, abuse, or illegal activity

4.4 With Your Consent

We may share your information with third parties when you explicitly consent (e.g., integrating with external tools).

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active
• User Content: Retained until you delete it or close your account
• Billing Records: Retained for 7 years (legal/tax requirements)
• Log Data: Retained for 90 days (security and debugging)
• Anonymized Analytics: Retained indefinitely

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• Encryption in Transit: TLS 1.2+ for all data transmission
• Encryption at Rest: Database-level encryption (PostgreSQL TLS + pgcrypto)
• Secure Authentication: JWT tokens, bcrypt password hashing, MFA support
• Access Controls: Role-based permissions, least privilege principle

6.2 Operational Safeguards

• Regular security audits and vulnerability assessments
• Employee training on data protection
• Incident response procedures
• Backup and disaster recovery protocols

Important: No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Data Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request a copy of your personal information
• Export your data in a machine-readable format (JSON, CSV)

7.2 Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal information (“right to be forgotten”)

7.3 Restriction and Objection

• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests

7.4 Withdrawal of Consent

• Withdraw consent for marketing communications at any time
• Revoke consent for optional data processing

7.5 How to Exercise Your Rights

• Email us at: privacy@opsle.com
• Use account settings: www.opsle.com/settings
• Contact support: support@opsle.com

We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our Service:

8.1 Types of Cookies

8.2 Third-Party Cookies

• Google Analytics: Usage statistics and behavior analysis
• Stripe: Payment processing and fraud prevention
• reCAPTCHA: Bot detection and security

8.3 Cookie Management

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies

Note: Disabling essential cookies may affect Service functionality.

9. International Data Transfers

Our servers are located in the United States. If you access our Service from outside the U.S., your information will be transferred to and processed in the U.S.

We comply with applicable data protection laws, including:

• GDPR (Europe): EU Standard Contractual Clauses
• UK GDPR (United Kingdom): International Data Transfer Agreement
• CCPA (California): Consumer privacy protections

By using our Service, you consent to the transfer of your information to the U.S. and other countries where we operate.

10. Children's Privacy

Our Service is NOT intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

If we discover that we have collected information from a child under 16, we will delete that information immediately. If you believe we have collected information from a child, please contact us at privacy@opsle.com.

11. Third-Party Links

Our Service may contain links to third-party websites (e.g., integrations, help resources). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

12. Region-Specific Rights

12.1 European Union (GDPR)

If you are in the EU/EEA, you have additional rights under GDPR:

• Right to data portability
• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making

Legal Basis for Processing:

• Performance of contract (account management)
• Legitimate interests (security, analytics)
• Consent (marketing communications)

Data Protection Officer: privacy@opsle.com

12.2 California (CCPA/CPRA)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do NOT sell personal information)
• Right to non-discrimination for exercising your rights

Notice: We do NOT sell personal information or share it for cross-context behavioral advertising.

12.3 Other Regions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights, contact us at privacy@opsle.com.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovering the breach
• Provide details about what information was compromised
• Explain the steps we are taking to address the breach
• Offer guidance on protecting your information

Notifications will be sent via email and posted on our Service.

14. Business Contact Information

Opsle
Email: privacy@opsle.com
Support: support@opsle.com
Address: [To be added - your business address]

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

Material changes (e.g., changes to data sharing practices) will be communicated via:

• Email notification to registered users
• Prominent banner on our Service
• In-app notification

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: privacy@opsle.com
Support: support@opsle.com
Website: www.opsle.com/privacy

We will respond to your inquiry within 7 business days.