Privacy Policy

1. Information We Collect

Depending on how you use Opsly, we may collect:

Account Information

• Name
• Business email address
• Phone number
• Company name
• Job title or designation
• Account role and permissions
• Login and authentication information

Business Information

Users may enter business-related information such as:

• Client names and contact details
• Leads and project information
• Products and services
• Quotations, invoices and purchase orders
• Pricing, taxes and payment terms
• Documents and attachments
• Business communication records

Each organization is responsible for ensuring that it has the necessary authority to enter and process its clients’ information through Opsly.

Technical Information

We may collect limited technical information necessary to operate and secure the platform, including:

• IP address
• Browser and device information
• Login timestamps
• Application activity and audit logs
• Error and security logs
• Cookie and session information

2. Google Account and Gmail Data

Opsly allows users to connect a Google account to send quotation emails from within the platform.

When a user connects Gmail, Opsly requests only the minimum Google authorization required to send email on the user’s behalf.

Opsly may access and process:

• The connected Google account’s email address
• Google OAuth access and refresh tokens
• Email recipient details selected or provided by the user
• Email subject and message prepared or approved by the user
• Quotation documents attached by the user through Opsly
• Sending status and related activity records

Opsly uses this information only to:

• Prepare quotation emails requested by the user
• Attach the relevant quotation document
• Send the email through the user’s connected Gmail account
• Display the sending status
• Maintain a business activity record associated with the quotation

Opsly does not use the Gmail integration to:

• Read the user’s Gmail inbox
• Read unrelated messages or attachments
• Access contacts unless separately disclosed and authorized
• Send emails without a user-initiated action or explicitly enabled feature
• Sell Google user data
• Use Google user data for advertising
• Build advertising profiles
• Train general-purpose artificial intelligence models
• Transfer Google user data to data brokers

Opsly’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

3. How We Use Information

We use collected information to:

• Create and maintain user accounts
• Provide tenant-based business operations features
• Generate and manage quotations and other business documents
• Send user-authorized quotation emails
• Maintain quotation and communication history
• Provide customer support
• Secure the platform and prevent unauthorized access
• Diagnose errors and improve reliability
• Comply with applicable legal obligations

We do not sell personal information.

4. Multi-Tenant Data Separation

Opsly is a multi-tenant platform used by multiple companies.

Business records, Gmail connections and user permissions are associated with the relevant organization and user. We use technical and organizational controls to prevent one organization from accessing another organization’s information.

Users may access only the information permitted by their assigned company role.

5. How We Share Information

We may share limited information with service providers that help us operate Opsly, such as:

• Cloud hosting and database providers
• Email and Google API services
• File-storage providers
• Security, monitoring and error-diagnostic services
• Payment providers, when applicable

These providers may process information only as necessary to provide their services to Opsly and are subject to applicable contractual and security obligations.

We may also disclose information when required by law, legal process or a valid request from an authorized government authority, or when necessary to protect the security, rights and safety of Opsly, our users or others.

We do not share Google user data with third parties for advertising or unrelated purposes.

6. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect user information.

These safeguards include, where applicable:

• HTTPS encryption for information transmitted over networks
• Encryption of Google OAuth tokens at rest
• Secure server-side storage of OAuth credentials
• Tenant and role-based authorization
• Access controls and audit logging
• Secure session management
• Restricted access to production systems
• Monitoring and security-maintenance practices

No electronic system is completely secure. Therefore, we cannot guarantee absolute security, but we work to protect information using appropriate safeguards.

7. Data Retention

We retain account and business information for as long as necessary to:

• Provide Opsly services
• Maintain legitimate business records
• Fulfil contractual obligations
• Resolve disputes
• Protect platform security
• Comply with applicable legal requirements

Google OAuth tokens are retained only while the Gmail connection is active or as otherwise necessary to provide the requested Gmail functionality.

When a user disconnects Gmail or requests removal of the connection, Opsly will revoke or delete the stored OAuth tokens within a reasonable operational period, subject to security, legal and backup-retention requirements.

Quotation records, recipient details and email activity may remain in the organization’s Opsly account as part of its business history until deleted according to the organization’s account permissions and applicable retention requirements.

8. Disconnecting Gmail and Revoking Access

Users may disconnect their Gmail account through Opsly’s Gmail or integration settings, when that option is available.

Users may also revoke Opsly’s access directly through their Google Account:

1. Open the Google Account security settings.
2. Find third-party apps and services.
3. Select Opsly.
4. Remove or revoke access.

After access is revoked, Opsly will no longer be able to send emails through that Google account. Previously generated quotation and activity records may remain as part of the organization’s business records unless deletion is requested or required.

9. Data Access, Correction and Deletion

Users may request:

• Access to their personal information
• Correction of inaccurate information
• Deletion of eligible personal information
• Deletion of their Opsly account
• Removal of a connected Gmail account and its OAuth tokens

Requests can be sent to:

[email protected]

Please include the account email address and company name associated with the Opsly account. We may need to verify the requester’s identity and authority before processing a request.

Some information may be retained when required for legal, security, fraud-prevention, contractual or legitimate business-record purposes.

10. Cookies and Sessions

Opsly may use necessary cookies or similar technologies to:

• Keep users signed in
• Maintain secure sessions
• Remember essential preferences
• Protect against unauthorized requests
• Monitor platform reliability

Where legally required, additional consent will be requested before using non-essential cookies.

11. Children’s Privacy

Opsly is a business platform and is not intended for children. We do not knowingly collect personal information from children through the platform.

12. International Processing

Information may be processed or stored using service providers operating in locations outside the user’s state or country. Where applicable, we take reasonable steps to ensure that information receives appropriate protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy when Opsly’s functionality, legal requirements or data practices change.

The revised policy will be published on this page with an updated effective date. Material changes may also be communicated through Opsly or by email when appropriate.

14. Contact Us

For privacy questions, Gmail-integration questions or data-access and deletion requests, contact: