1. Introduction

This Privacy Policy describes how Opplify Private Limited ("Opplify," "we," "us," or "our") collects, uses, and discloses your personal information when you use our website, platform, and services (collectively, the "Services"). By accessing or using the Services, you agree to this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, information we collect automatically when you use our Services, and information from third-party sources.

Account Data: Name, email address, password, phone number, and company details.
Usage Data: Information about how you interact with our platform, including IP address, browser type, device identifiers, pages visited, and timestamps.
Content: Data, text, images, and other materials you upload or generate using our AI tools.
Payment Data: Billing details collected directly by our payment processors (e.g., Razorpay, Stripe). We do not store full credit card numbers.
Connected Platform Data: If you connect a third-party account such as Google (Gmail and Google Calendar), Meta (Instagram, Facebook, Whatsapp), or Zoom, we receive only the data required to run the feature you enabled — typically your profile on that platform (name, email address, and account identifiers) and the specific records you choose to sync, such as calendar events, messages, leads, or meeting and webinar details including registrants, participants, poll responses, and Q&A. We use this data solely to provide that feature, we never sell it, we never use it for advertising, and we never use it to train artificial intelligence models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not retain or use data obtained through Google Workspace APIs to develop, improve, or train non-personalized (generalized) artificial intelligence or machine learning models. You can disconnect at any time, as described in Section 6.

3. How We Use Information

We do not use data obtained from connected platforms for advertising, for resale, or to train or improve artificial intelligence or machine learning models. We use the collected information for various purposes, including:

To provide, maintain, and improve our Services.
To process payments and manage your subscription.
To communicate with you, including sending technical notices, updates, and support messages.
To detect, prevent, and address technical issues or fraudulent activity.

4. How We Share Information

We do not sell your personal data. We may share information in the following circumstances:

Service Providers: With third-party vendors (e.g., hosting providers, payment processors like Razorpay and Stripe) who need access to perform work on our behalf.
AI Service Providers: Some features are powered by third-party AI providers — Anthropic (Claude), OpenAI, Google (Gemini, paid tier), and xAI (Grok). Data shared with these providers, including any Google user data, is processed transiently and solely to deliver the feature you requested. Each provider is accessed under commercial API terms that prohibit the use of customer data to train their models. We do not operate any self-hosted AI models.
Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. You can instruct your browser to refuse all cookies, but some parts of our Services may not function properly without them.

6. Data Retention

We retain personal data only for the periods described below.

Account data (your name, email address, organization, and settings) is retained while your account is active. If you delete your account, or if we terminate it, we permanently delete your account data within 30 days, except where a longer period is required by law.

Integration data obtained from connected third-party platforms is retained as described in Section 4.

Authentication credentials, including OAuth access tokens and refresh tokens, are retained only while the corresponding integration is connected, and are deleted immediately upon disconnection or deauthorization.

Server and application logs are retained for 30 days and then deleted.

Backups are retained for 30 days on a rolling basis, after which deleted data is purged from backup media.

7. Data Security

We implement technical and organizational measures designed to protect your personal data, including:

Encryption in transit: all traffic to and from our Services is encrypted using TLS.

Encryption at rest: application data is encrypted at rest by our managed database provider.

Access controls: database access is governed by row-level security policies, so each account can access only its own data. Internal access to production systems is limited to authorized personnel on a need-to-know basis.

Credential handling: OAuth access and refresh tokens for connected platforms are stored only on our servers, scoped to the connecting user, and are never exposed to the browser or to client-side code. Refresh tokens are single-use and rotated on every refresh. Account passwords are stored only in hashed form by our authentication provider.

Infrastructure: our application runs in isolated containers on cloud infrastructure served exclusively over HTTPS.

Integrity of inbound events: webhooks received from connected platforms are cryptographically verified before they are processed.

No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach affecting your personal data, we will notify you and any applicable regulator as required by law.

8. Your Rights and Choices

Depending on your location, you may have the right to access, correct, update, or request deletion of your personal data. You can manage most of this directly within your account settings or by contacting us.

9. International Data Transfers

Your information may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

10. Children's Privacy

Our Services are not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18.

11. Third-Party Links and Services

Our Services may contain links to other sites that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites you visit through those links.

This section does not apply to the third-party platforms you connect to Opplify. Data we receive from connected platforms is handled as described in Sections 2, 4, and 5, and remains our responsibility while we hold it. Your use of the connected platform itself is separately governed by that platform's own terms and privacy policy.

12. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: info@getopplify.com
Opplify Private Limited