Effective 2026-08-16
Privacy Policy
Opsillion Inc. ("Opsillion," "we," "us," or "our") operates the Opsillion platform, a SaaS analytics and operations management platform for multi-site, field-based, and distributed team operations. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have with respect to your information.
This policy applies to the Opsillion platform, including its web dashboard and analytics engine, and to our website at opsillion.com. It is written for everyone the platform touches: in this policy, "you" means the reader — whether an administrator who signs in to the dashboard, a team member who receives text notifications, or an employee whose workplace records are processed through the platform. Section 1 defines these groups and says which statements apply to each.
1. What Information We Collect
Opsillion collects different information about people depending on how they interact with the platform. Account holders are the administrators and managers who sign in to the Opsillion dashboard. Message recipients are the team members who receive operational notifications by text message; receiving messages does not require an account, and many message recipients never sign in. Where one person fills both roles — for example, a manager who uses the dashboard and also receives task notifications — each section below applies to the data collected in that capacity.
Both groups are connected to a customer organization — the business that subscribes to Opsillion. When this policy says "you," it means the reader in whichever capacity applies. Statements about contracting for services, connecting systems, providing credentials, or billing apply to the customer organization and its authorized administrators; receiving text messages creates none of those obligations.
A fourth group appears in this policy only as a boundary: end customers — the people your organization itself serves, whether patrons, clients, guests, or residents. Opsillion does not collect data about end customers as individuals: the platform is not designed to receive their names, contact lists, profiles, or purchase or service histories, and Section 4 prohibits introducing them. Operational records such as tasks, schedules, and dispatch entries may reference a service location or a job to be performed; if end-customer personal data is inadvertently introduced, Section 4 describes how we handle it.
Account Information
When you create an Opsillion account, we collect your name, email address, and company or organization name. This information is provided by you at signup and managed through our authentication provider. Receiving text notifications does not require creating an account, and we do not collect account information about message recipients unless they separately become account holders.
Technical and Diagnostic Data
When an error occurs while you are using the Opsillion dashboard, our error-reporting provider records technical details about that error — including browser type and version and the page on which it occurred — so that we can diagnose and fix the fault.
We do not currently use product analytics, session recording, heat-mapping, or advertising trackers on the dashboard.
Message recipients who interact with Opsillion only by text message never use the dashboard, and no technical or diagnostic data of this kind is collected about them.
Operational Data
The Opsillion platform connects to third-party operational systems — such as point-of-sale, scheduling, timekeeping, or project management systems — using credentials that an authorized administrator of your organization provides to us. Through this connection, we retrieve and process the organization's operational data, including labor records, scheduling data, operational and financial summaries, and task or dispatch records. This data belongs to the customer organization. We access it only to deliver the services that organization has contracted for.
The specific data elements we receive vary by organization: they depend on which systems the organization connects, what those systems make available, and the scope of the service agreement between Opsillion and the organization. We process this data as received from the connected systems and only as authorized by that agreement.
Employee Data
As part of delivering labor analytics and scheduling services, Opsillion processes personal data belonging to the people who work for your organization — employees, contractors, and other team members — including names, work schedules, clock records, and labor metrics, as retrieved from the systems you connect. The categories of employee data we process vary by organization and by connected system; not every data type exists for every person (for example, some personnel may have no timekeeping records). We process this data solely on your behalf, acting as a data processor under your instructions. Where a service agreement is executed with your organization, our obligations for employee personal data are set out there.
If you work for an organization that uses Opsillion and your personal data is processed through the platform, please contact that organization to exercise your rights with respect to that data.
Payment Data
If your organization purchases a paid subscription, billing is handled through a third-party payment processor. When you enter payment information, that processor — not Opsillion — collects, processes, and stores your full card details. Opsillion retains at most the last four digits of your card number, the card brand, and the billing address, as provided by the processor after a successful transaction. Opsillion does not store full credit card numbers.
Mobile Phone Numbers and SMS Consent
If your organization uses Opsillion's text message notifications, we collect the mobile phone number of each person designated to receive them, together with a consent record. The consent record always includes the date and time consent was given and the exact wording the recipient agreed to; depending on how consent was captured, it may also include the recipient's opt-in reply, the identity of the administrator who recorded the consent, or a signed consent form provided by your organization. We also retain the content of messages we send, the content of replies we receive (including any photos or other media attached to a reply), and delivery status information returned by our messaging provider. Reply messages should be limited to task-related content and should not include sensitive personal information.
Mobile phone numbers reach us only from your organization — entered by an authorized administrator or retrieved from a system your organization connects — and only for people your organization designates to receive notifications. Before task notifications begin, we send the recipient a single opt-in invitation message; no further messages are sent unless the recipient confirms by reply. We never purchase, rent, append, or otherwise obtain mobile phone numbers from third-party lists.
2. How We Use Your Information
We use the information we collect to:
- Deliver the Opsillion platform services — including ingesting your operational data, running analytics, generating reports, and making them available through the Opsillion dashboard.
- Provide AI-powered analytics and recommendations — using third-party AI services to analyze patterns in operational data and generate recommendations for reducing labor waste, controlling discounting, and improving dispatch and scheduling efficiency. Our use of AI services is described in Section 3.
- Provide customer support — responding to questions, diagnosing technical issues, and communicating about your account.
- Send account and billing communications — invoices, payment confirmations, subscription renewal reminders, and security notifications related to your account.
- Improve our services — using anonymized and aggregated data (data that cannot be linked back to you or any of your employees) to understand platform performance and identify improvements.
- Ensure security and prevent fraud — monitoring for unauthorized access, suspicious activity, and technical anomalies that could affect the integrity of the platform or your data.
3. Artificial Intelligence Processing
How We Use AI
Opsillion uses third-party artificial intelligence services as part of delivering, building, and operating the Opsillion platform. AI tools assist in analyzing operational patterns, identifying anomalies, and generating recommendations to reduce financial leakage across labor, discounting, inventory, and dispatch operations.
What Data May Be Included in AI Processing
AI processing operates on the same operational and workforce data described in Section 1 — labor metrics, operational and sales performance data, task and dispatch records, and scheduling data. The personal information involved is limited to what the specific analysis requires: an analysis of aggregate labor patterns uses aggregated metrics, while an operation such as matching task replies to a team roster may require a specific identifier, such as a phone number. Categories of data the platform does not accept at all (Section 4) cannot appear in AI processing.
AI service providers process this data as sub-processors on Opsillion's behalf, as described in Section 5. Commitments about AI processing specific to your organization, if any, are set out in the service agreement between Opsillion and your organization.
4. Data We Do Not Accept or Process
Opsillion's platform is designed to process operational and workforce data for multi-site, field-based, and distributed team operations. We do not accept, store, or process the following categories of data:
| Prohibited Category | Examples |
|---|---|
| Government-issued identification numbers | Social Security Numbers, passport numbers, driver's license numbers |
| Protected health information (PHI) | Medical records, health conditions, insurance information, workers' compensation diagnoses |
| Biometric identifiers | Fingerprints, facial recognition geometry, iris scans, voiceprints |
| Full financial account numbers | Full credit card numbers, bank account and routing numbers |
| Individual end-customer records | Names, contact lists, loyalty profiles, and purchase or service histories of the people your organization serves — patrons, clients, guests, or residents |
| Data relating to individuals under age 13 | Any personal data of children under 13, per COPPA |
| Genetic data | Genetic test results or genome data |
| Immigration or work authorization status | Visa status, work authorization documentation |
If you believe that any of the above categories of data have been inadvertently introduced into your Opsillion account, contact us immediately at privacy@opsillion.com. We will delete the data promptly and notify you of the outcome.
Customers are responsible for ensuring that data they provide access to through third-party system credentials does not include the above prohibited categories. See Section 5 of the Terms of Service for customer obligations regarding prohibited data.
5. How We Share Your Information
We do not sell your personal information. We do not share your personal information with third parties for advertising or marketing purposes.
We share information only in the following circumstances. The first item below addresses mobile information specifically, including what we do not share:
Mobile Information and Text Messaging
Mobile phone numbers and SMS consent information are collected solely to deliver operational notifications you have asked to receive. We do not sell, rent, or share mobile phone numbers or SMS consent information with third parties or affiliates for their own marketing or promotional purposes. No mobile information is shared with any third party for any purpose other than the delivery of the messages you have consented to receive, which requires transmitting your number to our messaging provider.
Message and data rates may apply. Message frequency varies. Reply HELP for help or STOP to cancel at any time.
Sub-Processors
We use a limited set of third-party service providers (sub-processors) that process data on our behalf as part of delivering the Opsillion platform. These providers include infrastructure and hosting providers, our authentication provider, our payment processor, our error monitoring service, our email delivery service, and the AI service providers described in Section 3 above. These providers are contractually bound to handle data only as directed by us. A list of our service providers is available on request at privacy@opsillion.com.
Legal Requirements
We may disclose your information if required to do so by law, court order, or government request. Where permitted by law, we will notify you before making such a disclosure.
Business Transfers
If Opsillion is acquired by or merged with another company, your information may be transferred to the acquiring entity. Any acquirer is required to honor the privacy commitments in this policy. We will notify account holders of any such transfer.
6. Data Retention
We retain information only as long as reasonably necessary for the purposes described in this policy and to meet legal, accounting, and compliance obligations. When your organization's relationship with Opsillion ends, operational and employee data is deleted within a reasonable period; you may request an export of your data before deletion occurs.
7. Data Security
We protect your information using industry-standard safeguards, including encryption of data in transit and at rest, role-based access controls that restrict data access to authorized personnel and to the account that owns the data, and audit logging of significant system events.
No security measure is perfect. If you believe your account has been compromised, contact us immediately at support@opsillion.com.
8. Your Rights
You have the following rights with respect to your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request a machine-readable export of your personal data.
- Objection: Object to processing of your personal information in certain circumstances.
To exercise these rights, contact us at privacy@opsillion.com. We will respond within a reasonable time. Note that some rights may be limited where we have a legitimate legal basis for processing or where fulfilling the request would conflict with our obligations to others.
Text Message Opt-Out
You may stop receiving text messages from Opsillion at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message we send. We will send one confirmation message and then send you no further messages. You may resubscribe by replying START. Reply HELP to any message, or email support@opsillion.com, for assistance. Opting out of text messages does not close your Opsillion account or affect your access to the platform.
9. Children's Privacy
The Opsillion platform is a business-to-business service not directed at individuals under the age of 13. We do not knowingly collect personal information from individuals under 13. If you believe we have inadvertently collected such information, contact us at privacy@opsillion.com and we will delete it promptly.
10. Changes to This Policy
If we make material changes to this Privacy Policy, we will notify account holders by email at least 30 days before the changes take effect, and we will update the effective date on this document. Your continued use of the Opsillion platform after the effective date constitutes acceptance of the updated policy.
For non-material changes (such as clarifications or corrections that do not affect how we use your data), we will update the document and the effective date without prior notice.
11. Contact Us
For privacy-related questions, rights requests, or concerns:
Email: privacy@opsillion.com