Privacy Policy

OpsLoop ("we", "us") operates the OpsLoop CRM at opsloop.in. This policy explains what data we collect, why we collect it, and the rights you have over it. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. What we collect

• Account data: name, email, phone, company name when you sign up.
• CRM content: leads, contacts, notes, files, and communications that your team enters or syncs into OpsLoop.
• Usage data: device, browser, IP address, and pages visited, used for security and product improvement.
• Billing data: handled by our payment processor. We do not store full card numbers.

2. How we use it

• To provide the CRM service: routing leads, sending follow-ups, generating reports.
• To send transactional emails (account, billing, security).
• To improve the product. We never sell your CRM data.

3. Who can access your data

Your CRM data is private to your workspace. We access it only when you grant explicit support permission, or where legally required. Subprocessors (hosting, email delivery, analytics) are listed on request.

4. Google user data

If you connect a Google account to OpsLoop, we request only the Google Calendar events permission (calendar.events) together with your Google account email address. We use it solely to create, update and cancel the meetings you or your workspace's AI assistant schedule with your leads, including generating Google Meet links and sending calendar invites. We do not read your existing calendar events for any other purpose, and we do not access Gmail.

Google access tokens are stored in our database (encrypted at rest) and used only to perform these actions on your behalf. Google user data is not sold, not used for advertising, not used to train AI models, and not shared with third parties except as needed to provide this feature or when required by law. You can disconnect at any time from Settings → Email, or revoke access at myaccount.google.com/permissions; disconnecting deletes the stored tokens.

OpsLoop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Security

Data is encrypted in transit (TLS) and at rest (AES-256). Access is role-based, logged, and reviewed. We perform regular backups and run security reviews.

6. Data retention

We keep your workspace data while your subscription is active. If you cancel, we retain it for 30 days for restoration, then permanently delete it. You can export your data at any time from settings.

7. Your rights

Under the DPDP Act you can request access, correction, or deletion of your personal data. Email privacy@opsloop.in. We respond within 30 days.

8. Children

OpsLoop is a business tool not intended for users under 18.

9. Changes

We will notify workspace owners by email at least 14 days before material changes take effect.

10. Contact

Questions? Email privacy@opsloop.in.