1. Who we are
OpraOne is a workspace for running a product business — customers and leads, price books, sales orders, warehouse stock, purchasing, day-to-day accounts and people operations such as attendance, leave, payroll and expenses. It is provided by OpraOne Inc. ("OpraOne", "we", "us").
This policy covers our website at opraone.com and the OpraOne application at app.opraone.com (together, the "Service"). Use of the Service is also governed by our Terms of Service.
2. Information we collect
Information you give us
- Demo and contact requests — your name, work email, phone number (optional), company name, business type, the modules you are interested in and any message you send.
- Account and workspace details — when you register, the name, email address, phone number and company details of the workspace owner and any team members you invite.
- Billing details — plan, billing contact and tax details. Card and bank payments are handled by our payment processor; we do not store full card numbers.
- Support conversations — what you tell us when you email or speak with our team.
Information collected automatically
- Device and usage data — IP address, browser type, the page you came from and the pages you visit.
- Approximate country — we look up your country from your IP address using a database hosted on our own servers, so we can show prices in your local currency. We do not use this to track your precise location.
- Cookies and similar technologies — described in section 6.
3. How we use information
- To provide, operate and maintain the Service and your workspace.
- To respond to demo requests, enquiries and support questions.
- To process subscriptions, payments, invoices and taxes.
- To show prices in your local currency and content relevant to your region.
- To keep the Service secure — for example, preventing spam, abuse and unauthorised access.
- To understand how the website is used and improve it.
- To send service notices, and — where you have agreed or the law allows — product updates. You can opt out of marketing emails at any time.
- To comply with legal obligations and enforce our terms.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and securing the Service, your consent (which you can withdraw at any time), and compliance with legal obligations.
4. Data inside your workspace
The contacts, leads, products, price books, orders, supplier and accounting records you store in OpraOne belong to you. For that data, your business decides what is collected and why, and we process it only on your behalf to provide the Service — not for our own marketing, and we never sell it.
If you are a customer or contact of a business that uses OpraOne and want to access or correct your information, please contact that business directly. We will assist them in responding to your request.
If your workspace uses Opra AI or connects third-party integrations (such as Google, Microsoft, Meta, Slack or Zoom), the relevant workspace data is processed to deliver those features, and the third party's own terms and privacy policy also apply to data you send to it.
5. Employee & HR data
If your business uses OpraOne's people modules, your workspace may hold information about your employees and job candidates, for example:
- Employment details — name, contact details, job title, department, manager, joining date and employment documents.
- Attendance and time — punch-in and punch-out times, shifts and rosters, regularization requests and working hours.
- Leave — leave balances, requests and approvals.
- Payroll and benefits — salary structure, payslips, bank account details, tax and statutory identifiers, and benefit enrolments.
- Expenses — expense claims and the receipts attached to them.
- Performance — goals, reviews and feedback.
- Recruitment, onboarding and exit — CVs and application details, onboarding checklists and exit records.
The employer decides what is collected and how it is used, and is responsible for telling its employees and candidates about it. We process this data only on the employer's instructions to provide the Service. Access inside the workspace follows the roles and permissions the employer sets, so, for example, salary and bank details can be limited to HR and finance users.
If you are an employee or candidate and want to see, correct or delete your information, please contact your employer first. We will help them respond.
8. International transfers
Our team and service providers may process information in countries other than the one you live in. Where we transfer personal information across borders, we take steps required by applicable law to keep it protected.
9. How long we keep data
- Workspace data is kept while your subscription is active. After your account is closed, you can export your data, and we delete it within a reasonable period unless we must keep it by law.
- Employee and HR records are kept for as long as the employer keeps its workspace or until it deletes them, subject to the record-keeping periods that employment and tax laws require of the employer.
- Demo and contact requests are kept for as long as needed to respond to you and follow up, and then deleted or anonymised.
- Billing records are kept for as long as tax and accounting laws require.
10. Security
We protect information with encrypted HTTPS connections, role-based access permissions inside each workspace, audit logs of important changes, and restricted internal access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires.
11. Your rights & choices
Depending on where you live — including under India's Digital Personal Data Protection Act, 2023 and, where applicable, the EU/UK GDPR — you may have the right to:
- Access the personal information we hold about you and get a summary of how it is processed.
- Correct, complete or update inaccurate information.
- Ask us to delete your information.
- Withdraw consent you have given, without affecting processing that happened before.
- Object to or restrict certain processing, and ask for a copy of your data in a portable format.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Raise a grievance with us, and complain to your data protection authority.
To use any of these rights, email support@opraone.com. We may need to verify your identity before acting on a request.
12. Children
OpraOne is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy as the Service or the law changes. We will change the "Last updated" date above, and for significant changes we will notify workspace owners by email or inside the app before they take effect.
14. Contact & grievances
Questions, requests or complaints about privacy can be sent to:
We aim to acknowledge requests promptly and resolve grievances within the time required by applicable law.