Privacy
Privacy at Opsia Cloud
Your trust depends on how we handle data. We design Opsia Cloud so privacy controls are embedded in every workflow.
This policy explains the personal data we collect, how we use it, and the safeguards we maintain. It also outlines your choices and rights under applicable privacy laws.
Last updated October 1, 2024
Opsia Inc. operates Opsia Cloud, a managed cloud platform and suite of services. We only collect personal data that helps us deliver, secure, and enhance these services.
We act as a data controller for information about our customers and prospects, and as a data processor when managing tenant data on your behalf. Contract terms define those responsibilities.
Personal data we process
We limit collection to information that keeps your services running smoothly and securely.
Account information
Names, business contact details, language preferences, authentication identifiers, and tenant configuration.
Usage telemetry
Event logs, device metadata, IP addresses, and operational metrics required to monitor platform health.
Support interactions
Tickets, chat transcripts, and call notes that help us resolve issues and improve service quality.
Billing records
Subscription selections, invoices, and payment confirmations processed securely by trusted payment partners.
How we use personal data
Our processing activities align with contracts, legitimate interests, and legal obligations.
Deliver and support services
Provision tenants, authenticate users, fulfill requests, and provide troubleshooting assistance.
Secure the platform
Detect anomalies, investigate incidents, and enforce access policies to protect your data.
Improve experiences
Analyze aggregated usage, run satisfaction surveys, and evolve the roadmap responsibly.
Comply with law
Maintain records, meet financial reporting obligations, and respond to lawful requests.
Legal basis
Depending on the context, we rely on different legal grounds:
Contractual necessity
Processing required to deliver services described in our agreements.
Legitimate interests
Measures that do not override your rights, such as security monitoring or product research.
Consent
Marketing communications and optional integrations are activated with your explicit consent.
Legal obligation
Retention of invoices, tax documents, or compliance evidence when laws require it.
Data retention
We keep personal data only as long as necessary to meet the purposes in this policy or to satisfy legal requirements. Tenant data is retained based on contract terms, after which it is deleted or anonymized using certified processes.
Your privacy rights
If you reside in a region with privacy regulations (such as Quebec Law 25, PIPEDA, GDPR), you may:
Access and portability
Request a copy of your personal data or ask for it in a structured, machine-readable format.
Correction
Update inaccurate or incomplete information we hold about you.
Deletion
Ask us to erase personal data when it is no longer required or when consent is withdrawn.
Restriction & objection
Limit certain processing or object to uses based on legitimate interests.
Withdraw consent
Opt out of marketing or disable integrations that depend on consent at any time.
Security commitments
Opsia Cloud uses encryption in transit and at rest, hardened infrastructure, least-privilege access, and ongoing monitoring. Our incident response process is designed to investigate and notify you about events that impact your data.
Policy updates
We may revise this policy to reflect product changes or legal requirements. We will post updates here, adjust the effective date, and notify account owners when updates are significant.
Need an offline copy?
Contact our team to request an offline copy of this policy.
Privacy questions & requests
Reach our privacy team using the contact methods below. We respond to verified requests within 30 days.
Work with a privacy-first cloud partner
Opsia Cloud blends governance, compliance, and human support so your teams can move quickly without sacrificing trust.