We collect several types of information to provide and improve our services:

• Account Information: When you create an account, we collect your name, email address, company information, and selected authentication method (including Google One Tap or Microsoft Outlook authentication).
• Email Integration Data: When you connect your Gmail or Outlook account, we collect email metadata, contact information, and campaign data necessary to provide our automation services. We do not access the content of your personal emails unless explicitly required for service functionality.
• Usage Data: Information about how you interact with our platform, including features used, time spent, actions taken, and analytics data collected through PostHog and Google Tag Manager.
• Device Information: Details about the devices you use to access our services, including IP address, browser type, operating system, and device identifiers.
• Sales Data: Information about your leads, campaigns, and sales activities that you choose to upload or create on our platform, including LinkedIn profile data captured through our browser extension.
• Communication Data: Records of your interactions with our support team, feedback, survey responses, and marketing communications preferences.

We use the information we collect for the following purposes:

• To provide, maintain, and improve our sales automation services
• To authenticate your identity through Google One Tap, Microsoft Outlook, or other authentication methods and personalize your experience
• To process transactions, manage your account, and provide customer support
• To analyze usage patterns and optimize our platform using PostHog analytics
• To send you promotional communications and product updates (with your consent)
• To integrate with your Gmail and Outlook accounts for email automation
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations and enforce our terms of service
• To conduct business analytics and improve our AI-powered features

We process your personal data based on the following legal grounds:

• Consent: For marketing communications, promotional emails, and non-essential cookies. You can withdraw your consent at any time by contacting us or using the unsubscribe links in our emails.
• Contract Performance: To provide our sales automation services, process payments, and fulfill our obligations under our terms of service.
• Legitimate Interest: For platform analytics, security monitoring, fraud prevention, and improving our services. We ensure our interests do not override your privacy rights.
• Legal Obligation: To comply with applicable laws, regulations, and legal processes.

Protecting your data is our priority. We implement robust security measures, including:

• Industry-standard encryption for data transmission and storage
• Regular security assessments and penetration testing
• Strict access controls and authentication procedures
• Continuous monitoring for suspicious activities
• Regular backups and disaster recovery protocols

While we implement these safeguards, no system is 100% secure. We encourage users to maintain strong passwords and follow security best practices.

We limit sharing of your personal information to the following scenarios:

• Email Service Providers: We integrate with Google Gmail API and Microsoft Outlook API to provide email automation services. These integrations are subject to Google's and Microsoft's respective privacy policies and API terms of service.
• Analytics Providers: We use PostHog for product analytics and Google Tag Manager for website analytics. These services help us understand user behavior and improve our platform.
• Service Providers: We may share data with trusted third-party service providers who help us operate our platform, process payments, and provide customer support. These providers are bound by confidentiality agreements and data processing agreements.
• Business Transfers: If Oppora.ai is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Compliance: We may disclose information if required by law, legal process, or governmental request.
• With Your Consent: We may share information for purposes other than those described here when we have your explicit consent.

Depending on your location, you may have the following rights regarding your data:

• Right of Access: Request and receive a copy of your personal data we hold about you
• Right of Rectification: Correct inaccurate or incomplete personal information
• Right of Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Limit how we process your personal data in certain situations
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another service
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time using unsubscribe links or by contacting us
• CCPA Rights (California Residents): Right to know what personal information is collected, right to delete personal information, right to opt-out of sale of personal information, and right to non-discrimination

To exercise these rights, please contact us at [email protected] or [email protected]. We will respond to your request within 30 days (or as required by applicable law). You may also use the unsubscribe links in our marketing emails to opt out of promotional communications.

Our website uses cookies and similar technologies to enhance your experience and collect information about your usage patterns. We use:

• Essential Cookies: Required for basic functionality and security features.
• Analytical Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Remember your preferences and personalization choices.
• Marketing Cookies: Help us deliver relevant advertisements and measure their effectiveness.

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our website.

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States where our servers are located. We ensure appropriate safeguards are in place for such transfers:

• Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for transfers to countries without adequate data protection.
• Adequacy Decisions: Some countries have been deemed adequate by the European Commission for data transfers.
• Technical Safeguards: All data transfers are encrypted and subject to strict security measures.
• Third-Party Compliance: Our service providers (Google, Microsoft, PostHog) maintain their own compliance certifications and data protection measures.

We retain your personal information for specific periods based on the type of data and its purpose:

• Account Data: Retained for the duration of your account plus 3 years for legal and business purposes
• Email Integration Data: Retained while your account is active and for 1 year after disconnection
• Usage Analytics: Aggregated data retained for up to 2 years for platform improvement
• Marketing Data: Retained until you opt out or for 3 years of inactivity
• Support Communications: Retained for 3 years for quality assurance and legal compliance
• Legal Requirements: Some data may be retained longer to comply with applicable laws

When we no longer need your information, we will securely delete or anonymize it. You can request deletion of your data at any time by contacting us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you of significant changes through our platform or email
• Provide you with an opportunity to review and accept changes
• Maintain archived versions for your reference

We encourage you to review this policy periodically to stay informed about how we protect your information.