Privacy Policy

Who this policy covers

This policy applies to opid.ca and to mobile and web apps that Opid Technologies operates using OPID Framework, unless an app or customer agreement provides a more specific privacy notice. Each business customer decides what information its app handles, who can use it, and how the information is used in that business. That customer is responsible for giving its staff and other users any notices required for its use of the app.

When we handle information inside a customer’s app, we do so to provide and support the service for that customer, under the customer’s instructions and agreement. The customer’s own privacy notice and agreements may also apply. This policy does not replace those notices.

Information we handle

The information involved depends on how a customer configures its app. It may include:

• Work identity details such as a person’s name, work email, role, or access permissions, supplied by the customer or its external sign-in service.
• Business information people enter or access in the app, such as tasks, reports, customer or supplier records, work updates, attachments, and operational records.
• Technical information needed to run and protect an app, such as app version, device and browser details, connection information, diagnostic events, and security logs.
• Push-notification details, such as a device token, if a customer enables push notifications.
• Information people choose to send us through our website or when they contact our support team.

Our website uses Google Analytics to understand site visits and usage. Website analytics may involve device, browser, interaction, and network information. Google’s handling of that information is also subject to Google’s terms and privacy information.

How we use information

We use information to provide, host, maintain, secure, back up, troubleshoot, and support the website and customer apps; authenticate authorized users; carry out the workflows a customer requests; communicate with customers; and meet legal obligations. We use website analytics to understand and improve our website.

A customer may choose to enable an AI-assisted automation in its app. When enabled, relevant customer information may be sent to a third-party AI provider selected for that feature so it can carry out the requested task. The customer controls whether the feature is enabled and how it is used. The provider used depends on the customer’s app configuration and agreement. Ask your company administrator which AI features and providers are used in your app.

Your company’s data

The company using an OPID app retains its rights to the business information stored in that app. Opid Technologies does not claim ownership of a customer’s business records or the content its users enter. We handle that information to provide the service and as set out in our agreement with the customer.

A company’s ownership of its business information does not remove privacy rights that individuals may have over their personal information. If you use an app for work, contact your employer or the company that gave you access for questions about its records or how it uses them.

When information is shared

We may make information available to the customer that controls the app; our authorized personnel who need it to provide support; and service providers that help us host, secure, maintain, or deliver the app and any customer-enabled integrations or AI features. Those providers may process information only as needed for their services and under applicable terms. We may also disclose information when required by law or when reasonably necessary to protect people, services, or rights.

We do not sell customer app data. We do not use customer app data to serve advertising. Where a customer connects another service, that service’s own terms and privacy policy apply to its handling of information.

Security and storage

We use administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, or misuse. Access is limited to people and service providers who need it to deliver or support the service. No online service can promise that every risk is eliminated. Information may be processed or stored in Canada or other locations where our service providers operate, subject to applicable law and the customer agreement.

Account and data deletion

OPID Framework user access is managed by the business using the app, often through that business’s external sign-in service. Opid Technologies does not control that company’s employee accounts.

1. To request account or data deletion: contact your company’s app administrator. The administrator can email info@opid.ca from an authorized company address with the app name and the account or data to be deleted. Do not include passwords or unnecessary sensitive records.
2. To remove sign-in access: ask your company administrator or IT team to disable your access through the company’s sign-in service.

Disabling a sign-in account stops access but does not by itself delete business records in the company’s app. The customer decides which business records to delete and instructs OPID about information held in the service. We verify the administrator’s authority and handle the request under the customer agreement and applicable law. Information that must be retained for legal, security, or dispute purposes will be restricted and kept only as long as required. We will confirm the request and tell the administrator if more information or time is needed.

Access, correction, and questions

You may ask about personal information Opid Technologies holds about you, request a correction, or raise a privacy concern by contacting us below. For information held in a company’s app, contact that company first. We will work with the customer as appropriate and respond under applicable privacy law.

Children

OPID Framework is business software intended for companies and their authorized workforce, not a service directed to children. Customers are responsible for configuring access appropriately for their operations.

Changes to this policy

We may update this policy as our services or legal requirements change. We will post the updated version here and change the effective date above. Material changes may also be communicated to affected customers.